$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa File: 2671cac0-3285-328a-a679-36e51060176e.roa (raw, json) Hash identifier: T1/MjbESp+qegKlqA67ZPAQAAshVPieXu+ipWdG81ao= Subject key identifier: E5:10:D7:2A:74:BF:22:BB:8A:4E:D5:C9:1D:E0:A7:52:45:18:48:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F99BFD47E7399E935A240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.101.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:99:bf:d4:7e:73:99:e9:35:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f86d6339-b922-4f51-967c-5b9cfadbfab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:21:aa:f2:2d:a0:ff:27:92:16:32:f3:9b: 9b:d8:6a:56:6c:72:f5:d9:5c:8c:c4:a4:ab:b2:d1: 58:10:84:38:c1:01:0f:ae:d4:0f:e6:5f:1a:4a:40: 9e:0b:c3:f1:8a:bc:6d:5f:17:0e:1f:e2:cf:d6:ff: 78:a4:d0:28:70:83:be:9f:c5:68:43:5c:a4:e8:62: 13:9e:09:e6:f4:9f:80:66:39:76:98:82:a8:54:20: f8:ea:24:02:85:fc:1a:8c:77:c2:eb:39:5a:c7:8c: 41:54:9b:2a:26:2e:b9:56:28:12:6a:13:96:09:d0: ca:c4:d6:e8:72:87:ac:7b:c1:c7:8d:15:19:37:70: bb:dc:5b:96:0a:b5:fd:59:26:6b:93:24:09:b9:cf: 9d:1d:81:a4:6d:88:c0:45:d9:69:39:de:33:27:56: 0f:34:b7:0c:11:d8:e1:29:bf:77:ee:c7:7b:b4:ab: 3c:ab:47:56:d5:b7:5b:e7:d5:7b:9d:4e:0a:02:39: cb:3a:c4:93:94:cf:fe:60:7c:6c:c4:34:2e:2d:51: cb:67:f3:26:ae:6e:57:b2:e2:18:1a:c2:48:32:ae: ef:e1:50:ed:20:92:49:81:77:c4:57:fe:a3:af:a7: bc:fe:31:f6:ba:69:0e:aa:ce:1b:83:e7:3a:8c:1e: ec:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:10:D7:2A:74:BF:22:BB:8A:4E:D5:C9:1D:E0:A7:52:45:18:48:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6e:0f:40:bd:2c:c9:77:ad:29:9b:90:ff:2f:f2:1b:75:f8: 50:b9:df:00:9b:05:69:53:07:57:3b:43:9c:f7:35:cf:55:09: 7a:3a:33:06:78:6c:23:62:46:75:97:b9:06:79:e3:b8:11:44: 94:f6:2a:12:c0:ac:d1:d5:71:0f:70:48:7c:4f:de:4e:12:1a: 8c:f0:b9:bc:44:e9:b1:b4:a8:51:30:b8:79:3c:0d:16:2d:aa: 5e:c0:9f:f9:af:0b:4d:8a:0d:59:03:ff:c4:fb:39:c4:5f:56: 71:a3:59:9f:7c:e1:26:44:b6:69:95:d4:65:a9:9c:a0:70:9f: ff:eb:dd:4c:4c:a6:e0:16:23:2e:27:56:9b:29:8e:1f:f5:cf: 52:54:0d:62:6a:6e:18:4f:36:12:db:17:6b:34:6f:e2:dd:72: d4:7d:37:3e:82:1e:dc:7f:de:0a:8d:b5:87:29:fb:23:37:70: 12:ef:3a:63:62:2a:10:81:f1:95:8a:37:ad:e2:fe:4c:40:fa: 13:88:2c:3c:ca:49:1a:e8:f3:b2:f1:2a:62:fd:ab:a4:1a:91: 9c:28:ae:5a:c5:2e:a7:bc:8c:5d:d9:93:0b:a8:63:51:31:e5: f0:02:cb:69:07:72:f8:31:77:91:e9:80:0a:54:a6:7c:28:93: 02:aa:f8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5m/1H5zmek1okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Zjg2ZDYzMzktYjkyMi00ZjUxLTk2N2MtNWI5Y2ZhZGJmYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygQhqvItoP8nkhYy85ub2GpWbHL12VyMxKSr stFYEIQ4wQEPrtQP5l8aSkCeC8PxirxtXxcOH+LP1v94pNAocIO+n8VoQ1yk6GIT ngnm9J+AZjl2mIKoVCD46iQChfwajHfC6zlax4xBVJsqJi65VigSahOWCdDKxNbo coese8HHjRUZN3C73FuWCrX9WSZrkyQJuc+dHYGkbYjARdlpOd4zJ1YPNLcMEdjh Kb937sd7tKs8q0dW1bdb59V7nU4KAjnLOsSTlM/+YHxsxDQuLVHLZ/Mmrm5XsuIY GsJIMq7v4VDtIJJJgXfEV/6jr6e8/jH2umkOqs4bg+c6jB7sAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUQ1yp0vyK7ik7VyR3gp1JFGEiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjY3MWNhYzAtMzI4NS0z MjhhLWE2NzktMzZlNTEwNjAxNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJuD0C9LMl3rSmbkP8v8ht1+FC53wCbBWlTB1c7Q5z3Nc9VCXo6MwZ4 bCNiRnWXuQZ547gRRJT2KhLArNHVcQ9wSHxP3k4SGozwubxE6bG0qFEwuHk8DRYt ql7An/mvC02KDVkD/8T7OcRfVnGjWZ984SZEtmmV1GWpnKBwn//r3UxMpuAWIy4n Vpspjh/1z1JUDWJqbhhPNhLbF2s0b+LdctR9Nz6CHtx/3gqNtYcp+yM3cBLvOmNi KhCB8ZWKN63i/kxA+hOILDzKSRro87LxKmL9q6QakZworlrFLqe8jF3ZkwuoY1Ex 5fACy2kHcvgxd5HpgApUpnwokwKq+Ik= -----END CERTIFICATE-----Generated at Thu Mar 19 05:39:18 2026 by rpki-client