$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa File: 2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa (raw, json) Hash identifier: ofCtqK4Nu3zZUqZH9zYkMS1ij5oKVC8uD6v9trHJnfM= Subject key identifier: 1B:43:E1:DE:C3:6E:79:45:CF:0F:2A:F0:2C:AF:F9:FA:AD:AC:36:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FB79836842399C90E55C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.0.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:b7:98:36:84:23:99:c9:0e:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f5edd02f-f055-4af5-889e-bf16e80b975e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:61:e9:89:6b:97:ee:ba:fc:60:e8:43:3c: 83:bd:a0:e2:0f:53:a0:f2:aa:bd:31:a9:d7:22:4f: 58:c2:9c:6b:fd:58:8b:3e:5c:36:bf:05:c3:e3:03: 5d:f6:fe:10:c8:da:33:9b:97:b9:60:33:01:89:95: 62:14:5a:d3:e7:89:c9:26:13:dc:dc:54:f3:39:32: b6:48:2b:f1:17:f8:a6:33:64:a4:1c:b4:8c:3c:55: 41:b4:8e:e7:97:2c:81:93:34:f6:b5:1e:4b:c5:90: 9d:1f:77:bb:42:be:2d:13:ed:46:d7:d0:bd:2f:8f: 59:37:11:00:f6:ff:0e:0f:f8:99:ca:cd:11:8b:09: 65:07:60:1c:4c:c7:80:2f:5f:7c:c0:ac:c4:0c:fb: b1:b9:e0:64:11:93:45:14:7f:87:9d:45:95:69:a1: 51:cd:81:aa:18:87:8e:b3:2d:e6:b0:2c:bc:73:29: f7:c7:1d:1d:3b:e9:ce:3b:a4:c8:61:33:06:ca:26: 3f:23:25:e9:a0:f9:54:64:79:3b:46:bf:fa:2d:92: b4:ed:28:78:58:cc:e8:b7:35:44:fe:70:59:7e:dc: e6:e4:f1:d3:80:0a:d8:78:3e:81:7f:b2:10:c9:8c: dd:d2:01:dc:07:b8:b4:c1:fa:96:b1:12:4d:07:78: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:E1:DE:C3:6E:79:45:CF:0F:2A:F0:2C:AF:F9:FA:AD:AC:36:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f2:69:b5:b7:e1:36:7f:13:3a:49:d6:f7:18:42:32:73:50: 00:21:ef:59:e5:cd:2d:2b:8c:ae:17:8c:84:3f:63:27:62:d0: 27:fa:81:37:0c:53:ce:f8:34:ae:d5:0c:47:fd:a7:fc:ab:31: 1e:eb:07:c7:74:5b:c3:a0:39:58:d8:c8:d2:d7:a9:a1:70:8f: 0d:a1:1c:ff:ff:a6:e5:5d:f2:a2:bf:fb:66:60:c8:50:b2:5a: a1:82:51:03:a2:36:d9:4b:13:f2:8a:42:8b:a9:94:6d:9d:24: 7c:63:a7:5a:32:d0:1e:59:21:01:89:8a:80:e9:0f:4c:a4:3c: df:94:e8:39:6c:64:60:6f:7e:5a:ad:4e:38:dd:5d:1e:18:cc: ac:a8:bc:c5:9e:d0:44:fe:cc:91:62:63:6e:4a:d7:cf:19:87: 64:a6:79:79:43:00:3b:77:94:b4:60:58:a2:e4:c3:47:e5:38: ef:62:72:33:ee:67:dd:24:75:b9:6b:92:f0:db:ae:8a:8a:06: 53:af:71:1e:aa:ed:16:d4:ce:97:1f:0b:1b:73:05:c0:79:6f: 5b:35:e1:fb:2d:1e:97:e9:98:90:8a:ee:eb:90:b0:36:06:2f: 5d:e1:8a:a5:18:85:5b:f7:c9:11:8a:26:2c:c0:5f:22:dd:cd: 47:eb:a5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7eYNoQjmckOVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjVlZGQwMmYtZjA1NS00YWY1LTg4OWUtYmYxNmU4MGI5NzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYth6Ylrl+66/GDoQzyDvaDiD1Og8qq9ManX Ik9Ywpxr/ViLPlw2vwXD4wNd9v4QyNozm5e5YDMBiZViFFrT54nJJhPc3FTzOTK2 SCvxF/imM2SkHLSMPFVBtI7nlyyBkzT2tR5LxZCdH3e7Qr4tE+1G19C9L49ZNxEA 9v8OD/iZys0RiwllB2AcTMeAL198wKzEDPuxueBkEZNFFH+HnUWVaaFRzYGqGIeO sy3msCy8cyn3xx0dO+nOO6TIYTMGyiY/IyXpoPlUZHk7Rr/6LZK07Sh4WMzotzVE /nBZftzm5PHTgArYeD6Bf7IQyYzd0gHcB7i0wfqWsRJNB3iTKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtD4d7DbnlFzw8q8Cyv+fqtrDbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjkyM2NjYmEtNWZjMi0z N2E3LWFiMzYtYTk1NWU2MWU3YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjyabW34TZ/EzpJ1vcYQjJzUAAh71nlzS0rjK4XjIQ/Yydi0Cf6gTcM U874NK7VDEf9p/yrMR7rB8d0W8OgOVjYyNLXqaFwjw2hHP//puVd8qK/+2ZgyFCy WqGCUQOiNtlLE/KKQouplG2dJHxjp1oy0B5ZIQGJioDpD0ykPN+U6DlsZGBvflqt TjjdXR4YzKyovMWe0ET+zJFiY25K188Zh2SmeXlDADt3lLRgWKLkw0flOO9icjPu Z90kdblrkvDbroqKBlOvcR6q7RbUzpcfCxtzBcB5b1s14fstHpfpmJCK7uuQsDYG L13hiqUYhVv3yRGKJizAXyLdzUfrpVc= -----END CERTIFICATE-----Generated at Thu Mar 19 06:56:25 2026 by rpki-client