$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b4ad690-1de8-3372-8439-8532b6d41655.roa File: 2b4ad690-1de8-3372-8439-8532b6d41655.roa (raw, json) Hash identifier: Rgzh5EZHYoEOnrwSpi9NfPCTz9TntfTmtosjusrozcM= Subject key identifier: 5C:E9:F8:D6:94:BD:F3:5B:10:DE:72:59:0E:64:26:0A:69:07:81:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FF68DF7AE2ABE9E1E2A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b4ad690-1de8-3372-8439-8532b6d41655.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.101.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f6:8d:f7:ae:2a:be:9e:1e:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f1c409e8-cc6c-4593-9e7c-4ddb4a3da97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:0e:05:53:aa:7e:fe:78:be:5d:56:17:7f: ea:f0:cf:24:df:c1:41:46:0a:9f:a4:79:2b:a5:9a: 76:1d:9c:33:54:0f:2d:fc:8e:72:c7:36:8a:67:b8: b2:63:7a:21:56:2b:3b:b1:25:de:72:ac:4e:03:c0: 99:73:23:21:c6:19:16:e3:88:f2:8e:70:fb:6c:3c: 86:82:68:d2:9d:23:e0:e3:5a:1c:c4:8f:b5:e1:d1: 53:f8:dd:41:7d:6b:25:d6:92:3d:9e:7d:29:c7:c5: fb:16:74:b6:4e:7d:a8:09:f2:03:a7:e2:81:a5:24: 88:f4:fe:1f:4a:7d:b7:cc:51:32:70:36:28:c2:3e: 2b:3d:54:6f:7c:c6:2f:b2:1e:46:d8:f2:5b:d7:ce: 0a:40:a1:df:ba:ff:89:ef:23:e8:71:ab:cd:43:66: d9:47:90:4b:e9:21:a6:00:54:01:4f:45:47:50:52: d7:e3:dc:6d:6f:f5:8d:6b:0c:fd:ef:61:3e:6f:e2: 6d:b1:94:d5:12:7c:87:a1:de:57:03:0b:41:d8:7b: cc:74:63:18:c9:b1:17:ca:92:70:f3:55:03:45:f1: 0f:0c:84:f7:fa:3e:c8:3f:e3:2f:6d:b9:39:1d:f0: 34:15:53:5f:ca:fc:c1:79:f2:bd:72:02:51:62:ea: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E9:F8:D6:94:BD:F3:5B:10:DE:72:59:0E:64:26:0A:69:07:81:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b4ad690-1de8-3372-8439-8532b6d41655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e6:2e:df:9b:7e:5f:4e:11:3d:be:de:07:23:ec:dc:a0:5c: 20:16:5a:ed:56:02:34:5a:50:5e:e5:b0:af:06:cd:7d:e1:ab: f8:e2:40:c5:e7:04:e0:44:41:f5:28:51:2c:94:47:5c:3d:66: db:71:6b:59:4e:5b:57:6f:29:5c:c3:60:e7:0d:d6:9f:24:04: 07:2f:f9:f5:27:08:91:1f:b8:80:ae:67:87:15:32:d5:3c:c0: 0e:62:73:13:ed:f8:84:a5:31:8a:40:8f:7a:3f:90:bc:79:02: 10:00:b2:86:96:96:bd:bf:ba:fe:06:11:88:37:d0:f2:a3:a7: a9:15:de:4e:09:ae:7b:b7:6d:50:d3:dd:da:f4:39:c0:33:79: d4:14:d1:95:b5:76:98:07:1c:60:4c:03:f4:b1:76:05:bc:05: db:de:67:53:9a:b4:63:be:44:f8:be:60:8f:1d:6f:1c:f4:7e: 32:a8:9c:16:be:a9:24:a2:eb:8f:25:8c:d4:5a:5b:a5:e0:ad: 06:52:06:97:79:df:6b:f3:0a:16:be:bb:a2:90:e6:36:1a:6e: d0:76:b6:f5:ac:12:3c:fc:b4:da:a3:12:c3:8a:b3:b0:76:35: f9:b6:ed:3a:90:ca:e0:88:77:08:ac:7a:c7:36:48:d0:9c:af: bf:78:65:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/aN964qvp4eKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjFjNDA5ZTgtY2M2Yy00NTkzLTllN2MtNGRkYjRhM2RhOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkoOBVOqfv54vl1WF3/q8M8k38FBRgqfpHkr pZp2HZwzVA8t/I5yxzaKZ7iyY3ohVis7sSXecqxOA8CZcyMhxhkW44jyjnD7bDyG gmjSnSPg41ocxI+14dFT+N1BfWsl1pI9nn0px8X7FnS2Tn2oCfIDp+KBpSSI9P4f Sn23zFEycDYowj4rPVRvfMYvsh5G2PJb184KQKHfuv+J7yPocavNQ2bZR5BL6SGm AFQBT0VHUFLX49xtb/WNawz972E+b+JtsZTVEnyHod5XAwtB2HvMdGMYybEXypJw 81UDRfEPDIT3+j7IP+Mvbbk5HfA0FVNfyvzBefK9cgJRYuo0IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzp+NaUvfNbEN5yWQ5kJgppB4FaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI0YWQ2OTAtMWRlOC0z MzcyLTg0MzktODUzMmI2ZDQxNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzmLt+bfl9OET2+3gcj7NygXCAWWu1WAjRaUF7lsK8GzX3hq/jiQMXn BOBEQfUoUSyUR1w9Zttxa1lOW1dvKVzDYOcN1p8kBAcv+fUnCJEfuICuZ4cVMtU8 wA5icxPt+ISlMYpAj3o/kLx5AhAAsoaWlr2/uv4GEYg30PKjp6kV3k4Jrnu3bVDT 3dr0OcAzedQU0ZW1dpgHHGBMA/SxdgW8BdveZ1OatGO+RPi+YI8dbxz0fjKonBa+ qSSi648ljNRaW6XgrQZSBpd532vzCha+u6KQ5jYabtB2tvWsEjz8tNqjEsOKs7B2 Nfm27TqQyuCIdwisesc2SNCcr794ZbI= -----END CERTIFICATE-----Generated at Thu Mar 19 05:39:45 2026 by rpki-client