$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c2ba59-220b-31ee-a55a-b92cf2534bab.roa File: 32c2ba59-220b-31ee-a55a-b92cf2534bab.roa (raw, json) Hash identifier: AM5ViEsQzOUbgw6lUAZ2ILyK4XFkM/PUq8v4LztainA= Subject key identifier: 25:5C:71:A8:A9:D1:9E:21:A0:74:27:94:B7:0F:89:89:EB:5C:00:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FFE492A725E4B4870F900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c2ba59-220b-31ee-a55a-b92cf2534bab.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.107.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:fe:49:2a:72:5e:4b:48:70:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=28632864-ca7a-4690-b83e-9e2596b68cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:ed:02:86:e0:65:36:58:78:6d:f0:11:5a: db:99:b5:bf:ab:ae:27:55:83:56:e1:30:4e:8b:80: 09:16:d7:bf:bc:6d:8a:eb:66:e5:38:65:a5:46:bb: cf:c9:b6:b5:c9:71:40:bc:c6:46:e1:a5:3e:60:ca: eb:84:60:ae:84:e4:23:2e:56:46:6a:3e:39:71:6f: a0:28:e9:ac:54:44:c1:d7:e6:84:4c:8e:fe:1f:a0: 1b:ea:61:2c:bf:9d:23:69:19:e9:a8:3c:b8:1e:50: bc:96:41:0b:3c:6a:78:ec:47:2b:e9:bf:08:bc:cd: 90:02:6a:43:f4:1a:ca:9a:32:b9:b2:ed:7d:be:60: d4:b0:c9:2a:ac:92:62:32:62:9b:77:6f:66:22:48: 37:31:d1:03:41:58:53:ff:ad:dc:6f:3e:b1:86:58: ad:8a:b9:d5:7c:d6:d5:fb:c4:d7:d7:7c:be:80:31: 6e:bb:38:4d:fe:72:b3:a7:06:40:fa:e7:96:59:57: 61:88:74:63:ba:a3:fb:1d:63:78:d3:dd:ea:01:68: ef:ff:5b:d8:e2:20:9b:7a:aa:b6:08:30:fc:18:c9: 04:d8:a1:3c:30:0f:c0:f3:a5:86:c3:f0:6c:e1:69: de:25:c0:55:ad:a0:a8:3a:e9:51:29:7e:5d:8d:4a: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5C:71:A8:A9:D1:9E:21:A0:74:27:94:B7:0F:89:89:EB:5C:00:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c2ba59-220b-31ee-a55a-b92cf2534bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f5:06:e3:fe:03:0f:19:70:45:63:9e:09:be:ca:71:7c:af: 50:c7:85:96:ac:a3:07:2a:5a:19:3e:a0:a1:6b:03:4c:95:e0: e4:c8:27:7b:d5:fd:e2:a8:43:af:69:fa:e1:dd:11:3f:d8:22: 0c:c5:d5:8e:d9:af:b5:3b:22:7d:9a:87:42:d0:cb:93:59:e3: e9:36:0f:c5:5f:dc:81:51:b6:c3:49:cb:d7:01:b0:3b:f5:0d: 22:0e:85:2a:3a:29:2f:f0:4a:0c:a3:d2:06:ac:39:79:b4:7a: 39:f8:a6:23:2b:2f:d6:7a:7a:2d:81:26:38:98:4b:62:0d:17: 60:58:7d:06:f9:0e:07:ca:87:4c:22:a9:64:70:94:03:f9:77: 3c:70:10:af:47:b0:95:f7:40:9e:4b:87:52:03:6a:c0:88:74: da:df:94:dd:df:ef:4a:c8:51:73:2f:f9:0c:c4:f7:48:bd:77: a4:f6:b6:ee:42:66:6c:c1:6e:33:6b:1a:69:ed:d0:1b:0a:3b: bd:0c:b5:01:78:26:a2:da:a5:6a:63:d8:85:50:cc:bb:b6:0f: b7:e6:d0:a3:2c:ba:17:bc:4e:a0:d6:a0:37:67:33:4b:70:fc: d9:39:46:97:42:fd:14:0f:d5:33:38:6b:fb:3c:3c:7f:dc:a9: d1:92:73:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/5JKnJeS0hw+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Mjg2MzI4NjQtY2E3YS00NjkwLWI4M2UtOWUyNTk2YjY4Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotrtAobgZTZYeG3wEVrbmbW/q64nVYNW4TBO i4AJFte/vG2K62blOGWlRrvPyba1yXFAvMZG4aU+YMrrhGCuhOQjLlZGaj45cW+g KOmsVETB1+aETI7+H6Ab6mEsv50jaRnpqDy4HlC8lkELPGp47Ecr6b8IvM2QAmpD 9BrKmjK5su19vmDUsMkqrJJiMmKbd29mIkg3MdEDQVhT/63cbz6xhlitirnVfNbV +8TX13y+gDFuuzhN/nKzpwZA+ueWWVdhiHRjuqP7HWN4093qAWjv/1vY4iCbeqq2 CDD8GMkE2KE8MA/A86WGw/Bs4WneJcBVraCoOulRKX5djUr/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVccaip0Z4hoHQnlLcPiYnrXADcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJjMmJhNTktMjIwYi0z MWVlLWE1NWEtYjkyY2YyNTM0YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX1BuP+Aw8ZcEVjngm+ynF8r1DHhZasowcqWhk+oKFrA0yV4OTIJ3vV /eKoQ69p+uHdET/YIgzF1Y7Zr7U7In2ah0LQy5NZ4+k2D8Vf3IFRtsNJy9cBsDv1 DSIOhSo6KS/wSgyj0gasOXm0ejn4piMrL9Z6ei2BJjiYS2INF2BYfQb5DgfKh0wi qWRwlAP5dzxwEK9HsJX3QJ5Lh1IDasCIdNrflN3f70rIUXMv+QzE90i9d6T2tu5C ZmzBbjNrGmnt0BsKO70MtQF4JqLapWpj2IVQzLu2D7fm0KMsuhe8TqDWoDdnM0tw /Nk5RpdC/RQP1TM4a/s8PH/cqdGSc+4= -----END CERTIFICATE-----Generated at Thu Mar 19 05:37:03 2026 by rpki-client