$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f27e30-ee23-3709-9a86-9f08a2946997.roa File: 35f27e30-ee23-3709-9a86-9f08a2946997.roa (raw, json) Hash identifier: haUdyYA+FLhHz6wtsAizwTljrd5Ksc0LcjKTVDYG9K0= Subject key identifier: A8:0C:DB:D6:0D:1D:5E:38:3A:B9:33:1D:77:D9:E0:FF:C3:AB:D9:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D186CFC2EF12D1AF063A38480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f27e30-ee23-3709-9a86-9f08a2946997.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 22773 IP address blocks: 68.106.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:fc:2e:f1:2d:1a:f0:63:a3:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=0a544e85-4523-460e-8dfc-3a4a2286d546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:1d:0c:5d:84:66:8d:17:1d:67:cb:bf:02: 1e:45:af:e8:98:33:3c:fa:fe:b3:41:42:b2:5f:34: d6:15:46:8c:18:28:e8:3c:47:d3:5e:01:05:c4:0d: 25:47:16:3c:fa:f1:bb:e4:b0:5d:23:08:f9:9e:c7: 8a:c4:a4:39:cb:74:b4:25:b4:72:cb:a4:86:c8:5c: 05:cd:ef:aa:2d:70:6b:aa:ba:a6:c4:18:f7:85:2d: 55:65:de:b3:18:b4:83:70:47:44:75:2f:fc:7f:f5: 66:73:aa:70:3c:b5:1f:37:bb:03:68:6f:bf:72:40: 6b:48:91:38:08:1e:72:4c:9d:21:b2:5b:93:fd:47: 0c:1b:b4:f4:75:fc:c4:8a:0f:0f:94:34:ee:1e:ac: 95:3c:74:be:7b:4d:91:2b:4f:f1:aa:94:32:cf:5c: a6:14:35:2c:ab:d3:77:a4:4b:01:6c:59:4d:27:59: cf:2e:b5:df:29:ef:80:bf:6b:e9:de:93:63:3b:99: 06:77:eb:b5:08:25:d7:19:80:c1:77:9b:6b:d4:e8: 9a:30:f7:f4:e5:51:b4:e2:1d:24:f3:1c:d5:72:eb: cb:d6:6c:15:ca:1e:c5:bf:19:6e:d9:fe:1f:83:65: c9:a1:6f:3e:a3:a7:65:9f:b1:a2:41:e0:52:1a:5e: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0C:DB:D6:0D:1D:5E:38:3A:B9:33:1D:77:D9:E0:FF:C3:AB:D9:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f27e30-ee23-3709-9a86-9f08a2946997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:23:67:89:15:5a:4b:99:c2:1b:28:34:7b:bb:70:f0:ae:a6: 0f:47:6d:f1:ac:41:c6:07:21:ce:47:3e:d0:02:72:f7:47:bc: 55:88:a1:2b:09:8f:aa:8f:80:5f:51:b1:b5:db:ef:3d:76:34: e3:60:74:57:ae:08:e2:af:3f:df:2c:1c:9b:32:fb:64:d7:4c: b5:d1:46:07:0e:d2:62:1c:9b:ab:d3:36:e6:93:1e:49:fe:c7: a8:44:9c:f7:30:f5:fe:1a:88:7c:05:b0:43:23:29:b0:12:9e: 3f:9a:d4:cd:ed:3a:56:4f:5a:1b:ea:b1:dd:9b:58:0b:32:54: b8:f1:0c:18:8c:f2:26:e6:2a:7a:69:ad:fc:5c:37:31:12:a0: f3:99:7b:33:a2:33:02:8f:7d:5e:87:d1:fa:2c:22:b8:97:27: fe:f8:cd:a4:a3:a7:44:e3:d0:47:4f:f3:cc:86:90:13:e2:bb: ac:42:04:4d:78:8c:38:3e:83:b7:85:ab:8b:da:72:3b:97:40: 60:04:78:3d:ab:83:4b:06:02:a1:ca:2d:ab:5a:45:c3:5d:19: 79:41:8e:fb:d8:d5:ca:62:9c:ea:a4:47:f6:15:a9:14:74:c1: 07:0b:fd:97:e2:7e:73:08:e5:a5:c4:4e:f8:df:3d:71:62:7a: c7:29:2f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0YbPwu8S0a8GOjhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk MGE1NDRlODUtNDUyMy00NjBlLThkZmMtM2E0YTIyODZkNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4cdDF2EZo0XHWfLvwIeRa/omDM8+v6zQUKy XzTWFUaMGCjoPEfTXgEFxA0lRxY8+vG75LBdIwj5nseKxKQ5y3S0JbRyy6SGyFwF ze+qLXBrqrqmxBj3hS1VZd6zGLSDcEdEdS/8f/Vmc6pwPLUfN7sDaG+/ckBrSJE4 CB5yTJ0hsluT/UcMG7T0dfzEig8PlDTuHqyVPHS+e02RK0/xqpQyz1ymFDUsq9N3 pEsBbFlNJ1nPLrXfKe+Av2vp3pNjO5kGd+u1CCXXGYDBd5tr1OiaMPf05VG04h0k 8xzVcuvL1mwVyh7Fvxlu2f4fg2XJoW8+o6dln7GiQeBSGl5vgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgM29YNHV44OrkzHXfZ4P/Dq9mGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVmMjdlMzAtZWUyMy0z NzA5LTlhODYtOWYwOGEyOTQ2OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGp5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4jZ4kVWkuZwhsoNHu7cPCupg9HbfGsQcYHIc5HPtACcvdHvFWIoSsJ j6qPgF9RsbXb7z12NONgdFeuCOKvP98sHJsy+2TXTLXRRgcO0mIcm6vTNuaTHkn+ x6hEnPcw9f4aiHwFsEMjKbASnj+a1M3tOlZPWhvqsd2bWAsyVLjxDBiM8ibmKnpp rfxcNzESoPOZezOiMwKPfV6H0fosIriXJ/74zaSjp0Tj0EdP88yGkBPiu6xCBE14 jDg+g7eFq4vacjuXQGAEeD2rg0sGAqHKLataRcNdGXlBjvvY1cpinOqkR/YVqRR0 wQcL/ZfifnMI5aXETvjfPXFiescpL+c= -----END CERTIFICATE-----Generated at Sun Mar 22 07:00:08 2026 by rpki-client