$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa File: 38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa (raw, json) Hash identifier: V6xdjRLIlewkhRPNzMd057PkjBVisclUxuRfzuTJa9g= Subject key identifier: DA:8A:AF:D6:4B:8F:EF:BD:53:6C:89:CA:0B:F6:F8:FB:1B:6E:94:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FA522BEAE7C28CBCF1880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.227.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a5:22:be:ae:7c:28:cb:cf:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=51d9bff7-d5e4-4983-995d-0b83b8140bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:6a:2d:80:4c:f5:65:37:e7:01:bc:1a:54: e8:f7:2e:3b:c3:27:ce:0f:dc:66:b4:a3:4e:a5:5f: e6:14:1f:f0:38:74:10:7b:03:09:15:66:a0:0a:df: ba:1a:58:42:ea:ed:aa:e2:e7:92:e8:b5:64:53:d0: 91:d7:49:07:27:cd:ff:ed:0e:e5:a2:9c:9e:06:e7: ce:0a:b1:94:22:53:9b:bc:aa:e7:2a:ec:fa:6f:7a: e3:76:7a:e4:10:12:62:ee:cb:f7:d8:a3:63:dc:5d: 9c:7f:e3:62:98:a4:e0:0c:98:dc:69:4b:b9:ab:64: 7a:ad:cb:dc:99:40:f1:7c:4a:14:66:97:fc:82:2d: 6d:4b:2b:9e:45:ac:b9:e4:96:8a:83:04:72:b1:fb: fd:9e:d8:3d:9b:f1:c2:8b:90:59:77:d6:ba:6d:56: e1:88:3b:d0:3c:14:45:f6:23:cf:01:ca:46:78:3a: 6c:0d:e6:55:34:83:64:a6:d5:63:e0:36:49:85:33: a5:1c:11:3c:c9:a4:8c:71:0e:a7:bf:7c:27:c0:f8: 63:01:f0:ff:bc:57:b0:d0:0f:4a:43:03:4b:5a:b4: 1e:6d:b1:2c:41:e1:5f:4d:57:04:40:2d:ff:4d:c8: bd:95:db:21:c3:cf:2e:6e:f5:13:96:9e:e8:a9:92: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8A:AF:D6:4B:8F:EF:BD:53:6C:89:CA:0B:F6:F8:FB:1B:6E:94:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:69:19:2f:db:f4:ae:aa:e4:cd:8b:a8:9a:03:dd:d0:44:2b: 2d:d8:a2:30:6a:7a:dd:ef:44:f0:5d:6d:1f:30:0e:8b:0b:a6: c8:33:73:42:eb:56:2a:ef:18:0a:6d:1d:d3:dc:e3:b1:cd:ff: 37:2a:7d:24:99:79:33:02:b7:f7:75:59:d8:60:7b:d9:05:7e: 48:fd:5f:8d:fd:58:63:13:65:83:ec:fe:f4:4a:9b:07:b6:6a: 36:da:e8:d7:df:08:90:21:af:8b:e1:e6:3d:86:23:41:bc:0e: d7:d9:33:b7:ba:47:32:07:43:ac:44:a9:63:a9:4f:71:98:31: 71:57:0f:b6:78:bb:d6:52:fb:5a:13:24:2f:5d:e6:e9:b5:f7: 26:77:12:81:11:01:95:97:98:45:c9:36:df:d3:f0:74:4e:c4: d1:9b:e8:c9:44:b4:97:44:12:a0:54:b3:2d:e5:0c:f6:c6:72: 46:8c:ae:4d:76:d4:63:b2:ed:56:f7:45:c7:27:6d:04:df:bb: b7:a5:0b:ef:1c:2d:86:bc:71:e9:3a:01:ef:4b:2e:05:16:27: ec:10:68:72:70:38:8f:61:4a:e5:5d:de:aa:5f:ec:3f:dc:d4: 3c:6f:76:61:ee:e0:ff:6c:e9:10:a3:e4:29:ce:b9:66:10:d6: 05:b5:1d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6Uivq58KMvPGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTFkOWJmZjctZDVlNC00OTgzLTk5NWQtMGI4M2I4MTQwYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCtqLYBM9WU35wG8GlTo9y47wyfOD9xmtKNO pV/mFB/wOHQQewMJFWagCt+6GlhC6u2q4ueS6LVkU9CR10kHJ83/7Q7lopyeBufO CrGUIlObvKrnKuz6b3rjdnrkEBJi7sv32KNj3F2cf+NimKTgDJjcaUu5q2R6rcvc mUDxfEoUZpf8gi1tSyueRay55JaKgwRysfv9ntg9m/HCi5BZd9a6bVbhiDvQPBRF 9iPPAcpGeDpsDeZVNINkptVj4DZJhTOlHBE8yaSMcQ6nv3wnwPhjAfD/vFew0A9K QwNLWrQebbEsQeFfTVcEQC3/Tci9ldshw88ubvUTlp7oqZLCyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqKr9ZLj++9U2yJygv2+PsbbpS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhhODFiOWItY2Q3OS0z ZWI4LWFiODYtMzczOTIwYWM1OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhpGS/b9K6q5M2LqJoD3dBEKy3YojBqet3vRPBdbR8wDosLpsgzc0Lr VirvGAptHdPc47HN/zcqfSSZeTMCt/d1Wdhge9kFfkj9X439WGMTZYPs/vRKmwe2 ajba6NffCJAhr4vh5j2GI0G8DtfZM7e6RzIHQ6xEqWOpT3GYMXFXD7Z4u9ZS+1oT JC9d5um19yZ3EoERAZWXmEXJNt/T8HROxNGb6MlEtJdEEqBUsy3lDPbGckaMrk12 1GOy7Vb3RccnbQTfu7elC+8cLYa8cek6Ae9LLgUWJ+wQaHJwOI9hSuVd3qpf7D/c 1DxvdmHu4P9s6RCj5CnOuWYQ1gW1HRo= -----END CERTIFICATE-----Generated at Thu Mar 19 05:44:10 2026 by rpki-client