$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cb2cb23-e759-3267-8763-33d0b804a8e8.roa File: 4cb2cb23-e759-3267-8763-33d0b804a8e8.roa (raw, json) Hash identifier: eD8JGoNVltxcyTd2Nc2RVFasjLQF5Dt2VgGgqVl6Pc4= Subject key identifier: 94:C4:F6:6B:8D:28:45:78:F3:80:78:5B:AD:6F:00:15:5F:22:3E:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FEFF4413127955D7A8F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cb2cb23-e759-3267-8763-33d0b804a8e8.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.8.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ef:f4:41:31:27:95:5d:7a:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=432a4a3d-b599-46d8-afb0-3f25b65d040c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:1c:9d:6b:d0:91:6f:0e:30:9b:e7:a4:4a: 49:b1:3d:32:36:7b:64:67:77:06:d3:78:87:22:91: be:02:1b:c8:15:4c:2e:d2:d4:65:8e:31:5d:14:72: 3a:9a:e1:a2:5e:ac:8f:98:df:54:a9:18:c6:95:b9: f8:e5:61:26:9c:e8:bb:f7:b6:ce:e4:ee:38:b2:6d: d2:54:88:f5:83:db:30:f4:36:81:9f:71:fc:9d:6f: df:13:b7:d9:7c:ee:2d:a3:d2:12:05:6f:01:65:44: de:e8:8a:49:44:e1:a0:e1:30:2d:a9:d5:b3:26:a3: d0:ab:b7:9c:dd:00:61:08:6d:19:e9:89:8c:1c:87: 3d:4d:1d:9b:e1:68:e2:31:e4:94:26:6e:5b:19:0f: c2:f9:93:b2:26:7f:c4:4b:a9:34:e0:ad:3b:2f:03: a8:e0:32:75:7d:1b:55:47:ff:50:73:cb:41:8f:e0: 72:cc:99:fc:67:29:4c:79:8d:83:42:a9:63:a8:35: 75:af:d0:8a:48:f8:de:14:ea:e0:c5:1c:e1:86:45: c2:c6:41:4e:c9:aa:05:08:6a:42:80:53:c7:f7:89: e6:78:29:6b:47:de:be:a8:04:1a:27:f3:fd:10:43: b7:d1:21:f4:9c:8a:03:f3:18:db:3e:4f:17:e6:92: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:F6:6B:8D:28:45:78:F3:80:78:5B:AD:6F:00:15:5F:22:3E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cb2cb23-e759-3267-8763-33d0b804a8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:89:07:b2:3a:a7:00:d7:26:f7:88:42:71:72:4f:54:ea: a6:4b:b2:85:0e:90:e6:1f:24:dc:9c:a7:29:73:4d:55:52:ae: e7:46:27:a4:8a:5d:bd:a8:e2:72:68:1b:58:4e:65:41:93:2f: 02:38:a3:82:a9:47:40:a1:56:b1:5f:32:15:ff:36:5b:bf:7c: d5:f2:b0:42:59:62:b1:a3:85:86:10:8a:b8:28:76:36:89:49: da:f3:2c:d4:80:46:cc:29:76:6d:10:33:55:30:93:6b:a2:a8: 42:1b:da:a4:19:83:6b:1e:78:e0:aa:7a:1b:a2:9c:28:3f:e0: af:7d:3a:21:de:88:1f:07:77:b9:15:2a:a3:94:cd:20:5b:74: e8:80:ed:fe:53:fc:77:65:af:54:09:14:61:66:52:9b:3b:ad: 46:37:0b:9d:97:a0:c7:47:26:7a:2f:ed:96:3e:0c:55:04:87: d9:2a:13:00:b0:fd:40:55:a5:bd:d5:2f:5f:58:5f:4f:f5:7c: 78:8a:f3:cc:45:b2:57:88:03:7a:3a:96:1e:e7:ff:5a:67:ad: ed:bb:89:48:1c:61:f2:69:fa:64:1d:a7:56:23:51:b0:da:6a: 60:07:d8:0c:a1:5e:45:68:86:7c:90:2d:f8:0c:fe:e3:bc:40: d3:9b:00:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+/0QTEnlV16j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDMyYTRhM2QtYjU5OS00NmQ4LWFmYjAtM2YyNWI2NWQwNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdocnWvQkW8OMJvnpEpJsT0yNntkZ3cG03iH IpG+AhvIFUwu0tRljjFdFHI6muGiXqyPmN9UqRjGlbn45WEmnOi797bO5O44sm3S VIj1g9sw9DaBn3H8nW/fE7fZfO4to9ISBW8BZUTe6IpJROGg4TAtqdWzJqPQq7ec 3QBhCG0Z6YmMHIc9TR2b4WjiMeSUJm5bGQ/C+ZOyJn/ES6k04K07LwOo4DJ1fRtV R/9Qc8tBj+ByzJn8ZylMeY2DQqljqDV1r9CKSPjeFOrgxRzhhkXCxkFOyaoFCGpC gFPH94nmeClrR96+qAQaJ/P9EEO30SH0nIoD8xjbPk8X5pLEPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTE9muNKEV484B4W61vABVfIj5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNiMmNiMjMtZTc1OS0z MjY3LTg3NjMtMzNkMGI4MDRhOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtUiQeyOqcA1yb3iEJxck9U6qZLsoUOkOYfJNycpylzTVVSrudGJ6SK Xb2o4nJoG1hOZUGTLwI4o4KpR0ChVrFfMhX/Nlu/fNXysEJZYrGjhYYQirgodjaJ SdrzLNSARswpdm0QM1Uwk2uiqEIb2qQZg2seeOCqehuinCg/4K99OiHeiB8Hd7kV KqOUzSBbdOiA7f5T/Hdlr1QJFGFmUps7rUY3C52XoMdHJnov7ZY+DFUEh9kqEwCw /UBVpb3VL19YX0/1fHiK88xFsleIA3o6lh7n/1pnre27iUgcYfJp+mQdp1YjUbDa amAH2AyhXkVohnyQLfgM/uO8QNObAKE= -----END CERTIFICATE-----Generated at Sun Mar 22 06:56:53 2026 by rpki-client