$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4db5426a-7913-3935-8211-d1ea3af21f76.roa File: 4db5426a-7913-3935-8211-d1ea3af21f76.roa (raw, json) Hash identifier: zk96Fr5sodtzjb8vTLZHbvtAPkwNH+p3//8R5/2wTdk= Subject key identifier: 33:68:BA:14:A5:57:61:F3:3F:5A:B6:B8:B2:6A:5B:C0:56:37:ED:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBC615FCDD1885BD78600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4db5426a-7913-3935-8211-d1ea3af21f76.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.111.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:bc:61:5f:cd:d1:88:5b:d7:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=dec12b80-66fa-40b2-9be5-409fa15b5bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8e:f0:f8:a8:20:72:4d:2d:8e:aa:3f:62:3c: dc:57:86:b5:59:2b:f9:43:30:33:94:1c:e2:9a:db: 61:9e:04:12:c8:71:0d:fc:32:e4:c5:40:5b:7a:7e: 5b:81:57:de:d7:0b:44:9a:d7:93:b7:ea:04:fb:13: 56:40:c1:77:b2:a6:9f:05:bd:8f:ee:b1:e9:a3:16: 06:ab:04:b1:bf:3d:83:2e:9b:00:61:48:d6:3a:d2: 88:37:60:72:f8:23:27:48:22:75:bf:2d:18:b3:fb: bc:48:da:bc:88:2d:e5:52:2b:dc:cc:1c:c6:7b:c2: 6d:34:0c:d1:74:39:11:65:ce:c8:67:71:78:08:35: 77:8a:d2:d9:9e:e1:f2:36:68:7b:69:cc:86:de:3f: 83:63:b6:3b:7e:8c:2d:9e:55:17:04:5b:93:47:6c: 18:e3:b9:7c:82:97:6b:90:90:fe:bc:45:1c:9a:dc: 8c:c9:05:7b:50:88:da:c1:20:68:e1:50:20:a0:f7: e6:06:6e:62:87:f4:a5:e3:25:7e:55:42:bd:1d:2c: 8b:dd:b0:39:d2:a0:b9:41:73:dd:f5:b3:6c:85:d8: f7:4e:15:76:78:90:78:15:b5:6c:21:b8:5a:52:2b: 5e:95:df:2e:09:9c:f1:5e:3f:d8:ee:a2:cb:8f:a0: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:BA:14:A5:57:61:F3:3F:5A:B6:B8:B2:6A:5B:C0:56:37:ED:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4db5426a-7913-3935-8211-d1ea3af21f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:96:a0:bf:fc:98:24:72:31:46:16:78:14:5f:ee:73:f7:28: 24:3b:bc:f1:6a:91:e7:9a:81:5f:32:0a:11:ef:78:37:1c:4f: 9d:f1:95:80:06:7e:96:53:7f:1c:cc:e3:e2:19:ef:1c:81:30: 98:d0:9c:6a:7f:76:3c:cb:de:11:21:9f:df:53:95:19:5a:89: d6:16:35:3e:3c:f2:c5:14:8f:e4:a3:9e:fc:93:8f:01:d1:c3: 2b:75:28:5c:4f:48:7f:fd:6d:b0:a5:c4:4e:db:4a:9f:36:75: 81:b0:d0:07:af:10:a7:36:64:3f:17:a6:43:9f:18:6c:04:e8: a7:fe:a1:4f:01:e8:06:4a:75:6f:7e:ba:49:91:45:65:ea:3c: 2c:e6:6d:1e:45:30:0d:c6:ca:9c:1c:d2:69:50:18:dc:01:a8: 08:37:a5:8f:d1:7e:5e:dc:a1:15:28:b3:65:2a:19:85:90:59: b5:e1:58:be:2a:d0:75:3d:74:ae:eb:5b:5d:63:7f:a5:2d:56: e7:8f:fc:40:40:d7:af:6f:bb:5d:46:21:c7:c3:e3:86:0a:2f: 87:3a:48:7e:df:d7:f3:42:7d:aa:09:a4:0c:ac:82:7f:05:0f: f7:f6:18:7a:4a:67:fb:f6:43:31:63:86:ff:3f:b4:57:99:ba: 5f:62:3b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7xhX83RiFvXhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZGVjMTJiODAtNjZmYS00MGIyLTliZTUtNDA5ZmExNWI1YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY7w+Kggck0tjqo/YjzcV4a1WSv5QzAzlBzi mtthngQSyHEN/DLkxUBben5bgVfe1wtEmteTt+oE+xNWQMF3sqafBb2P7rHpoxYG qwSxvz2DLpsAYUjWOtKIN2By+CMnSCJ1vy0Ys/u8SNq8iC3lUivczBzGe8JtNAzR dDkRZc7IZ3F4CDV3itLZnuHyNmh7acyG3j+DY7Y7fowtnlUXBFuTR2wY47l8gpdr kJD+vEUcmtyMyQV7UIjawSBo4VAgoPfmBm5ih/Sl4yV+VUK9HSyL3bA50qC5QXPd 9bNshdj3ThV2eJB4FbVsIbhaUiteld8uCZzxXj/Y7qLLj6CSbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNouhSlV2HzP1q2uLJqW8BWN+19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRiNTQyNmEtNzkxMy0z OTM1LTgyMTEtZDFlYTNhZjIxZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByWoL/8mCRyMUYWeBRf7nP3KCQ7vPFqkeeagV8yChHveDccT53xlYAG fpZTfxzM4+IZ7xyBMJjQnGp/djzL3hEhn99TlRlaidYWNT488sUUj+SjnvyTjwHR wyt1KFxPSH/9bbClxE7bSp82dYGw0AevEKc2ZD8XpkOfGGwE6Kf+oU8B6AZKdW9+ ukmRRWXqPCzmbR5FMA3Gypwc0mlQGNwBqAg3pY/Rfl7coRUos2UqGYWQWbXhWL4q 0HU9dK7rW11jf6UtVueP/EBA169vu11GIcfD44YKL4c6SH7f1/NCfaoJpAysgn8F D/f2GHpKZ/v2QzFjhv8/tFeZul9iOzQ= -----END CERTIFICATE-----Generated at Thu Mar 19 08:40:29 2026 by rpki-client