$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b800870-20d9-315e-98d4-dd27562224ae.roa File: 5b800870-20d9-315e-98d4-dd27562224ae.roa (raw, json) Hash identifier: /w3dMocj5WbgT1ad5fDaaSec+sSVha2j8NlPBZd25Ks= Subject key identifier: C0:C2:A8:40:D8:91:45:ED:D0:90:36:9A:B3:C1:02:BF:4A:F1:D6:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F985A145FFF7E444EE800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b800870-20d9-315e-98d4-dd27562224ae.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.227.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:98:5a:14:5f:ff:7e:44:4e:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c09e49b9-62ab-4905-8d14-fc86ce49c035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:0f:76:51:e1:a3:98:e6:eb:c4:44:50:cc: 73:ed:2b:a2:30:5b:97:b8:e2:f0:98:29:c1:0d:ed: cd:6a:08:45:77:a9:16:80:14:a0:3c:bc:f1:95:41: 2f:fb:28:4d:6f:e8:31:57:45:8e:a7:72:ed:b5:be: 3d:b8:57:a2:8c:f1:49:67:69:17:af:4d:b9:20:fb: bd:11:fd:1f:c4:4d:02:29:c4:f2:ea:a1:0c:24:b7: 7a:e2:98:b2:59:6c:73:6e:8e:87:f8:86:10:ff:af: 76:f1:30:62:44:95:60:b1:78:c9:da:1e:ef:fb:21: f3:d4:ab:7a:16:2d:9b:5c:cd:d5:01:70:cc:2e:8d: ad:f5:63:62:ca:c9:bd:cb:7d:55:7f:fd:f7:d0:53: b5:24:74:57:50:fb:0b:79:32:35:f4:c9:1d:39:38: bc:f1:e7:33:06:fb:aa:bd:a1:eb:d2:44:21:5f:b7: 6a:ed:76:29:6c:39:15:82:2e:0c:e7:97:71:cb:16: b5:11:f3:96:c0:fb:d1:a9:e2:60:26:a9:e0:29:b0: 8e:a3:24:c8:50:67:ff:3b:33:f0:eb:1a:ae:24:fa: 2f:c7:0f:39:c1:5d:cd:80:79:2c:25:e5:f7:33:8c: f8:b3:04:d7:00:73:a2:55:d7:4b:05:b5:7f:e0:6f: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:A8:40:D8:91:45:ED:D0:90:36:9A:B3:C1:02:BF:4A:F1:D6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b800870-20d9-315e-98d4-dd27562224ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c8:c5:7c:5f:c9:13:6e:53:27:0b:65:fe:02:fa:92:8b:7a: 2e:a1:76:58:2d:a9:38:96:81:d6:60:dd:f7:a8:1a:06:2c:ca: a7:27:8b:03:ae:5d:c7:5d:92:03:6a:dd:b9:3f:d0:7d:30:39: 99:67:a4:4e:5d:c4:ce:41:9f:01:11:33:21:4f:f8:4d:7e:5f: 9c:e2:55:d9:c5:3a:22:6d:a5:8c:70:2b:b3:28:da:f8:9d:c7: 35:f8:64:bb:db:56:08:2e:37:68:4f:28:ca:7d:4a:7d:d5:82: 2b:08:84:ba:1e:10:8d:a4:72:45:a7:0e:f9:88:2a:89:a8:69: bb:88:de:0c:ba:c6:bc:f0:9f:17:15:c2:5f:de:08:15:f2:bb: 33:14:f0:41:e2:6b:56:37:ec:f0:72:1e:52:13:a7:2d:c6:dc: 7b:22:35:e9:7d:a9:43:ae:27:76:7c:1f:44:32:cf:90:79:1f: 04:b1:26:7f:24:8f:60:9d:76:67:3d:42:78:d6:f0:fd:61:0f: 29:c7:2d:25:84:13:45:4d:8c:98:06:0a:18:05:9f:d7:6b:07: c0:09:8e:15:7c:e8:f9:d1:c1:e5:70:c0:fe:2d:c2:69:b9:19: f3:55:c3:59:9d:0f:02:6c:a2:75:a4:b1:5d:39:0b:05:64:27: 58:ec:c1:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5haFF//fkRO6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzA5ZTQ5YjktNjJhYi00OTA1LThkMTQtZmM4NmNlNDljMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUgPdlHho5jm68REUMxz7SuiMFuXuOLwmCnB De3NaghFd6kWgBSgPLzxlUEv+yhNb+gxV0WOp3Lttb49uFeijPFJZ2kXr025IPu9 Ef0fxE0CKcTy6qEMJLd64piyWWxzbo6H+IYQ/6928TBiRJVgsXjJ2h7v+yHz1Kt6 Fi2bXM3VAXDMLo2t9WNiysm9y31Vf/330FO1JHRXUPsLeTI19MkdOTi88eczBvuq vaHr0kQhX7dq7XYpbDkVgi4M55dxyxa1EfOWwPvRqeJgJqngKbCOoyTIUGf/OzPw 6xquJPovxw85wV3NgHksJeX3M4z4swTXAHOiVddLBbV/4G8mBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDCqEDYkUXt0JA2mrPBAr9K8dbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWI4MDA4NzAtMjBkOS0z MTVlLTk4ZDQtZGQyNzU2MjIyNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvIxXxfyRNuUycLZf4C+pKLei6hdlgtqTiWgdZg3feoGgYsyqcniwOu XcddkgNq3bk/0H0wOZlnpE5dxM5BnwERMyFP+E1+X5ziVdnFOiJtpYxwK7Mo2vid xzX4ZLvbVgguN2hPKMp9Sn3VgisIhLoeEI2kckWnDvmIKomoabuI3gy6xrzwnxcV wl/eCBXyuzMU8EHia1Y37PByHlITpy3G3HsiNel9qUOuJ3Z8H0Qyz5B5HwSxJn8k j2Cddmc9QnjW8P1hDynHLSWEE0VNjJgGChgFn9drB8AJjhV86PnRweVwwP4twmm5 GfNVw1mdDwJsonWksV05CwVkJ1jswRA= -----END CERTIFICATE-----Generated at Thu Mar 19 05:46:14 2026 by rpki-client