$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e215668-a3e1-34fb-8f42-42bda4fdc67c.roa File: 5e215668-a3e1-34fb-8f42-42bda4fdc67c.roa (raw, json) Hash identifier: oQmqNo1/VWAkpXthWI4SZO2nrDSOXfBq3hmaB/EogtM= Subject key identifier: CA:6E:01:47:4D:6E:61:03:B9:8E:4F:6B:97:7C:B5:55:46:DF:1A:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FCDECB0268B1EA4DF9D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e215668-a3e1-34fb-8f42-42bda4fdc67c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.9.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:cd:ec:b0:26:8b:1e:a4:df:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=109827fd-22b2-4c51-80d0-32fdfe5f3612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:0e:01:ab:39:9f:24:fd:9a:4d:21:72:b4: 2b:df:a3:e5:a8:a5:a1:87:22:f4:87:85:ab:17:fb: 33:92:0f:98:3f:c1:6f:98:32:dd:d2:19:ae:46:9b: 89:04:fa:35:10:2f:53:01:6d:de:1a:32:30:f9:1b: db:51:4a:7c:d2:3b:21:80:07:9b:42:b3:ae:8f:89: 90:f9:98:85:c1:f7:44:5f:70:bf:fc:74:b7:00:ed: 26:f4:91:bb:a7:3a:57:17:dd:45:ee:1c:12:bd:55: 16:22:a6:ba:ac:df:1b:53:91:67:8f:93:70:49:21: 81:be:04:4c:0e:0a:29:10:89:59:58:a1:4d:ef:52: be:5d:c2:7e:12:8d:71:03:28:b0:dd:5f:ec:f3:ee: c4:a8:62:21:d5:14:ad:4c:d8:21:b0:13:bc:5a:5a: a8:2e:97:7c:62:4d:66:47:4d:d1:ae:58:25:fa:bd: 37:8b:88:b0:37:4a:86:5a:bb:e0:83:74:57:b5:f3: ea:ec:45:43:0f:60:82:49:ec:81:39:c2:45:3c:63: eb:40:78:99:28:9f:7c:a8:85:ef:59:d3:b4:45:06: f1:b7:ba:9f:ac:ba:ea:6b:52:66:c7:47:ca:fe:0e: dd:02:e1:98:72:60:ea:2a:c3:4e:c4:84:21:26:66: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:01:47:4D:6E:61:03:B9:8E:4F:6B:97:7C:B5:55:46:DF:1A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e215668-a3e1-34fb-8f42-42bda4fdc67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:28:36:2e:01:16:dc:c7:54:62:22:40:bc:91:63:42:6e:62: 72:b0:56:2e:f2:13:31:76:8a:b6:f7:64:04:dc:22:cf:28:83: 23:7b:7b:78:07:a7:9a:9c:2e:fd:44:9e:c3:19:f1:47:e4:ae: 58:31:0b:5d:a7:f7:90:0e:90:d0:c2:bb:1f:9c:81:c5:90:ff: 81:5c:07:32:d0:43:cf:e2:a8:a9:b2:46:d8:8f:63:b6:b8:05: 3b:2f:35:f2:1e:58:fd:ec:37:2f:69:ea:4d:6d:f6:08:82:7d: 0d:95:2b:72:a7:ff:d5:a8:b6:de:a6:41:86:64:36:c9:7c:e2: 45:40:88:93:97:82:96:a5:0c:9d:89:5a:75:68:16:89:a4:6d: 29:a6:e3:2a:d8:cb:c3:70:1c:be:cb:42:75:26:ac:52:3d:ed: 3d:60:76:d8:86:1d:63:2b:be:63:36:5c:43:56:1e:00:12:03: 80:17:2d:c9:33:0d:fd:7c:36:71:26:35:6f:4b:00:6d:cf:1c: af:48:91:4d:9f:5d:f2:bf:5f:25:c2:22:42:18:6c:d7:48:43: 9c:6a:6e:92:2a:ea:41:d0:69:0f:be:b5:ab:98:da:4a:49:4a: fe:50:27:b0:ef:f4:c0:df:74:80:ea:36:2a:f5:cc:21:19:60: 82:51:d5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n83ssCaLHqTfnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MTA5ODI3ZmQtMjJiMi00YzUxLTgwZDAtMzJmZGZlNWYzNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKMOAas5nyT9mk0hcrQr36PlqKWhhyL0h4Wr F/szkg+YP8FvmDLd0hmuRpuJBPo1EC9TAW3eGjIw+RvbUUp80jshgAebQrOuj4mQ +ZiFwfdEX3C//HS3AO0m9JG7pzpXF91F7hwSvVUWIqa6rN8bU5Fnj5NwSSGBvgRM DgopEIlZWKFN71K+XcJ+Eo1xAyiw3V/s8+7EqGIh1RStTNghsBO8WlqoLpd8Yk1m R03Rrlgl+r03i4iwN0qGWrvgg3RXtfPq7EVDD2CCSeyBOcJFPGPrQHiZKJ98qIXv WdO0RQbxt7qfrLrqa1Jmx0fK/g7dAuGYcmDqKsNOxIQhJmY1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpuAUdNbmEDuY5Pa5d8tVVG3xrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUyMTU2NjgtYTNlMS0z NGZiLThmNDItNDJiZGE0ZmRjNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0oNi4BFtzHVGIiQLyRY0JuYnKwVi7yEzF2irb3ZATcIs8ogyN7e3gH p5qcLv1EnsMZ8UfkrlgxC12n95AOkNDCux+cgcWQ/4FcBzLQQ8/iqKmyRtiPY7a4 BTsvNfIeWP3sNy9p6k1t9giCfQ2VK3Kn/9Wott6mQYZkNsl84kVAiJOXgpalDJ2J WnVoFomkbSmm4yrYy8NwHL7LQnUmrFI97T1gdtiGHWMrvmM2XENWHgASA4AXLckz Df18NnEmNW9LAG3PHK9IkU2fXfK/XyXCIkIYbNdIQ5xqbpIq6kHQaQ++tauY2kpJ Sv5QJ7Dv9MDfdIDqNir1zCEZYIJR1fI= -----END CERTIFICATE-----Generated at Thu Mar 19 08:34:17 2026 by rpki-client