$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/668a86f9-96f6-33a3-9997-6fa95d5a1391.roa File: 668a86f9-96f6-33a3-9997-6fa95d5a1391.roa (raw, json) Hash identifier: +4PXUraAQPeCUDzew6HgjxapikXUOc2JQ6PYxDhXnyw= Subject key identifier: 50:F6:76:FA:03:B3:AC:37:38:B7:56:2C:BB:48:5C:85:64:17:AF:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC766FEB6FFEE92F68540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/668a86f9-96f6-33a3-9997-6fa95d5a1391.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.105.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c7:66:fe:b6:ff:ee:92:f6:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=2b3456a5-8991-486b-a267-05a5a97528ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:c1:92:07:54:9a:c2:6d:74:ee:76:c8:e1: 05:a1:3c:4f:36:22:91:c4:73:90:89:99:1c:89:c6: 32:a8:65:2c:75:e4:1b:c5:07:09:24:eb:71:d0:d0: a3:64:84:75:53:54:d3:84:bf:b1:a9:42:0d:ad:13: 94:cd:c2:3c:fa:cd:7c:4e:42:36:eb:39:64:8c:54: 9d:c3:1f:29:7f:a5:66:a2:94:23:6f:f8:07:b8:7b: 69:3c:c5:ce:07:c0:29:ea:d1:bd:a8:a2:9b:e1:36: 49:31:ae:e4:c1:c5:61:4f:c5:97:a2:11:ac:7f:d4: 7a:9c:bd:99:d5:08:75:75:03:6c:2a:77:db:2b:59: 6b:dc:18:1f:92:48:21:3a:4c:92:6a:ec:2e:f1:d0: 82:02:a0:78:da:f5:65:7f:53:7a:7e:2c:50:d7:48: 08:d9:3e:f0:4b:38:53:7d:0d:2f:25:7a:99:9e:48: 59:c2:26:df:22:91:e4:32:a1:04:b6:c0:64:2a:ab: a8:ff:f9:4e:e7:b3:cf:e3:0f:88:d6:e3:32:e7:68: e4:24:81:be:6d:ff:e8:e3:0d:31:72:43:d0:56:27: cb:50:31:00:c2:4b:de:f7:cf:ae:ac:5a:98:1c:86: ac:be:0b:1d:b7:bd:89:32:2c:0d:43:7b:63:2a:0d: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:76:FA:03:B3:AC:37:38:B7:56:2C:BB:48:5C:85:64:17:AF:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/668a86f9-96f6-33a3-9997-6fa95d5a1391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.105.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6c:50:08:4f:63:16:bd:95:8d:d7:f9:e1:44:2f:d7:62:59: 83:83:3a:f6:60:d1:58:d1:f6:0b:60:b1:aa:90:d0:f6:22:d2: b2:6d:e5:73:51:b7:da:3c:61:ab:67:69:85:1b:1d:6d:9c:0c: 16:7e:d5:ee:91:62:38:a8:5b:f8:13:f5:41:0d:fe:b7:99:32: 24:e4:d9:93:13:9b:65:5b:ec:65:80:47:c6:a1:e1:19:96:dd: a6:5a:66:5d:f0:5c:97:ce:1a:8b:da:31:0b:f8:76:3a:0c:7b: 2f:84:6c:ac:0c:7d:cf:0f:77:d4:1d:a9:65:aa:fc:27:e3:50: a5:15:bd:cf:cd:0a:7c:75:2b:ed:47:cf:44:51:1a:69:33:aa: 42:7e:ad:f3:1d:0e:9e:af:cd:5d:7c:be:5a:0d:b9:e3:4f:72: 2a:3e:aa:55:23:1b:87:04:4d:d8:be:ee:a4:88:5f:a3:e1:16: d6:96:d2:bf:c6:d6:91:5c:f5:dd:5e:c0:9f:6a:ba:66:d8:46: 91:58:21:79:5f:b1:eb:f1:0c:90:e9:11:7f:c8:72:11:6a:b1: 26:2d:1e:fe:67:63:64:b6:34:bf:a1:be:bd:a2:91:57:f0:05: 93:81:13:1d:07:e5:41:f8:40:3d:67:b4:13:f9:92:9a:5d:86: 70:cf:30:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8dm/rb/7pL2hUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MmIzNDU2YTUtODk5MS00ODZiLWEyNjctMDVhNWE5NzUyOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmrBkgdUmsJtdO52yOEFoTxPNiKRxHOQiZkc icYyqGUsdeQbxQcJJOtx0NCjZIR1U1TThL+xqUINrROUzcI8+s18TkI26zlkjFSd wx8pf6VmopQjb/gHuHtpPMXOB8Ap6tG9qKKb4TZJMa7kwcVhT8WXohGsf9R6nL2Z 1Qh1dQNsKnfbK1lr3BgfkkghOkySauwu8dCCAqB42vVlf1N6fixQ10gI2T7wSzhT fQ0vJXqZnkhZwibfIpHkMqEEtsBkKquo//lO57PP4w+I1uMy52jkJIG+bf/o4w0x ckPQVifLUDEAwkve98+urFqYHIasvgsdt72JMiwNQ3tjKg0pzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD2dvoDs6w3OLdWLLtIXIVkF69SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjY4YTg2ZjktOTZmNi0z M2EzLTk5OTctNmZhOTVkNWExMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJsUAhPYxa9lY3X+eFEL9diWYODOvZg0VjR9gtgsaqQ0PYi0rJt5XNR t9o8YatnaYUbHW2cDBZ+1e6RYjioW/gT9UEN/reZMiTk2ZMTm2Vb7GWAR8ah4RmW 3aZaZl3wXJfOGovaMQv4djoMey+EbKwMfc8Pd9QdqWWq/CfjUKUVvc/NCnx1K+1H z0RRGmkzqkJ+rfMdDp6vzV18vloNueNPcio+qlUjG4cETdi+7qSIX6PhFtaW0r/G 1pFc9d1ewJ9qumbYRpFYIXlfsevxDJDpEX/IchFqsSYtHv5nY2S2NL+hvr2ikVfw BZOBEx0H5UH4QD1ntBP5kppdhnDPMMY= -----END CERTIFICATE-----Generated at Thu Mar 19 07:15:23 2026 by rpki-client