$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa File: 7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa (raw, json) Hash identifier: by9Jt5qcqb1ihwRUGPaD1RX0aeg3fyqKjzXRy0WJc4A= Subject key identifier: 97:D1:C3:7D:C8:AC:CE:3F:BC:0A:E6:30:7C:D5:D3:98:22:BB:F6:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FED2938997CF3817ABC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.107.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ed:29:38:99:7c:f3:81:7a:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=46444ad3-339e-4ed1-a8b4-322f11a2a811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:45:03:88:fa:3c:59:39:86:b6:75:6c:06: b7:14:97:81:13:2d:ee:9c:28:5b:49:eb:dc:de:db: 21:b5:88:0b:23:a2:04:e8:09:0e:15:59:9a:ce:d2: 02:19:7f:6d:f6:8f:18:14:20:a3:13:91:b3:0f:bd: 3e:a5:b5:0f:cf:bf:a4:a3:56:7c:f5:a5:d2:e4:09: 5f:4c:37:62:f0:6c:66:ce:fa:7b:3e:4e:c5:cf:19: fb:c8:b7:47:9a:e3:4c:fb:e0:dd:f2:98:9c:e7:4c: 5f:e0:d4:f1:1e:f0:72:3c:28:de:19:a4:5e:2b:10: 7a:3d:a4:a4:84:42:0f:b8:a6:75:96:d7:42:1d:c9: 19:02:a0:60:bf:91:a6:86:c5:77:8d:c6:e2:63:f7: 19:14:3c:18:a8:df:f2:50:1b:69:db:97:9c:68:45: e5:92:b7:e6:df:ba:8c:c4:8d:93:7f:98:d0:7b:88: 53:e8:01:94:c0:db:d7:59:63:bc:44:65:a7:51:1f: 8c:b6:f1:36:a4:79:a3:4e:58:10:56:f0:9f:66:ad: 86:d3:47:df:6e:2a:3c:b5:bc:fe:37:11:bf:07:0e: 20:4e:cb:48:3d:48:5f:08:84:74:e8:b3:fa:fb:d8: ab:9d:65:28:61:1e:1c:d5:fa:0b:ff:1d:e2:46:1a: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:C3:7D:C8:AC:CE:3F:BC:0A:E6:30:7C:D5:D3:98:22:BB:F6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:90:ad:1c:7d:50:72:a3:b6:2a:b8:47:62:0e:17:53:1f:34: 9a:6e:74:3b:1a:94:e7:b8:fc:56:ea:6f:16:25:f1:d4:77:87: 1a:48:a1:96:d2:90:5a:62:07:2d:26:ef:69:b8:71:1e:9b:3f: 3a:c8:76:5b:51:76:8b:36:91:2e:43:50:f6:bb:c9:a1:b2:d8: c1:e5:63:48:91:e0:f4:0d:15:1b:a1:3f:fb:77:a3:76:18:d1: 37:e1:85:27:a0:fb:af:5a:b2:70:86:a1:62:a7:25:e4:11:18: c1:86:63:6f:c1:23:7d:59:0b:18:5f:15:14:de:cf:d0:25:89: 09:d9:7f:35:bc:1b:a5:cf:42:7c:35:13:19:79:91:8d:b4:25: c6:01:ea:b6:31:79:7e:f6:44:7b:7e:b4:81:a7:4a:fb:c6:c3: 06:8c:7f:74:36:60:e1:8b:9c:c2:2d:13:29:56:b8:6d:cb:3f: cb:36:f2:80:da:e7:ab:cb:5d:e4:79:d3:a2:2f:15:23:09:07: 41:29:e5:37:f5:cb:31:60:37:06:9a:ee:ea:8a:da:8d:3d:c2: 76:8d:0a:16:ac:48:d0:50:1e:61:b0:e0:08:4e:5e:d3:55:76: 76:3a:70:1e:20:aa:13:6e:78:36:19:66:b7:74:85:64:9a:7b: 12:bc:e0:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+0pOJl884F6vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDY0NDRhZDMtMzM5ZS00ZWQxLWE4YjQtMzIyZjExYTJhODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2pFA4j6PFk5hrZ1bAa3FJeBEy3unChbSevc 3tshtYgLI6IE6AkOFVmaztICGX9t9o8YFCCjE5GzD70+pbUPz7+ko1Z89aXS5Alf TDdi8Gxmzvp7Pk7Fzxn7yLdHmuNM++Dd8pic50xf4NTxHvByPCjeGaReKxB6PaSk hEIPuKZ1ltdCHckZAqBgv5GmhsV3jcbiY/cZFDwYqN/yUBtp25ecaEXlkrfm37qM xI2Tf5jQe4hT6AGUwNvXWWO8RGWnUR+MtvE2pHmjTlgQVvCfZq2G00ffbio8tbz+ NxG/Bw4gTstIPUhfCIR06LP6+9irnWUoYR4c1foL/x3iRhqUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfRw33IrM4/vArmMHzV05giu/bJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2U0M2FmNWYtMTM5Mi0z NDdjLWI2YzItZjZmMTQzZWM3MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmQrRx9UHKjtiq4R2IOF1MfNJpudDsalOe4/FbqbxYl8dR3hxpIoZbS kFpiBy0m72m4cR6bPzrIdltRdos2kS5DUPa7yaGy2MHlY0iR4PQNFRuhP/t3o3YY 0TfhhSeg+69asnCGoWKnJeQRGMGGY2/BI31ZCxhfFRTez9AliQnZfzW8G6XPQnw1 Exl5kY20JcYB6rYxeX72RHt+tIGnSvvGwwaMf3Q2YOGLnMItEylWuG3LP8s28oDa 56vLXeR506IvFSMJB0Ep5Tf1yzFgNwaa7uqK2o09wnaNChasSNBQHmGw4AhOXtNV dnY6cB4gqhNueDYZZrd0hWSaexK84FE= -----END CERTIFICATE-----Generated at Thu Mar 19 05:44:31 2026 by rpki-client