$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa File: 8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa (raw, json) Hash identifier: Z2zjUBgqjlc3Kgs/VTbomGsuS0QBaUjjDAkIfo6IE2E= Subject key identifier: 1E:4E:5A:D7:51:97:57:A4:E2:68:0B:8C:6D:FB:AE:95:E2:88:13:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F7E399DBF91BE49532C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.10.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:7e:39:9d:bf:91:be:49:53:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=170d4490-a4f0-4d77-80af-ff220da71d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:c6:dd:54:4e:c9:1d:cb:e5:8b:c6:95:42: 7f:16:5d:19:f7:8b:35:07:06:0b:3b:d1:04:5a:2f: b9:1e:ad:ee:fd:96:c0:8c:4e:c0:60:7d:de:14:5d: a4:15:37:89:22:95:0d:75:af:7a:0b:6c:9c:c8:4b: d7:12:b2:c3:40:34:e9:a4:81:00:3e:73:b2:09:09: b0:da:af:17:96:36:52:29:57:44:41:e6:1a:88:fb: 1d:39:63:c1:44:a9:8b:c1:6d:99:55:df:4b:0d:cb: 3a:b0:46:0f:39:85:e5:b6:23:aa:8f:94:db:e0:ec: fd:8b:b1:92:9a:58:89:86:a1:64:06:d5:3d:56:7c: c4:22:87:35:2e:76:33:b4:52:2e:40:54:8b:05:2e: d0:a2:f5:4f:77:a2:34:71:4c:69:b0:cc:46:14:af: d3:e8:bd:05:5c:79:42:41:98:22:7e:73:76:a5:f3: 63:97:4d:c7:18:aa:28:25:51:a9:00:41:16:f2:11: 16:c1:32:7b:6d:a3:67:b6:4e:f1:b0:0f:68:83:6e: bf:ea:c8:f4:ee:9e:6b:50:50:91:f0:82:b7:10:d0: d0:60:c5:3e:8e:e6:c7:fb:23:f5:bb:40:2c:02:8a: 10:ff:45:7e:77:58:04:6e:05:e9:b2:6e:88:0e:33: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4E:5A:D7:51:97:57:A4:E2:68:0B:8C:6D:FB:AE:95:E2:88:13:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e7:45:ea:52:2c:7d:29:99:a0:24:c6:07:31:6e:f7:e3:46: 0d:71:d3:01:aa:4f:7c:46:9c:0a:3d:e4:be:36:2b:23:df:e0: 33:fc:ac:1e:78:e5:67:6d:07:c5:dd:27:6f:09:07:1a:97:47: 20:90:22:98:14:27:66:7f:8d:af:e5:8a:4c:86:63:78:f0:96: 95:d8:7a:61:b1:5e:e0:11:4d:84:c3:ae:51:5e:ca:20:c7:df: c4:53:bf:13:b2:bf:fd:46:da:dc:eb:1f:ee:ee:40:75:b2:ca: c5:e4:4a:28:39:47:6d:34:53:a1:9e:77:60:ca:cc:0e:fd:4a: 15:0b:05:d0:54:ed:91:68:3a:18:98:f8:d2:f4:56:82:6d:fa: b1:c3:d3:f1:17:f8:ff:b6:bb:c7:46:7c:e4:c6:8f:6b:7b:6d: 00:ac:e0:35:e5:27:c0:c7:a3:80:cf:ff:e4:33:f8:54:c6:c0: 85:b3:9a:c1:cd:16:cb:91:ef:a4:02:ee:cc:65:b3:50:07:aa: 87:94:51:dc:66:6f:12:77:73:f4:25:b5:e7:25:b1:ab:d4:06: 1a:43:22:53:d7:fa:03:00:b4:ec:c8:31:19:b5:c3:3c:cb:d6: 96:e5:1c:a2:09:07:88:9b:7d:e7:be:72:90:fc:10:a9:6a:0d: f2:ce:d3:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n345nb+RvklTLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MTcwZDQ0OTAtYTRmMC00ZDc3LTgwYWYtZmYyMjBkYTcxZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbbG3VROyR3L5YvGlUJ/Fl0Z94s1BwYLO9EE Wi+5Hq3u/ZbAjE7AYH3eFF2kFTeJIpUNda96C2ycyEvXErLDQDTppIEAPnOyCQmw 2q8XljZSKVdEQeYaiPsdOWPBRKmLwW2ZVd9LDcs6sEYPOYXltiOqj5Tb4Oz9i7GS mliJhqFkBtU9VnzEIoc1LnYztFIuQFSLBS7QovVPd6I0cUxpsMxGFK/T6L0FXHlC QZgifnN2pfNjl03HGKooJVGpAEEW8hEWwTJ7baNntk7xsA9og26/6sj07p5rUFCR 8IK3ENDQYMU+jubH+yP1u0AsAooQ/0V+d1gEbgXpsm6IDjN2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5OWtdRl1ek4mgLjG37rpXiiBMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGI5ZmQ0ZWItODBiOS0z NWE3LTgzMmUtZWU5M2ZkYzNmMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7nRepSLH0pmaAkxgcxbvfjRg1x0wGqT3xGnAo95L42KyPf4DP8rB54 5WdtB8XdJ28JBxqXRyCQIpgUJ2Z/ja/likyGY3jwlpXYemGxXuARTYTDrlFeyiDH 38RTvxOyv/1G2tzrH+7uQHWyysXkSig5R200U6Ged2DKzA79ShULBdBU7ZFoOhiY +NL0VoJt+rHD0/EX+P+2u8dGfOTGj2t7bQCs4DXlJ8DHo4DP/+Qz+FTGwIWzmsHN FsuR76QC7sxls1AHqoeUUdxmbxJ3c/QlteclsavUBhpDIlPX+gMAtOzIMRm1wzzL 1pblHKIJB4ibfee+cpD8EKlqDfLO0wg= -----END CERTIFICATE-----Generated at Thu Mar 19 05:35:56 2026 by rpki-client