$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b4c9f66-5ea7-3b5e-b2c2-17f139688f85.roa File: 9b4c9f66-5ea7-3b5e-b2c2-17f139688f85.roa (raw, json) Hash identifier: 2iBKQD0H1bYVsBcRxdRdmTKoBoWGvq4+3sU8Lh6e3vs= Subject key identifier: F4:8D:58:F2:D4:C3:46:08:4A:EA:28:FA:93:3F:F6:81:28:84:1D:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FB164EDB6B044E3B53140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b4c9f66-5ea7-3b5e-b2c2-17f139688f85.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.13.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:b1:64:ed:b6:b0:44:e3:b5:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=54a755ec-80e7-472f-a14d-148f1940adc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:d6:89:16:cb:3b:c1:30:8b:30:61:d1:9e: 29:6c:6b:b0:37:0e:dc:32:3e:a1:c9:c6:e7:7a:94: 3e:05:c8:8b:ce:b5:44:e2:33:20:46:af:6b:cc:0d: 8b:04:4c:67:ee:0d:32:58:eb:83:5a:20:b4:20:57: 3f:59:7b:3f:c3:8a:f8:78:0e:12:21:1b:ad:20:85: cf:9a:f8:90:f6:07:a1:fa:40:62:4a:39:e0:29:b4: 0a:d8:82:54:4d:70:1c:7e:bd:a6:82:15:88:65:50: dd:3f:cc:f0:9d:ae:77:62:2f:09:9a:d0:02:64:e5: c5:e3:b2:6f:4c:2d:82:f7:7a:0f:69:bf:6d:e0:55: 60:39:6d:f3:33:b4:44:18:ad:bd:26:09:ae:58:fe: e3:32:19:b7:12:13:4e:54:74:7a:4a:bf:cf:72:e8: 5d:a4:44:76:fc:00:b4:ab:3b:c4:fe:b3:92:39:c9: 26:e5:6c:51:5b:ac:71:c2:81:09:35:09:2c:98:f3: 72:77:c8:88:ed:a9:da:8a:7d:43:aa:dc:63:10:b4: 52:75:57:22:9a:18:ca:f4:5e:85:6e:6f:02:53:4f: 21:25:c8:50:b9:f0:9e:23:98:da:0d:69:55:a5:d7: 92:6b:aa:f4:ce:c1:32:ce:91:c1:8e:2b:7d:dc:1d: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8D:58:F2:D4:C3:46:08:4A:EA:28:FA:93:3F:F6:81:28:84:1D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b4c9f66-5ea7-3b5e-b2c2-17f139688f85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.13.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:13:ab:58:d7:92:a1:47:f0:6e:c6:0d:32:49:ed:91:cd:1a: a4:02:e4:f4:0f:f5:2f:c6:af:5c:64:20:6e:48:0d:d6:a7:23: 53:fc:c4:25:bc:5f:60:a7:20:7a:d7:14:1a:43:1f:46:fc:25: 03:2e:11:7d:f9:52:59:40:04:b1:af:46:43:9c:3b:8c:6f:a6: 8f:84:be:8f:f2:1d:f5:b9:ac:51:d2:68:94:14:56:09:30:2c: 94:01:e2:c1:b9:a5:a0:7c:8b:9f:40:30:1a:33:47:4b:d7:41: d9:e7:f1:30:b3:3c:57:68:9c:6d:26:af:e9:ee:52:75:b9:a8: a3:8e:ae:92:c6:71:be:a1:a0:88:94:08:e1:4a:64:df:68:c5: 14:5a:ee:58:3b:16:d2:38:1e:d3:b5:8e:61:91:21:b9:ed:28: 58:7f:f5:2b:f1:23:89:61:e2:ee:ee:cc:7b:19:d2:f6:17:df: e6:3a:c1:bd:de:37:a9:5c:72:34:0d:96:11:9d:d0:01:fb:c2: cb:b0:5c:e3:2d:25:39:8d:f9:73:d6:26:6e:ca:88:53:df:23: 24:aa:fc:39:71:61:8a:9a:74:c2:79:32:6c:e6:9a:33:94:8a: 76:a0:66:60:94:05:81:d2:47:09:7e:e8:9f:9c:c0:12:b6:a0: 1e:ef:20:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7Fk7bawROO1MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTRhNzU1ZWMtODBlNy00NzJmLWExNGQtMTQ4ZjE5NDBhZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOfWiRbLO8EwizBh0Z4pbGuwNw7cMj6hycbn epQ+BciLzrVE4jMgRq9rzA2LBExn7g0yWOuDWiC0IFc/WXs/w4r4eA4SIRutIIXP mviQ9geh+kBiSjngKbQK2IJUTXAcfr2mghWIZVDdP8zwna53Yi8JmtACZOXF47Jv TC2C93oPab9t4FVgOW3zM7REGK29JgmuWP7jMhm3EhNOVHR6Sr/PcuhdpER2/AC0 qzvE/rOSOckm5WxRW6xxwoEJNQksmPNyd8iI7anain1DqtxjELRSdVcimhjK9F6F bm8CU08hJchQufCeI5jaDWlVpdeSa6r0zsEyzpHBjit93B3whwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSNWPLUw0YISuoo+pM/9oEohB0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWI0YzlmNjYtNWVhNy0z YjVlLWIyYzItMTdmMTM5Njg4Zjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRA3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUTq1jXkqFH8G7GDTJJ7ZHNGqQC5PQP9S/Gr1xkIG5IDdanI1P8xCW8 X2CnIHrXFBpDH0b8JQMuEX35UllABLGvRkOcO4xvpo+Evo/yHfW5rFHSaJQUVgkw LJQB4sG5paB8i59AMBozR0vXQdnn8TCzPFdonG0mr+nuUnW5qKOOrpLGcb6hoIiU COFKZN9oxRRa7lg7FtI4HtO1jmGRIbntKFh/9SvxI4lh4u7uzHsZ0vYX3+Y6wb3e N6lccjQNlhGd0AH7wsuwXOMtJTmN+XPWJm7KiFPfIySq/DlxYYqadMJ5MmzmmjOU inagZmCUBYHSRwl+6J+cwBK2oB7vIF0= -----END CERTIFICATE-----Generated at Thu Mar 19 07:04:13 2026 by rpki-client