$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ba5f90b-901d-31ba-861e-236ba51aa320.roa File: 9ba5f90b-901d-31ba-861e-236ba51aa320.roa (raw, json) Hash identifier: FEc4hiWg+SmFC2UzHk8VMzPnEsSM/w84TLPEvlyC6A8= Subject key identifier: AE:9E:D2:77:34:08:F9:FE:AC:F6:A3:F9:6A:A8:4C:ED:32:50:A2:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FA0E4E4D5BBA10912CA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ba5f90b-901d-31ba-861e-236ba51aa320.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.14.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a0:e4:e4:d5:bb:a1:09:12:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=49f3de4c-6cbc-43ca-8bce-4a25eda02f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:c8:5b:8f:52:96:50:45:21:48:43:97:50: 36:e6:b1:77:9f:a9:aa:69:eb:50:a1:55:13:3e:6e: 3a:89:c9:11:c2:c4:39:95:fe:34:5d:2c:b1:b9:1d: af:2d:f9:1e:b9:40:81:37:43:26:b2:8a:89:c9:98: 82:d1:17:85:47:01:1f:15:cd:8a:fb:b6:46:71:05: 4f:d9:1a:96:b1:04:e0:d3:f3:14:36:c4:72:3a:15: ad:2b:ac:c5:47:bd:7e:4d:9e:9c:f4:ab:c4:68:4d: 7f:6a:f8:67:eb:e8:c1:41:e8:57:23:74:81:f5:33: 9d:ca:9a:50:fd:d2:4d:95:3b:06:e0:5e:e7:45:d7: f0:ce:8e:f4:7b:91:8c:e5:6a:69:f0:9e:5b:3f:72: b3:71:05:c8:c7:91:3a:29:42:a0:59:85:86:61:ed: dc:ab:a3:00:89:71:c7:46:f0:88:2c:cb:79:93:9d: 12:1d:7b:de:9c:dd:c2:47:99:5f:dd:37:49:19:7a: ec:ea:3f:8f:19:82:49:9f:e1:aa:91:a0:b2:be:aa: cb:f8:ba:2b:ee:9e:d8:4e:d9:38:de:81:85:eb:46: a0:b9:9c:80:70:be:bb:45:11:eb:2c:11:ab:fe:b4: 33:81:ae:31:37:bd:a8:32:01:6c:03:9d:61:93:94: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:D2:77:34:08:F9:FE:AC:F6:A3:F9:6A:A8:4C:ED:32:50:A2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ba5f90b-901d-31ba-861e-236ba51aa320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:48:63:77:ea:b1:b2:01:f1:39:0e:be:c7:53:d8:a7:a3:1c: 84:ba:fc:cf:d0:0c:6c:fb:e7:13:aa:28:e7:07:83:fb:dd:ea: 64:4e:a8:82:79:5e:1a:18:2b:9d:8a:66:c4:bb:76:09:5e:b2: aa:a1:1b:85:2a:46:5f:ac:f4:20:7f:af:c5:bc:3c:87:e2:a0: d6:97:39:b8:e3:59:e9:be:d8:6f:eb:0c:ed:c7:ff:b9:c9:ef: ae:33:dc:ed:0f:78:20:65:48:a2:95:73:06:06:19:1c:df:a7: 6a:fb:2b:78:80:1e:b7:b8:f5:f4:ae:bb:0c:59:a6:52:a6:18: ad:87:32:3d:9a:d3:07:5d:1a:ce:80:f2:c2:42:81:ba:30:96: e6:66:90:10:8d:44:52:8b:f1:d7:63:d6:a8:df:3d:91:49:5f: b7:13:e7:e4:ea:2c:94:29:a6:a7:16:1d:35:3f:02:59:a8:d8: e0:56:52:24:5f:36:db:2e:ca:d1:b1:49:f6:23:da:fc:f3:5b: 81:6d:5b:fa:85:e6:e9:c4:41:69:45:65:7c:2e:28:f2:9b:6a: 95:83:f8:3d:c9:20:96:a5:18:47:32:b4:5e:bd:48:d7:6a:70: 14:77:a1:b9:20:5b:1e:94:7a:3d:69:9d:9d:c5:7b:aa:ad:b4: 9d:48:d7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6Dk5NW7oQkSyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDlmM2RlNGMtNmNiYy00M2NhLThiY2UtNGEyNWVkYTAyZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVPIW49SllBFIUhDl1A25rF3n6mqaetQoVUT Pm46ickRwsQ5lf40XSyxuR2vLfkeuUCBN0MmsoqJyZiC0ReFRwEfFc2K+7ZGcQVP 2RqWsQTg0/MUNsRyOhWtK6zFR71+TZ6c9KvEaE1/avhn6+jBQehXI3SB9TOdyppQ /dJNlTsG4F7nRdfwzo70e5GM5Wpp8J5bP3KzcQXIx5E6KUKgWYWGYe3cq6MAiXHH RvCILMt5k50SHXvenN3CR5lf3TdJGXrs6j+PGYJJn+GqkaCyvqrL+Lor7p7YTtk4 3oGF60aguZyAcL67RRHrLBGr/rQzga4xN72oMgFsA51hk5SW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6e0nc0CPn+rPaj+WqoTO0yUKJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWJhNWY5MGItOTAxZC0z MWJhLTg2MWUtMjM2YmE1MWFhMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1IY3fqsbIB8TkOvsdT2KejHIS6/M/QDGz75xOqKOcHg/vd6mROqIJ5 XhoYK52KZsS7dglesqqhG4UqRl+s9CB/r8W8PIfioNaXObjjWem+2G/rDO3H/7nJ 764z3O0PeCBlSKKVcwYGGRzfp2r7K3iAHre49fSuuwxZplKmGK2HMj2a0wddGs6A 8sJCgbowluZmkBCNRFKL8ddj1qjfPZFJX7cT5+TqLJQppqcWHTU/Almo2OBWUiRf NtsuytGxSfYj2vzzW4FtW/qF5unEQWlFZXwuKPKbapWD+D3JIJalGEcytF69SNdq cBR3obkgWx6Uej1pnZ3Fe6qttJ1I1/A= -----END CERTIFICATE-----Generated at Thu Mar 19 05:40:41 2026 by rpki-client