$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9bfd3158-9d02-3bda-8eb6-4cf047c14173.roa File: 9bfd3158-9d02-3bda-8eb6-4cf047c14173.roa (raw, json) Hash identifier: fIn3XJevaI8kJQXgIav6ObGEYrIzXfAzg4JLm1HLGGo= Subject key identifier: 26:6F:E6:2E:BE:54:88:A3:1D:8B:D7:42:D5:6F:3A:86:EC:B8:83:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FD068929B5133CEAF4600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9bfd3158-9d02-3bda-8eb6-4cf047c14173.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.230.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d0:68:92:9b:51:33:ce:af:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=979f455d-38ed-4138-805f-381a84279c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:db:9f:59:87:0a:b1:c4:32:bb:1f:e8:ae: ee:57:4e:cd:8b:30:6e:ed:01:c0:61:61:ba:18:9a: 83:cb:2a:17:e0:90:0f:08:12:33:17:1f:da:94:f3: a3:6d:a9:d9:7c:c2:09:e2:8a:2f:7c:bb:75:32:b1: 32:7d:ce:3f:83:a1:90:ca:01:b6:b9:a4:58:67:65: 34:66:56:35:f9:d0:6d:65:de:97:f5:3e:d4:e9:50: 3a:36:fd:f6:4e:fd:a9:34:15:d9:95:d3:b5:49:c9: de:e7:1a:c5:5f:3b:8c:05:c7:fd:c6:81:d2:4a:14: da:42:2b:35:6b:41:2b:2b:ce:f9:83:b1:e8:d9:5d: 33:ff:e8:47:ec:74:64:14:ff:ec:bf:41:bc:a4:38: b3:dd:bb:12:8d:e4:49:23:7f:ee:09:27:15:00:ee: 8c:b4:95:de:37:1e:d2:db:56:ca:ff:dc:5b:03:c2: 3c:c7:5f:f4:82:6c:ab:24:bb:b7:fe:6e:e4:71:29: d8:5c:b2:43:b1:67:82:ff:17:02:42:9d:14:22:45: f5:ed:76:d4:4b:83:88:80:a8:fd:63:b4:42:9b:fb: 06:1d:a9:c3:86:b7:0a:fa:dc:04:90:0a:f1:28:f5: d8:27:b6:0c:4d:87:40:50:ec:01:96:92:c6:20:4e: a9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6F:E6:2E:BE:54:88:A3:1D:8B:D7:42:D5:6F:3A:86:EC:B8:83:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9bfd3158-9d02-3bda-8eb6-4cf047c14173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ab:32:22:92:b5:ae:f8:87:ff:d7:87:db:ba:de:af:d4:e1: 34:44:c1:e4:53:94:29:33:50:c2:a5:6e:a8:9e:9f:f7:3a:73: be:41:8e:05:24:c8:20:3b:37:40:07:16:8a:78:7b:78:4c:ea: 71:37:55:1c:ab:c2:03:65:8a:58:8b:67:e5:7a:ff:81:56:94: 31:9e:13:d7:93:b3:6e:04:96:e8:ae:f4:a1:55:06:b4:35:07: bd:21:4e:08:31:00:5e:6c:5b:75:df:d6:fc:26:b2:4b:60:75: 82:b2:c2:42:a3:2f:42:66:94:b1:e0:68:9b:91:7a:84:18:e0: eb:1a:ab:e0:47:a3:fe:08:41:35:24:c3:32:a4:0f:ed:04:26: ad:e2:20:a3:49:9d:84:35:81:6c:3c:01:37:dd:b4:9d:e1:df: c8:ff:a2:e0:16:64:dd:f1:d9:92:34:6d:61:d0:bc:57:f0:03: 16:f0:41:86:c4:f5:64:67:bf:3c:4b:09:ec:cf:69:43:b0:4a: 9a:f6:4e:67:94:7e:88:f7:38:1d:58:c7:59:b8:57:fa:24:0d: 1d:2b:8b:ec:88:61:4f:14:1d:d3:6f:c5:f5:40:6c:3c:5a:f6: 4a:d4:f1:46:80:c4:0e:a8:66:3b:06:3d:ab:7b:5c:b4:23:cc: 9f:78:f4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9BokptRM86vRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OTc5ZjQ1NWQtMzhlZC00MTM4LTgwNWYtMzgxYTg0Mjc5YzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB7bn1mHCrHEMrsf6K7uV07NizBu7QHAYWG6 GJqDyyoX4JAPCBIzFx/alPOjbanZfMIJ4oovfLt1MrEyfc4/g6GQygG2uaRYZ2U0 ZlY1+dBtZd6X9T7U6VA6Nv32Tv2pNBXZldO1Scne5xrFXzuMBcf9xoHSShTaQis1 a0ErK875g7Ho2V0z/+hH7HRkFP/sv0G8pDiz3bsSjeRJI3/uCScVAO6MtJXeNx7S 21bK/9xbA8I8x1/0gmyrJLu3/m7kcSnYXLJDsWeC/xcCQp0UIkX17XbUS4OIgKj9 Y7RCm/sGHanDhrcK+twEkArxKPXYJ7YMTYdAUOwBlpLGIE6pTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZv5i6+VIijHYvXQtVvOobsuIMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWJmZDMxNTgtOWQwMi0z YmRhLThlYjYtNGNmMDQ3YzE0MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRObQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACrMiKSta74h//Xh9u63q/U4TREweRTlCkzUMKlbqien/c6c75BjgUk yCA7N0AHFop4e3hM6nE3VRyrwgNliliLZ+V6/4FWlDGeE9eTs24Eluiu9KFVBrQ1 B70hTggxAF5sW3Xf1vwmsktgdYKywkKjL0JmlLHgaJuReoQY4Osaq+BHo/4IQTUk wzKkD+0EJq3iIKNJnYQ1gWw8ATfdtJ3h38j/ouAWZN3x2ZI0bWHQvFfwAxbwQYbE 9WRnvzxLCezPaUOwSpr2TmeUfoj3OB1Yx1m4V/okDR0ri+yIYU8UHdNvxfVAbDxa 9krU8UaAxA6oZjsGPat7XLQjzJ949ME= -----END CERTIFICATE-----Generated at Thu Mar 19 07:15:26 2026 by rpki-client