$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c95fcc2-d460-37ce-aa35-671b96930480.roa File: 9c95fcc2-d460-37ce-aa35-671b96930480.roa (raw, json) Hash identifier: x/w56soBT4utrWEfkSTCPAS+OYS12QEWSfJEJWgL5Pc= Subject key identifier: D4:69:81:EF:B3:9D:5F:4C:38:CA:8C:99:09:70:A5:ED:66:E7:9E:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A0125EFC0A25FB89D611E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c95fcc2-d460-37ce-aa35-671b96930480.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.8.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:12:5e:fc:0a:25:fb:89:d6:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=d4064334-bcf9-428a-bb30-c464c3eb0969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:5e:57:3c:1c:f7:85:ac:16:53:c6:f5:0b: 9d:de:ff:cd:b5:3a:c5:fa:0e:fd:d8:53:64:99:d4: ae:f9:15:09:72:42:58:d2:3c:35:a0:98:45:2f:cc: 10:4e:90:cd:18:a4:88:2b:19:ed:35:d0:1c:08:8e: 4c:2e:0c:c3:97:54:12:d8:77:75:8a:2c:7d:e0:b6: 41:c4:95:61:5b:61:53:eb:01:2e:5c:b5:18:a6:f3: 79:77:c7:45:70:8e:f3:fd:16:68:a6:01:12:9d:05: ed:80:73:bb:0d:19:3c:a4:47:23:ba:b9:8d:70:a0: 63:7f:1d:8c:d3:a3:22:b2:9f:00:d7:1c:41:d4:68: e4:f9:b7:41:39:96:b2:bf:99:5d:2b:64:e6:37:64: c0:80:06:8b:74:a5:de:bb:56:19:90:30:49:d6:2d: e2:0a:81:de:e6:65:08:81:21:25:7b:76:8a:aa:10: 4d:47:d5:15:57:51:a5:97:9b:77:5d:5b:c6:19:75: 9d:a4:d1:ec:69:34:cf:db:18:6b:1e:2c:bc:a1:aa: 5a:7b:3e:67:5d:b8:5a:5b:b0:23:2b:b2:36:6f:d5: 50:2a:2f:f0:2e:88:45:bc:9d:14:76:71:c8:18:d7: 42:e6:8e:02:dd:71:46:07:4a:28:86:ea:56:80:70: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:81:EF:B3:9D:5F:4C:38:CA:8C:99:09:70:A5:ED:66:E7:9E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c95fcc2-d460-37ce-aa35-671b96930480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:24:f3:4f:3b:31:b4:40:d5:1a:0b:3c:ff:be:c1:64:f7:e4: ff:18:f3:1e:7b:6c:a7:7c:d2:ff:5c:fa:e7:8f:62:92:6f:51: ab:be:2d:dc:6e:c5:89:1e:40:3a:65:cb:cc:bf:6d:dc:a0:c3: 9d:be:f0:4a:6d:be:6e:2d:a1:59:bc:6c:d1:84:8d:07:20:46: 79:b6:67:bc:44:e6:ea:86:d6:c6:45:0e:4f:0a:c4:0a:74:84: fa:18:f1:b1:9b:73:09:2d:91:cc:d8:21:1e:b2:a5:03:a9:27: cb:72:8e:f5:96:70:3a:61:bd:51:6b:00:66:15:3a:5e:b8:6d: 7d:37:2c:11:bb:7e:e9:0d:b3:37:c9:a5:2c:b0:a8:74:28:8f: 73:e6:5f:2a:0c:64:f3:0f:a3:62:a7:c0:28:2c:17:63:ce:cc: 51:4c:30:92:19:6c:5a:7d:76:b6:33:99:62:c1:c6:1f:ad:49: 43:3c:c5:1c:74:f0:0d:3e:b4:98:04:0e:73:11:91:3e:ab:4c: 71:30:f4:c4:a3:0a:39:db:3b:83:29:1b:e6:6c:01:f8:96:c6: 66:40:ba:ef:72:e5:ae:bc:2a:51:8c:ef:08:d0:e9:13:e4:d5: d2:4a:7d:50:2e:eb:fb:2b:60:2e:2e:c6:3a:a2:78:21:8a:4a: 47:c8:34:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBJe/Aol+4nWEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDQwNjQzMzQtYmNmOS00MjhhLWJiMzAtYzQ2NGMzZWIwOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMJeVzwc94WsFlPG9Qud3v/NtTrF+g792FNk mdSu+RUJckJY0jw1oJhFL8wQTpDNGKSIKxntNdAcCI5MLgzDl1QS2Hd1iix94LZB xJVhW2FT6wEuXLUYpvN5d8dFcI7z/RZopgESnQXtgHO7DRk8pEcjurmNcKBjfx2M 06Misp8A1xxB1Gjk+bdBOZayv5ldK2TmN2TAgAaLdKXeu1YZkDBJ1i3iCoHe5mUI gSEle3aKqhBNR9UVV1Gll5t3XVvGGXWdpNHsaTTP2xhrHiy8oapaez5nXbhaW7Aj K7I2b9VQKi/wLohFvJ0UdnHIGNdC5o4C3XFGB0oohupWgHAShwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRpge+znV9MOMqMmQlwpe1m555lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWM5NWZjYzItZDQ2MC0z N2NlLWFhMzUtNjcxYjk2OTMwNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEk8087MbRA1RoLPP++wWT35P8Y8x57bKd80v9c+uePYpJvUau+Ldxu xYkeQDply8y/bdygw52+8Eptvm4toVm8bNGEjQcgRnm2Z7xE5uqG1sZFDk8KxAp0 hPoY8bGbcwktkczYIR6ypQOpJ8tyjvWWcDphvVFrAGYVOl64bX03LBG7fukNszfJ pSywqHQoj3PmXyoMZPMPo2KnwCgsF2POzFFMMJIZbFp9drYzmWLBxh+tSUM8xRx0 8A0+tJgEDnMRkT6rTHEw9MSjCjnbO4MpG+ZsAfiWxmZAuu9y5a68KlGM7wjQ6RPk 1dJKfVAu6/srYC4uxjqieCGKSkfINIU= -----END CERTIFICATE-----Generated at Sun Mar 22 07:00:11 2026 by rpki-client