$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f4ff256-440b-3bed-becb-d5bc547dd121.roa File: 9f4ff256-440b-3bed-becb-d5bc547dd121.roa (raw, json) Hash identifier: IOtx6MI8z/dGNcoGY1VG7wUxk17N956HkUTkys6iloc= Subject key identifier: 5E:0B:CF:AA:E5:9C:C1:1E:3C:D7:48:56:23:B7:0F:F6:7D:4E:D1:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A00902651B20F9F1F75400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f4ff256-440b-3bed-becb-d5bc547dd121.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.230.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:09:02:65:1b:20:f9:f1:f7:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=bdb22fac-eaa8-4f32-9b55-8967ccc1a785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:9c:e6:6d:8f:34:0d:61:93:45:51:29:a1: 17:16:f2:c1:85:62:cb:25:0e:79:75:c4:27:1c:23: 0a:d7:e7:6c:6f:0d:b2:63:5c:aa:cb:a0:e0:c9:9d: b5:f1:a3:c4:d8:74:2e:4a:ad:3d:f3:a4:f9:65:fd: 7c:34:96:1b:ab:cc:f2:1c:cb:72:f6:8a:50:00:bd: ed:a6:2c:9e:87:58:84:4b:eb:38:d9:47:eb:63:d7: 4d:f4:51:86:5c:54:7e:88:c8:4e:b0:10:fd:e0:12: 21:11:65:90:50:b8:e9:9e:bf:8a:c0:76:d6:93:47: 64:89:e2:a5:cc:cc:c4:11:a9:e9:41:f9:72:b6:e1: af:25:41:50:3b:58:f6:0b:d4:4c:f1:b7:7e:24:c5: 14:bd:39:eb:a2:55:35:42:ca:38:12:52:bf:8b:f3: 04:d7:05:2a:9b:e6:db:d1:1a:e4:47:d9:8d:44:35: 21:50:8d:ce:e2:e9:97:36:b4:60:64:f9:3b:1f:8c: 9b:96:cd:9f:99:8e:4d:f9:11:40:f1:9e:29:9c:07: 1a:18:1b:0c:1f:a8:45:79:34:ae:25:95:f8:a2:d1: d1:9a:1e:4b:6b:c4:e2:0a:80:71:da:b2:64:51:94: 16:54:f3:14:f2:e1:1f:72:40:46:78:78:96:97:51: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0B:CF:AA:E5:9C:C1:1E:3C:D7:48:56:23:B7:0F:F6:7D:4E:D1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f4ff256-440b-3bed-becb-d5bc547dd121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:75:cf:d1:29:7b:25:00:03:0f:3b:a1:46:99:94:8b:57:6a: 1d:2f:19:26:87:b7:8f:ab:9d:c4:1d:7c:ba:a0:c5:78:3a:6c: c7:65:c0:b0:a2:35:b2:6b:2f:bc:69:13:3b:a6:f2:0b:91:a6: f9:41:61:e2:2a:7b:87:4a:13:32:26:16:d7:22:24:e5:62:8f: f3:87:99:1b:26:fd:40:63:c8:7f:1e:76:44:8f:b5:e8:8c:88: 4f:e0:0b:0f:0c:a4:33:07:c1:f8:9e:b1:7e:c9:6a:50:70:bb: ab:a5:13:ba:0b:7a:4c:cf:24:45:d9:65:4f:18:9e:ed:fe:c8: 9a:ca:9c:1a:fe:d6:48:44:46:2c:c9:7b:bd:b1:d0:17:c7:f7: 30:2c:7d:96:5a:0d:1d:2a:35:91:d8:47:a8:7f:f2:ea:2e:d6: 18:69:e2:47:95:d2:41:14:82:26:82:c2:d6:e7:31:ff:b7:c3: 0b:95:9e:33:c6:c3:1f:fd:20:3b:55:3e:57:46:d7:6c:b8:87: 55:2e:93:5a:fc:2c:ce:41:3f:52:0c:61:4d:60:41:51:f3:a1: d1:c7:17:26:f3:23:10:62:5e:ef:f6:dd:97:43:a2:01:ea:64: 5d:a2:59:4e:55:e9:1e:27:8a:b2:4c:df:4f:08:51:9e:cc:5d: 66:59:ca:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAkCZRsg+fH3VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YmRiMjJmYWMtZWFhOC00ZjMyLTliNTUtODk2N2NjYzFhNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJKc5m2PNA1hk0VRKaEXFvLBhWLLJQ55dcQn HCMK1+dsbw2yY1yqy6DgyZ218aPE2HQuSq0986T5Zf18NJYbq8zyHMty9opQAL3t piyeh1iES+s42UfrY9dN9FGGXFR+iMhOsBD94BIhEWWQULjpnr+KwHbWk0dkieKl zMzEEanpQflytuGvJUFQO1j2C9RM8bd+JMUUvTnrolU1Qso4ElK/i/ME1wUqm+bb 0RrkR9mNRDUhUI3O4umXNrRgZPk7H4ybls2fmY5N+RFA8Z4pnAcaGBsMH6hFeTSu JZX4otHRmh5La8TiCoBx2rJkUZQWVPMU8uEfckBGeHiWl1FlPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4Lz6rlnMEePNdIViO3D/Z9TtFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWY0ZmYyNTYtNDQwYi0z YmVkLWJlY2ItZDViYzU0N2RkMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRObaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF1z9EpeyUAAw87oUaZlItXah0vGSaHt4+rncQdfLqgxXg6bMdlwLCi NbJrL7xpEzum8guRpvlBYeIqe4dKEzImFtciJOVij/OHmRsm/UBjyH8edkSPteiM iE/gCw8MpDMHwfiesX7JalBwu6ulE7oLekzPJEXZZU8Ynu3+yJrKnBr+1khERizJ e72x0BfH9zAsfZZaDR0qNZHYR6h/8uou1hhp4keV0kEUgiaCwtbnMf+3wwuVnjPG wx/9IDtVPldG12y4h1Uuk1r8LM5BP1IMYU1gQVHzodHHFybzIxBiXu/23ZdDogHq ZF2iWU5V6R4nirJM308IUZ7MXWZZyhc= -----END CERTIFICATE-----Generated at Thu Mar 19 06:58:10 2026 by rpki-client