$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a38bb682-a2fc-3c17-b6c1-bab8229e3280.roa File: a38bb682-a2fc-3c17-b6c1-bab8229e3280.roa (raw, json) Hash identifier: u9WjzDQ5DloDkDJxlRt7O+niN3T+/F0vTJX5YCBcESY= Subject key identifier: 6A:BC:9D:17:D6:02:1C:18:AF:20:0E:C2:84:7F:DA:1B:96:2A:8F:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC37C1CA1FB5649F52E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a38bb682-a2fc-3c17-b6c1-bab8229e3280.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 174.68.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c3:7c:1c:a1:fb:56:49:f5:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=54ba7b0d-6758-47b7-941e-85147ffffc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:09:12:df:16:99:55:35:e5:fd:3d:10:4f: fd:f9:36:b0:34:47:50:eb:1b:96:ec:b1:04:ff:d0: 05:51:c0:df:a4:0b:c1:f7:22:6a:53:19:f8:68:56: 37:da:92:3b:63:54:6a:86:16:21:2b:86:1c:3e:1c: f6:48:ae:eb:9d:c7:66:6a:27:e8:a2:ed:a5:a1:0b: 6b:fa:a3:1e:b9:ec:79:b5:9a:24:ac:6f:d8:d4:05: b5:8f:ac:3b:36:93:16:24:2c:09:d0:59:4a:da:36: af:01:78:9e:25:f9:31:24:e7:ab:ab:d0:e8:a4:63: af:c5:ec:e5:19:7d:1e:71:65:82:77:3b:37:6a:68: 58:28:44:74:93:28:09:06:98:54:0e:b0:54:03:18: 8e:64:9d:9a:09:7e:bf:e2:eb:49:46:7e:bf:8d:dd: 7c:1e:9a:ee:9d:44:8d:cc:b6:7d:eb:4e:48:33:02: 62:60:30:60:44:f6:e3:83:18:71:ad:1e:de:d8:ab: 13:c1:ae:21:f6:d9:df:b7:18:19:a0:25:df:fe:83: 16:12:bd:1c:96:23:f9:41:6a:7f:48:f3:a2:92:fb: 63:2f:77:8d:ce:51:a5:bd:58:88:18:09:38:1d:c5: 4f:0c:f2:54:91:1b:5c:0d:a6:54:f5:74:14:2f:a9: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BC:9D:17:D6:02:1C:18:AF:20:0E:C2:84:7F:DA:1B:96:2A:8F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a38bb682-a2fc-3c17-b6c1-bab8229e3280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9e:aa:08:62:f4:89:c2:1d:18:26:ca:c5:7b:ef:1d:da:84: 49:46:d7:64:ff:43:09:d2:36:3e:42:85:89:88:3a:9e:a8:bc: 28:0b:91:20:85:ea:83:e2:39:6f:26:15:d8:aa:a7:6a:63:ba: 88:90:cf:30:bf:a5:22:28:1b:8a:33:f4:0d:d2:3c:9b:7f:e1: aa:4c:af:f5:4d:f2:b2:6c:ae:82:d1:44:e1:c3:53:00:a7:b1: a8:25:c6:ef:8d:b0:c9:59:9d:d5:e1:74:17:1c:91:89:22:3b: 37:95:54:e5:eb:33:d8:c2:eb:3e:7f:5f:2b:4e:72:41:44:2b: 50:04:06:02:56:68:16:23:1c:ad:59:a1:d4:28:32:f9:a2:1c: 9f:13:2f:6c:c2:a3:97:b5:6e:a1:f8:48:bc:c2:76:42:47:4d: a0:d0:d4:8f:69:8f:00:b6:f1:e3:cf:e2:27:c0:aa:75:8a:59: 6c:be:b0:fa:87:ed:f2:63:7d:d6:4b:f6:56:fe:3e:fd:2d:16: d5:07:5f:60:e9:d2:b5:86:a0:66:12:63:aa:4e:c0:8a:c7:32: ce:43:75:c9:2f:fd:6c:2b:39:64:36:bd:6d:85:2a:b6:68:e7: b9:f4:b6:e8:ad:a6:4a:f6:e7:a8:09:bc:b6:83:9b:fd:52:32: 19:81:a1:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8N8HKH7Vkn1LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTRiYTdiMGQtNjc1OC00N2I3LTk0MWUtODUxNDdmZmZmYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6IJEt8WmVU15f09EE/9+TawNEdQ6xuW7LEE /9AFUcDfpAvB9yJqUxn4aFY32pI7Y1RqhhYhK4YcPhz2SK7rncdmaifoou2loQtr +qMeuex5tZokrG/Y1AW1j6w7NpMWJCwJ0FlK2javAXieJfkxJOerq9DopGOvxezl GX0ecWWCdzs3amhYKER0kygJBphUDrBUAxiOZJ2aCX6/4utJRn6/jd18HprunUSN zLZ9605IMwJiYDBgRPbjgxhxrR7e2KsTwa4h9tnftxgZoCXf/oMWEr0cliP5QWp/ SPOikvtjL3eNzlGlvViIGAk4HcVPDPJUkRtcDaZU9XQUL6l6LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq8nRfWAhwYryAOwoR/2huWKo+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTM4YmI2ODItYTJmYy0z YzE3LWI2YzEtYmFiODIyOWUzMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKeqghi9InCHRgmysV77x3ahElG12T/QwnSNj5ChYmIOp6ovCgLkSCF 6oPiOW8mFdiqp2pjuoiQzzC/pSIoG4oz9A3SPJt/4apMr/VN8rJsroLRROHDUwCn saglxu+NsMlZndXhdBcckYkiOzeVVOXrM9jC6z5/XytOckFEK1AEBgJWaBYjHK1Z odQoMvmiHJ8TL2zCo5e1bqH4SLzCdkJHTaDQ1I9pjwC28ePP4ifAqnWKWWy+sPqH 7fJjfdZL9lb+Pv0tFtUHX2Dp0rWGoGYSY6pOwIrHMs5Ddckv/WwrOWQ2vW2FKrZo 57n0tuitpkr256gJvLaDm/1SMhmBobM= -----END CERTIFICATE-----Generated at Thu Mar 19 08:29:22 2026 by rpki-client