$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a52bd376-55f9-3a14-af17-4c5ceab265ea.roa File: a52bd376-55f9-3a14-af17-4c5ceab265ea.roa (raw, json) Hash identifier: RkUf0ano65EW3fkwC8+zLQTODpzuFbnlDvOxyIQ1/wk= Subject key identifier: D3:8A:C8:C1:F2:37:BE:74:CB:40:C6:58:0D:8C:97:E8:D8:76:45:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FF8F88361B80F14D16100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a52bd376-55f9-3a14-af17-4c5ceab265ea.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 174.68.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f8:f8:83:61:b8:0f:14:d1:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=84b3f0e1-afaf-44b0-8da5-ac0eeea12535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:9e:5c:19:41:4c:8f:f9:aa:7a:16:64:5d: c0:ad:27:bc:f0:09:f4:a5:da:30:9a:30:59:3c:7d: 89:3e:48:95:24:57:29:2b:21:7f:22:34:62:8d:91: d0:3c:14:54:db:9c:c3:ec:37:63:10:47:7e:f3:e2: ed:92:6c:89:d2:f9:14:75:d7:d5:66:79:9e:86:da: 7d:58:88:91:6d:fc:04:a7:43:c4:f8:bb:e9:4a:e4: 9e:8f:24:9b:8e:d8:10:bd:e6:9a:99:c6:da:dc:fc: e1:9f:8f:49:20:75:38:12:3a:86:fe:b6:a0:71:2b: 47:3d:61:d5:51:a0:10:49:2d:6d:bb:98:86:d9:7d: d0:05:32:30:ee:6c:4c:7f:60:e8:05:41:05:b2:39: ff:dc:d9:99:ee:aa:f5:30:df:51:2b:19:27:49:aa: 8f:aa:1b:3d:f3:dd:b0:43:ad:4d:4a:28:ca:22:98: cf:eb:eb:a8:e7:f3:f2:9c:52:5b:e2:58:c4:35:e2: 60:75:84:9e:98:10:9d:b8:4e:ff:46:a1:7b:1a:40: bf:e8:a8:2f:c1:22:e7:e6:b6:79:16:dd:d9:36:53: a8:47:5d:b6:43:87:e2:c1:b9:54:4a:8d:69:dd:09: 61:19:6b:2e:06:5e:58:9b:f1:8f:87:4f:21:20:10: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:C8:C1:F2:37:BE:74:CB:40:C6:58:0D:8C:97:E8:D8:76:45:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a52bd376-55f9-3a14-af17-4c5ceab265ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:26:21:21:8a:b1:f0:f0:49:26:39:5c:45:ba:ff:40:8d:34: 25:ab:59:0a:51:97:f2:25:de:cc:7b:28:b2:9f:47:f8:62:49: 69:e6:3a:a8:44:04:77:43:82:5d:99:8c:af:01:25:cc:b1:82: dc:dc:8c:93:76:65:90:fd:ee:79:83:78:c4:b1:78:9a:07:3c: b1:40:22:61:30:c5:67:15:0b:b3:bb:19:e3:29:d7:6c:d7:81: 1a:06:9f:1d:76:ba:3c:5f:fc:5b:70:ff:b0:3b:de:e7:0d:b1: 10:af:b7:ad:fd:c9:f0:e3:9b:87:76:90:62:bb:92:05:e3:b7: 5d:32:e6:dc:00:93:91:9c:94:bd:43:3d:c4:e5:5f:ad:9a:9e: 3e:dd:22:dd:a7:d4:2a:62:b8:ca:65:7e:dd:8d:57:80:59:42: 29:23:5e:f6:a8:3e:fa:be:5a:bf:42:52:1b:ca:df:4c:9b:1b: 64:f8:76:34:72:7b:2d:de:a2:2f:84:59:a1:40:9c:4e:2a:0f: 49:ba:2e:91:0f:55:ea:c3:3b:1c:26:ab:63:25:64:dc:c5:63: 7e:c1:51:bc:e8:5c:09:7f:93:98:0a:b1:11:05:50:4c:cc:91: a9:91:50:f1:b3:7f:69:0c:d9:7e:10:f4:28:eb:50:14:ae:2b: 60:17:d1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/j4g2G4DxTRYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ODRiM2YwZTEtYWZhZi00NGIwLThkYTUtYWMwZWVlYTEyNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP2eXBlBTI/5qnoWZF3ArSe88An0pdowmjBZ PH2JPkiVJFcpKyF/IjRijZHQPBRU25zD7DdjEEd+8+LtkmyJ0vkUddfVZnmehtp9 WIiRbfwEp0PE+LvpSuSejySbjtgQveaamcba3Pzhn49JIHU4EjqG/ragcStHPWHV UaAQSS1tu5iG2X3QBTIw7mxMf2DoBUEFsjn/3NmZ7qr1MN9RKxknSaqPqhs9892w Q61NSijKIpjP6+uo5/PynFJb4ljENeJgdYSemBCduE7/RqF7GkC/6KgvwSLn5rZ5 Ft3ZNlOoR122Q4fiwblUSo1p3QlhGWsuBl5Ym/GPh08hIBDdOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOKyMHyN750y0DGWA2Ml+jYdkVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTUyYmQzNzYtNTVmOS0z YTE0LWFmMTctNGM1Y2VhYjI2NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkRxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUmISGKsfDwSSY5XEW6/0CNNCWrWQpRl/Il3sx7KLKfR/hiSWnmOqhE BHdDgl2ZjK8BJcyxgtzcjJN2ZZD97nmDeMSxeJoHPLFAImEwxWcVC7O7GeMp12zX gRoGnx12ujxf/Ftw/7A73ucNsRCvt639yfDjm4d2kGK7kgXjt10y5twAk5GclL1D PcTlX62anj7dIt2n1CpiuMplft2NV4BZQikjXvaoPvq+Wr9CUhvK30ybG2T4djRy ey3eoi+EWaFAnE4qD0m6LpEPVerDOxwmq2MlZNzFY37BUbzoXAl/k5gKsREFUEzM kamRUPGzf2kM2X4Q9CjrUBSuK2AX0aQ= -----END CERTIFICATE-----Generated at Thu Mar 19 07:08:51 2026 by rpki-client