$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa File: a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa (raw, json) Hash identifier: 9AqfBbcPVyvrf3535LEigSRlUM3WFiXNZGp5RFJL9oU= Subject key identifier: 40:08:FB:F5:B2:1C:5F:3F:D1:88:C3:2A:08:8A:40:29:14:75:A1:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F86E7AFD0980337BCF440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.225.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:86:e7:af:d0:98:03:37:bc:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b9c37575-59ca-40cb-9945-7deea8c07ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3e:20:21:55:43:56:17:6c:09:66:da:8c:3a: bb:77:43:83:1b:e8:ff:50:8e:ae:7b:a6:05:ed:83: df:d9:76:89:62:7c:d3:22:e9:bf:3d:7f:1c:d9:2c: 16:7f:f6:37:c8:88:d3:a2:d5:60:45:dd:79:23:18: 8b:5d:0c:27:93:8b:01:06:8a:39:75:ec:14:c7:f8: 09:78:56:21:b5:7b:c4:0d:09:63:8e:fd:13:6f:90: 6e:67:93:d4:40:88:36:aa:ad:eb:16:10:71:09:43: 9b:19:57:cd:e7:bb:c3:1f:17:48:f9:c0:26:fe:f2: e8:8c:20:58:0e:29:e2:b9:9d:b6:61:69:a8:c7:6b: 2f:21:df:52:08:50:99:0a:4f:11:7e:48:b2:94:20: 1c:17:41:4e:32:ba:45:22:ad:82:60:8e:5b:36:61: 07:82:fc:73:fe:41:94:6c:cd:bc:d9:fe:5e:c3:ac: c0:7a:78:87:d9:83:74:66:d7:66:91:dc:16:03:31: 59:62:86:bd:6a:b8:bb:35:77:8c:32:e0:c6:f6:5d: dc:33:9f:7d:2c:5d:90:15:b4:7e:5e:a2:94:b5:28: 11:ae:e4:71:ed:dc:91:75:cc:53:e8:ad:86:9f:9a: 08:35:40:82:8c:ac:de:0e:17:38:12:90:55:47:d0: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:FB:F5:B2:1C:5F:3F:D1:88:C3:2A:08:8A:40:29:14:75:A1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5f:da:77:9e:b3:6b:fb:5e:02:14:55:99:f8:32:be:be:29: 6d:3d:f2:eb:6d:85:2b:10:98:a4:ad:ea:dc:e4:f7:3d:ff:40: 57:b8:fa:7f:1f:28:a2:62:66:77:f8:36:52:f1:c6:c4:4e:ca: 4f:2a:6c:6a:6f:a0:fc:9f:29:df:47:b1:f6:23:ec:1f:f2:39: 33:91:45:7c:ab:c2:b8:d5:4a:3b:1f:c7:25:27:65:fd:69:1b: 77:26:db:fd:a0:24:2f:78:ed:11:41:7a:a6:f9:96:1c:07:65: b3:3c:a5:13:9a:d4:25:00:b0:5b:c8:81:a6:a8:16:db:de:cd: 04:70:a0:b2:fd:a5:76:21:42:6e:ae:d1:43:22:de:69:26:48: 34:1f:ce:07:39:26:47:c4:07:47:a6:0b:87:10:c9:91:b9:cb: 4c:80:26:7d:3d:78:20:b9:b6:0c:25:d2:40:65:44:d6:19:4b: 19:40:41:ce:0d:f3:4d:8f:35:4a:a9:2b:ad:60:a9:fc:4b:f6: 34:3e:87:12:e8:1f:f4:11:36:2a:b2:b7:d1:91:6b:78:5a:57: b8:1a:9b:59:5d:59:81:e8:8d:c0:28:39:66:d4:2b:9f:d8:3b: 8c:0c:41:83:51:99:d9:21:6c:96:03:18:88:ea:e5:39:dd:bf: 94:a0:37:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4bnr9CYAze89EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YjljMzc1NzUtNTljYS00MGNiLTk5NDUtN2RlZWE4YzA3YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT4gIVVDVhdsCWbajDq7d0ODG+j/UI6ue6YF 7YPf2XaJYnzTIum/PX8c2SwWf/Y3yIjTotVgRd15IxiLXQwnk4sBBoo5dewUx/gJ eFYhtXvEDQljjv0Tb5BuZ5PUQIg2qq3rFhBxCUObGVfN57vDHxdI+cAm/vLojCBY DiniuZ22YWmox2svId9SCFCZCk8RfkiylCAcF0FOMrpFIq2CYI5bNmEHgvxz/kGU bM282f5ew6zAeniH2YN0ZtdmkdwWAzFZYoa9ari7NXeMMuDG9l3cM599LF2QFbR+ XqKUtSgRruRx7dyRdcxT6K2Gn5oINUCCjKzeDhc4EpBVR9C1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAI+/WyHF8/0YjDKgiKQCkUdaGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2ZmI4ZGYtNzhiMS0z MWVjLWI0ZTQtODRlNWUwNjZhNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFf2nees2v7XgIUVZn4Mr6+KW098utthSsQmKSt6tzk9z3/QFe4+n8f KKJiZnf4NlLxxsROyk8qbGpvoPyfKd9HsfYj7B/yOTORRXyrwrjVSjsfxyUnZf1p G3cm2/2gJC947RFBeqb5lhwHZbM8pROa1CUAsFvIgaaoFtvezQRwoLL9pXYhQm6u 0UMi3mkmSDQfzgc5JkfEB0emC4cQyZG5y0yAJn09eCC5tgwl0kBlRNYZSxlAQc4N 802PNUqpK61gqfxL9jQ+hxLoH/QRNiqyt9GRa3haV7gam1ldWYHojcAoOWbUK5/Y O4wMQYNRmdkhbJYDGIjq5Tndv5SgN5s= -----END CERTIFICATE-----Generated at Thu Mar 19 05:35:08 2026 by rpki-client