$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aea780a5-ff91-3a18-bdda-23fd8c520d41.roa File: aea780a5-ff91-3a18-bdda-23fd8c520d41.roa (raw, json) Hash identifier: kQqH/9/R0Aao90go2+6fQDtgw3I4LE+taL/VdarPWkA= Subject key identifier: 72:A3:CB:E7:31:5B:4B:F1:86:9C:FE:CC:B8:9C:42:D6:ED:8A:C4:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A0011A2D9BFB515F0C9000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aea780a5-ff91-3a18-bdda-23fd8c520d41.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.14.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:01:1a:2d:9b:fb:51:5f:0c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=161c9f3d-4e37-430f-811a-3398e61de820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:d9:9b:b1:28:d0:23:f2:5d:83:3c:c9:f9: 76:71:48:0e:d0:68:63:28:00:d7:e5:84:13:d8:5a: 13:c3:cd:d2:6e:1b:d3:b2:2a:53:4f:bc:d1:40:3d: 8c:54:74:91:fd:d2:00:90:75:eb:62:a2:28:ff:26: f9:78:9b:79:fb:45:0e:84:19:d2:3c:d3:85:aa:83: 4b:87:46:d8:6f:ac:68:79:ec:6f:ae:15:91:a4:b4: 78:e7:b2:f2:1e:ef:04:04:3c:25:26:43:51:41:dc: d0:4a:f5:d4:18:7e:eb:82:ef:6d:b6:81:e5:90:a3: 96:38:19:f7:71:2b:f7:82:b6:e4:3c:a9:be:a5:24: 66:9f:bb:be:7b:00:96:67:36:4d:9f:a8:44:dc:9c: 12:1a:f6:c4:21:fe:51:c3:e5:16:32:58:93:87:56: b9:6b:ce:12:73:a7:bb:90:1e:da:24:57:85:04:13: 3f:39:1f:fe:3e:43:c6:b5:2d:d2:d4:a9:86:58:a3: ea:b8:72:7b:98:57:df:33:f0:24:f2:f7:c6:78:0f: 1c:fd:9a:e9:d3:07:81:d0:aa:8d:42:63:6b:79:7a: cc:00:7b:82:5c:9b:1b:83:51:0b:40:54:b7:cd:e6: c5:5d:0e:36:ba:a9:a1:a3:58:b0:ee:19:35:34:aa: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A3:CB:E7:31:5B:4B:F1:86:9C:FE:CC:B8:9C:42:D6:ED:8A:C4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aea780a5-ff91-3a18-bdda-23fd8c520d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3c:03:ea:20:8f:93:87:f5:62:38:34:c8:07:c3:5c:60:0e: 27:3f:22:40:e6:94:dc:7a:90:37:26:2e:a3:7d:d1:54:ee:42: 67:55:66:20:88:90:55:81:b1:b8:32:9e:23:19:cb:b7:28:2c: 21:5d:98:ed:8b:61:a7:66:ef:0b:8f:bd:49:54:03:95:22:30: 44:15:8d:79:8a:a5:44:84:5c:11:e5:04:04:de:71:5f:f9:5f: 26:d2:3a:d3:9f:01:ae:ca:7d:70:bf:e5:96:fc:7c:75:a2:00: 7e:56:73:49:24:98:e2:42:1f:59:2d:bd:30:a6:43:44:c4:ee: c9:d0:38:4e:81:4f:c2:60:90:83:05:12:85:99:68:94:a5:1c: 41:6a:71:b2:be:7c:1a:5d:9d:b7:23:69:7e:06:26:d3:93:e3: 59:e0:b3:ac:99:58:70:94:1d:af:96:41:b7:b2:e7:6a:12:a9: 72:62:00:12:98:e1:d1:a7:40:51:19:a7:3a:27:3d:ec:e9:04: 39:c9:cf:3f:79:e5:a0:77:a0:e8:e2:d7:c8:20:03:35:8c:60: 70:c3:ef:bb:65:02:5a:03:e7:3f:45:f3:30:3f:71:3b:9e:c7: 3b:df:75:c8:ce:87:23:b9:64:da:4f:3d:7a:1c:77:62:65:b2: d7:59:94:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAEaLZv7UV8MkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MTYxYzlmM2QtNGUzNy00MzBmLTgxMWEtMzM5OGU2MWRlODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGPZm7Eo0CPyXYM8yfl2cUgO0GhjKADX5YQT 2FoTw83SbhvTsipTT7zRQD2MVHSR/dIAkHXrYqIo/yb5eJt5+0UOhBnSPNOFqoNL h0bYb6xoeexvrhWRpLR457LyHu8EBDwlJkNRQdzQSvXUGH7rgu9ttoHlkKOWOBn3 cSv3grbkPKm+pSRmn7u+ewCWZzZNn6hE3JwSGvbEIf5Rw+UWMliTh1a5a84Sc6e7 kB7aJFeFBBM/OR/+PkPGtS3S1KmGWKPquHJ7mFffM/Ak8vfGeA8c/Zrp0weB0KqN QmNreXrMAHuCXJsbg1ELQFS3zebFXQ42uqmho1iw7hk1NKpdTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKjy+cxW0vxhpz+zLicQtbtisRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWVhNzgwYTUtZmY5MS0z YTE4LWJkZGEtMjNmZDhjNTIwZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU8A+ogj5OH9WI4NMgHw1xgDic/IkDmlNx6kDcmLqN90VTuQmdVZiCI kFWBsbgyniMZy7coLCFdmO2LYadm7wuPvUlUA5UiMEQVjXmKpUSEXBHlBATecV/5 XybSOtOfAa7KfXC/5Zb8fHWiAH5Wc0kkmOJCH1ktvTCmQ0TE7snQOE6BT8JgkIMF EoWZaJSlHEFqcbK+fBpdnbcjaX4GJtOT41ngs6yZWHCUHa+WQbey52oSqXJiABKY 4dGnQFEZpzonPezpBDnJzz955aB3oOji18ggAzWMYHDD77tlAloD5z9F8zA/cTue xzvfdcjOhyO5ZNpPPXocd2JlstdZlOY= -----END CERTIFICATE-----Generated at Thu Mar 19 08:37:01 2026 by rpki-client