$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b94d40c6-9d40-3f55-8f85-342d57fc8a4e.roa File: b94d40c6-9d40-3f55-8f85-342d57fc8a4e.roa (raw, json) Hash identifier: boInGP4vgQJtARxwiCIcdsokUFt6U7co+cXM5AqapIA= Subject key identifier: 45:9B:F3:40:38:C3:EE:D2:6E:1A:88:00:33:83:BE:9A:FE:D6:EA:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A000640C7CCC0AA7176780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b94d40c6-9d40-3f55-8f85-342d57fc8a4e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.228.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:00:64:0c:7c:cc:0a:a7:17:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=a6062a7a-fbba-406b-8032-a22b6bcc986c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:ef:81:ea:91:e8:18:e9:3f:c2:35:7b:79: 84:58:00:8d:94:e2:f8:24:74:00:e6:b8:7f:df:73: 81:e2:72:e0:c8:48:a2:f8:5b:b2:1b:74:32:85:b9: d5:6c:12:65:29:48:dc:14:c7:e8:d5:0d:50:b9:ac: 0f:de:b4:29:1a:69:91:69:b9:a2:5e:7b:a2:64:c4: 00:5d:12:6d:ee:55:c8:31:64:2c:e0:1f:bd:e7:90: 8a:1c:9e:c7:69:a4:b2:00:9b:22:7c:95:43:91:ee: 2d:90:80:d8:b9:4a:ba:98:96:fc:67:f9:35:2f:17: 2d:ab:f6:ec:fd:53:08:6c:f1:69:85:bf:87:a7:84: f4:23:f5:89:90:4e:85:0d:7a:d2:d8:92:5f:60:1b: 81:f2:25:4b:11:d6:97:a8:c5:5b:13:25:25:47:7a: f7:4f:d5:b8:b4:b4:4b:f7:1b:26:87:a7:3d:d5:61: d4:c1:1a:97:31:28:8d:3d:ad:b3:a5:76:d9:60:d5: 0e:86:f7:4d:e8:ff:c4:20:91:a7:fd:fb:1a:76:fd: d5:6d:4a:64:76:6e:6f:c2:c2:25:3b:37:b9:2c:6d: 57:7c:77:88:36:62:d4:e4:74:59:b8:f9:3c:2b:28: b6:dc:4e:06:99:26:0e:3e:1b:f3:e1:cd:46:37:7b: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:F3:40:38:C3:EE:D2:6E:1A:88:00:33:83:BE:9A:FE:D6:EA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b94d40c6-9d40-3f55-8f85-342d57fc8a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b2:27:10:92:d9:4e:7e:8a:0d:65:6d:61:90:af:13:49:c9: 0b:e1:3e:c1:13:94:76:6a:61:f8:53:1c:85:b4:41:8f:c1:63: 4d:98:43:ee:9d:11:35:d7:d0:69:71:cd:24:65:05:6f:80:3a: 43:4b:0c:a6:e1:7f:4a:1c:84:24:72:eb:45:4c:22:1d:04:ad: f5:67:c0:df:fe:e5:1c:d5:80:f6:a6:fb:e0:d5:1c:37:59:c2: 4f:30:87:29:d5:47:0d:cd:b2:ef:bb:8c:c0:3e:f5:d8:ff:e9: fa:ea:bb:84:e7:ee:74:0b:29:24:c8:86:97:0d:61:26:fc:4c: 94:4f:c0:26:5d:22:16:7e:26:fe:e4:a8:22:2a:c0:06:0a:56: 5d:3a:1d:28:4b:1c:9c:7a:3c:3d:4b:02:04:80:09:62:0a:af: 40:e2:1d:10:bf:b7:95:d1:e0:86:5f:14:91:dc:2c:f2:be:8f: 52:7c:6c:c7:2c:8d:3a:c5:fc:3c:bd:a6:ef:61:b2:86:d6:c1: c7:40:db:a2:99:64:a1:df:9d:2b:b2:09:ae:7f:d9:20:e8:42: 13:54:f9:cb:9e:51:a2:36:33:38:a4:51:f2:08:a1:be:17:cc: 57:1b:71:04:ab:e0:bb:4a:ec:f1:93:37:c8:1f:82:3b:ca:9b: 73:58:d1:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oABkDHzMCqcXZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YTYwNjJhN2EtZmJiYS00MDZiLTgwMzItYTIyYjZiY2M5ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZfvgeqR6BjpP8I1e3mEWACNlOL4JHQA5rh/ 33OB4nLgyEii+FuyG3QyhbnVbBJlKUjcFMfo1Q1QuawP3rQpGmmRabmiXnuiZMQA XRJt7lXIMWQs4B+955CKHJ7HaaSyAJsifJVDke4tkIDYuUq6mJb8Z/k1Lxctq/bs /VMIbPFphb+Hp4T0I/WJkE6FDXrS2JJfYBuB8iVLEdaXqMVbEyUlR3r3T9W4tLRL 9xsmh6c91WHUwRqXMSiNPa2zpXbZYNUOhvdN6P/EIJGn/fsadv3VbUpkdm5vwsIl Oze5LG1XfHeINmLU5HRZuPk8Kyi23E4GmSYOPhvz4c1GN3s0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWb80A4w+7SbhqIADODvpr+1urYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjk0ZDQwYzYtOWQ0MC0z ZjU1LThmODUtMzQyZDU3ZmM4YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCyJxCS2U5+ig1lbWGQrxNJyQvhPsETlHZqYfhTHIW0QY/BY02YQ+6d ETXX0GlxzSRlBW+AOkNLDKbhf0ochCRy60VMIh0ErfVnwN/+5RzVgPam++DVHDdZ wk8whynVRw3Nsu+7jMA+9dj/6frqu4Tn7nQLKSTIhpcNYSb8TJRPwCZdIhZ+Jv7k qCIqwAYKVl06HShLHJx6PD1LAgSACWIKr0DiHRC/t5XR4IZfFJHcLPK+j1J8bMcs jTrF/Dy9pu9hsobWwcdA26KZZKHfnSuyCa5/2SDoQhNU+cueUaI2MzikUfIIob4X zFcbcQSr4LtK7PGTN8gfgjvKm3NY0WY= -----END CERTIFICATE-----Generated at Thu Mar 19 07:11:39 2026 by rpki-client