$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be59e702-c095-3d01-8ad7-517b46c06dbc.roa File: be59e702-c095-3d01-8ad7-517b46c06dbc.roa (raw, json) Hash identifier: o9IYs0JjKfW4xgVwLmdqcPkkNJRtP/toFy6l+fPlSXo= Subject key identifier: 6B:63:ED:E5:E0:B2:6E:09:2F:CA:74:F9:DB:22:15:AA:CC:40:07:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F75DB36C58937DEFE2520 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be59e702-c095-3d01-8ad7-517b46c06dbc.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.101.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:75:db:36:c5:89:37:de:fe:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=3497d3d5-f9ff-44eb-95ec-349ae586430d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:e8:75:58:76:4f:88:24:a7:d7:12:1c:a8: 20:58:b1:1e:68:3d:f4:06:97:30:b2:91:9d:4c:91: ce:ac:d3:88:85:0e:2f:59:11:a3:19:5b:00:bb:47: 4b:82:43:65:45:c6:e5:b3:9e:2b:c2:42:28:15:97: 1f:8a:f3:96:dc:aa:03:42:fc:be:cc:35:f4:1f:6a: e2:f1:2d:2a:c8:1a:cf:97:5c:fb:0b:0c:4a:ae:81: 92:b8:a4:00:e0:ac:22:2c:cc:4b:ea:e9:44:4f:e5: bb:83:7c:22:87:d3:05:98:74:52:d2:fc:99:11:d2: cc:17:76:3f:39:49:60:83:df:97:1e:c4:04:aa:d1: cd:af:5d:cf:3d:9f:5a:7a:d1:bd:21:c1:39:75:88: 90:f0:e9:39:97:f2:d3:38:a7:6d:3a:0a:7a:de:a1: 74:67:16:b2:6d:4f:db:38:1a:0a:17:3c:35:18:5c: 8c:88:b4:4c:73:66:a4:99:0a:eb:dd:6c:53:70:ea: bf:92:22:20:b5:c1:df:cf:f5:a6:8a:5c:56:ea:93: fe:fd:86:89:5c:36:a8:00:16:84:21:c4:06:9d:78: bc:e1:8b:46:6c:d5:f2:67:d9:95:9d:80:1c:46:c0: 9a:aa:78:5a:3f:c2:3a:b1:2a:40:40:b5:df:1c:34: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:63:ED:E5:E0:B2:6E:09:2F:CA:74:F9:DB:22:15:AA:CC:40:07:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be59e702-c095-3d01-8ad7-517b46c06dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:98:32:5d:10:9c:c3:63:6e:63:f2:cc:6b:ac:5c:63:9b:85: bc:13:cb:81:71:07:c1:ec:fb:e2:b7:20:a8:2b:87:32:1b:41: 6f:08:fc:80:26:b9:b8:09:03:03:cb:06:4f:a2:f5:f5:f6:96: 43:ab:4d:ba:de:59:b7:55:aa:1c:95:a8:b6:0b:89:33:e1:6f: 50:dd:11:8d:1a:ef:cc:2b:c3:cf:b3:84:8d:7d:00:c2:78:fd: ce:32:9b:53:2e:e3:6a:2a:2f:45:ee:9c:54:4a:ea:0f:4a:11: e7:ca:66:db:7a:f3:53:ac:f8:67:a5:83:20:ef:02:bc:86:4a: b0:7c:2d:ea:98:b7:23:cf:ce:25:b2:40:c7:cf:04:96:e6:ef: 3c:c4:40:e4:8e:65:8f:68:10:14:34:1b:40:8b:1d:9b:31:1d: 9a:45:fc:9c:76:57:d2:a7:60:dc:85:65:2e:bd:d8:67:1b:b3: 23:a6:42:97:0d:2b:46:70:8f:d1:42:95:29:98:e2:f0:b2:7a: 89:6f:64:05:23:00:69:cf:99:8e:30:e9:d2:ce:5d:5b:a2:24: ba:55:64:d1:9f:31:12:e4:9d:4c:41:75:2c:b3:4b:34:76:b0: b2:a8:41:05:54:92:66:04:c6:42:84:49:ba:b9:fd:b0:d6:8a: 81:22:d4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n3XbNsWJN97+JSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MzQ5N2QzZDUtZjlmZi00NGViLTk1ZWMtMzQ5YWU1ODY0MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArafodVh2T4gkp9cSHKggWLEeaD30BpcwspGd TJHOrNOIhQ4vWRGjGVsAu0dLgkNlRcbls54rwkIoFZcfivOW3KoDQvy+zDX0H2ri 8S0qyBrPl1z7CwxKroGSuKQA4KwiLMxL6ulET+W7g3wih9MFmHRS0vyZEdLMF3Y/ OUlgg9+XHsQEqtHNr13PPZ9aetG9IcE5dYiQ8Ok5l/LTOKdtOgp63qF0ZxaybU/b OBoKFzw1GFyMiLRMc2akmQrr3WxTcOq/kiIgtcHfz/WmilxW6pP+/YaJXDaoABaE IcQGnXi84YtGbNXyZ9mVnYAcRsCaqnhaP8I6sSpAQLXfHDRzkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtj7eXgsm4JL8p0+dsiFarMQAekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmU1OWU3MDItYzA5NS0z ZDAxLThhZDctNTE3YjQ2YzA2ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeYMl0QnMNjbmPyzGusXGObhbwTy4FxB8Hs++K3IKgrhzIbQW8I/IAm ubgJAwPLBk+i9fX2lkOrTbreWbdVqhyVqLYLiTPhb1DdEY0a78wrw8+zhI19AMJ4 /c4ym1Mu42oqL0XunFRK6g9KEefKZtt681Os+GelgyDvAryGSrB8LeqYtyPPziWy QMfPBJbm7zzEQOSOZY9oEBQ0G0CLHZsxHZpF/Jx2V9KnYNyFZS692GcbsyOmQpcN K0Zwj9FClSmY4vCyeolvZAUjAGnPmY4w6dLOXVuiJLpVZNGfMRLknUxBdSyzSzR2 sLKoQQVUkmYExkKESbq5/bDWioEi1IE= -----END CERTIFICATE-----Generated at Sun Mar 22 07:01:23 2026 by rpki-client