$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be80dfdd-4d5f-3123-acf4-b118f5f1485f.roa File: be80dfdd-4d5f-3123-acf4-b118f5f1485f.roa (raw, json) Hash identifier: VEP7Bdn47gwNgNwWRmpa57cfJZ207lfO3hL5XfVKAy8= Subject key identifier: A1:4B:32:DC:38:00:10:ED:0B:ED:0B:FC:4C:05:09:F4:E6:2D:AE:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F9B613B43E33D4595B02F Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be80dfdd-4d5f-3123-acf4-b118f5f1485f.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.109.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:9b:61:3b:43:e3:3d:45:95:b0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c0ac1ca8-b4c9-49bb-bae4-a86f89a16ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:97:0d:bb:41:e4:3f:56:b2:c9:04:df:32: 83:4d:39:ac:37:f3:7e:56:30:5d:d2:0b:57:44:ec: a8:2f:30:6c:9b:67:26:a1:a6:17:4c:7d:ca:ee:a2: 8e:7d:f5:29:e8:a1:9e:a3:97:ea:f1:2c:6c:ba:f4: 93:d2:2f:19:47:77:ad:34:a2:50:a0:da:dc:c3:92: 46:d3:93:a0:5c:ed:88:85:41:d7:f1:8a:ce:c3:ee: cc:b3:91:9d:64:e8:23:72:71:99:e1:fb:d6:eb:8f: 70:fa:44:ba:b3:f8:0d:4e:b6:02:81:b9:0b:dc:3b: 96:23:64:5f:9a:ea:86:cc:75:bb:8a:0e:d4:c2:6a: cb:20:0d:72:7e:88:18:45:61:d6:3f:63:d1:1e:2b: f7:50:95:4e:3c:0c:e6:8e:d3:d3:b9:0b:72:f3:d7: c6:08:40:d4:77:13:7f:23:8e:41:7f:5c:ed:a3:75: ea:45:87:14:1d:6b:52:02:0f:72:9d:1d:6a:26:65: ad:56:83:11:34:0f:06:e8:10:9b:c6:ca:46:bb:a6: eb:d7:b3:58:96:75:a6:76:78:c8:f2:51:bd:12:60: 92:0d:24:06:1a:72:53:29:23:15:56:df:14:57:76: be:20:3c:41:1b:8c:9b:b2:43:0d:f3:7c:be:7e:8a: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4B:32:DC:38:00:10:ED:0B:ED:0B:FC:4C:05:09:F4:E6:2D:AE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be80dfdd-4d5f-3123-acf4-b118f5f1485f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:15:51:d4:df:40:0f:f4:8d:62:8d:7e:a2:67:19:a1:28:5b: 24:0b:15:99:35:63:78:d9:e4:c2:43:5d:cf:94:94:03:08:ed: 9e:e1:aa:75:e0:14:44:e2:5f:32:a8:05:d8:91:05:0d:1d:40: ff:f7:46:05:64:40:44:9d:c3:31:47:ea:43:a1:bb:b3:a4:43: d0:67:21:04:0a:d3:7f:31:50:a3:3f:f5:6a:1a:69:cd:3d:ab: 54:82:5f:ad:71:ba:28:18:da:6d:a1:11:47:ad:58:96:b2:59: 1b:74:6e:e0:6c:33:66:33:06:2b:80:00:4a:b9:56:06:90:8f: 53:ba:78:c9:d0:66:c9:1e:b7:ff:3a:79:41:1d:2c:e8:eb:72: c8:ec:54:2b:25:ab:c0:2a:02:98:e1:8c:44:b5:6b:0b:76:6d: 43:35:7a:10:e1:2e:92:51:9b:28:ad:41:a7:b8:c5:d2:14:56: 00:85:23:e0:ef:92:26:1d:3e:0e:2e:f8:4d:01:e2:c2:f9:1a: 77:46:c1:da:cb:ad:52:5a:0b:f2:8e:d9:73:da:40:b8:de:24: 78:25:4f:74:da:c8:2b:a8:53:db:15:d1:5d:d1:ae:76:f7:92: 35:1f:c4:dd:a3:5f:24:65:1b:57:25:f0:5e:27:8b:83:63:03: 91:f5:b9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5thO0PjPUWVsC8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzBhYzFjYTgtYjRjOS00OWJiLWJhZTQtYTg2Zjg5YTE2YWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheaXDbtB5D9WsskE3zKDTTmsN/N+VjBd0gtX ROyoLzBsm2cmoaYXTH3K7qKOffUp6KGeo5fq8SxsuvST0i8ZR3etNKJQoNrcw5JG 05OgXO2IhUHX8YrOw+7Ms5GdZOgjcnGZ4fvW649w+kS6s/gNTrYCgbkL3DuWI2Rf muqGzHW7ig7UwmrLIA1yfogYRWHWP2PRHiv3UJVOPAzmjtPTuQty89fGCEDUdxN/ I45Bf1zto3XqRYcUHWtSAg9ynR1qJmWtVoMRNA8G6BCbxspGu6br17NYlnWmdnjI 8lG9EmCSDSQGGnJTKSMVVt8UV3a+IDxBG4ybskMN83y+foq3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFLMtw4ABDtC+0L/EwFCfTmLa4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmU4MGRmZGQtNGQ1Zi0z MTIzLWFjZjQtYjExOGY1ZjE0ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUVUdTfQA/0jWKNfqJnGaEoWyQLFZk1Y3jZ5MJDXc+UlAMI7Z7hqnXg FETiXzKoBdiRBQ0dQP/3RgVkQESdwzFH6kOhu7OkQ9BnIQQK038xUKM/9Woaac09 q1SCX61xuigY2m2hEUetWJayWRt0buBsM2YzBiuAAEq5VgaQj1O6eMnQZsket/86 eUEdLOjrcsjsVCslq8AqApjhjES1awt2bUM1ehDhLpJRmyitQae4xdIUVgCFI+Dv kiYdPg4u+E0B4sL5GndGwdrLrVJaC/KO2XPaQLjeJHglT3TayCuoU9sV0V3Rrnb3 kjUfxN2jXyRlG1cl8F4ni4NjA5H1uTM= -----END CERTIFICATE-----Generated at Thu Mar 19 05:41:11 2026 by rpki-client