$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3627da8-09ca-3663-a7c9-2a80dbcee4e4.roa File: c3627da8-09ca-3663-a7c9-2a80dbcee4e4.roa (raw, json) Hash identifier: 1vBtltRn/SMLoCQFLhMe8nJu8S9kj3paTR6BWpycwm0= Subject key identifier: 20:53:31:C1:F6:40:29:7F:72:6A:FC:C7:25:04:F6:7B:1B:90:15:5F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FB765D10F790B4A679F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3627da8-09ca-3663-a7c9-2a80dbcee4e4.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.109.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:b7:65:d1:0f:79:0b:4a:67:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=cbbaaba0-7aa0-468a-853c-38924c874651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:fa:7a:06:8d:78:72:68:a7:a1:7b:0f:c3: 43:14:8c:ef:31:16:d8:3b:f8:e6:57:14:da:49:da: 84:5d:71:63:c5:d7:b9:0c:60:a6:64:b1:d7:59:14: 8d:0e:9d:d3:cf:b9:49:4d:6a:39:48:ee:d5:3d:63: 93:70:46:6c:35:b0:64:bb:aa:e7:3a:ea:f9:2d:70: f5:e8:72:34:d9:40:77:ab:00:e4:76:4b:2b:cd:4a: 57:1c:43:4d:58:39:e1:b6:30:1b:a3:76:db:72:c3: 5c:f1:cc:4e:c5:93:d7:8e:66:6f:c1:4f:f0:33:bc: f2:de:54:c2:48:07:e8:f5:23:88:86:e6:5b:39:85: ed:b9:a5:fc:42:33:4c:5b:c1:6e:e6:9a:0e:d7:56: b6:1e:75:92:81:8a:5f:ba:5f:ed:d7:08:0f:38:6d: 17:c4:46:99:b7:f9:96:99:ab:9a:9f:35:73:4f:7b: b5:54:02:cc:6b:b2:70:7a:81:dc:1d:7a:10:e1:53: 5a:74:e0:b2:2f:5c:83:70:e7:88:5c:17:b8:10:f0: f7:56:3c:74:39:8f:99:76:33:b7:16:b2:ac:01:b6: 6c:ee:8d:70:27:3d:53:d8:e3:f9:bf:e8:34:1c:57: 0d:7f:5f:1b:c8:aa:24:37:10:2f:d5:37:15:1a:8c: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:53:31:C1:F6:40:29:7F:72:6A:FC:C7:25:04:F6:7B:1B:90:15:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3627da8-09ca-3663-a7c9-2a80dbcee4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:47:45:bb:c7:a4:f1:b6:c9:8e:43:01:04:7a:33:41:84:4a: ef:7a:b6:12:84:57:de:0b:37:37:67:58:05:cb:f2:0e:91:68: 51:61:a3:a9:19:5e:ec:e8:7a:60:46:ca:6c:99:3d:a3:b2:66: 91:a2:ca:6b:35:c9:c4:b0:8d:8a:cf:56:41:22:39:da:27:55: 47:61:cc:b2:26:85:1e:f4:ed:66:4b:d1:68:a8:1e:ed:6d:89: 4c:f9:5d:e2:eb:eb:04:c0:7d:32:ae:26:b3:1a:45:fa:34:0f: 3a:2e:75:b3:9d:13:8c:3a:01:71:d1:2d:66:ec:6d:a0:89:1b: 11:3e:8d:7b:e9:1c:34:7d:b4:4c:58:84:da:da:b3:a2:2c:ee: 5a:b2:9f:91:a6:5b:71:36:5f:bd:e5:10:b1:a2:7f:e6:bf:0e: b7:da:dd:36:be:f8:f1:d0:01:32:95:7b:a4:88:c5:20:ee:68: cd:fd:eb:25:39:58:2d:0d:ce:66:28:8e:95:85:70:a3:cd:62: 4f:90:fd:cd:0e:cb:a9:a4:9b:08:89:7b:d7:a1:08:ca:b9:47: eb:22:7a:27:4e:00:0f:e9:a0:5d:83:0b:73:83:33:9e:05:77: a6:5e:7d:d1:05:32:32:0b:6d:0d:71:7f:cd:ae:4a:82:f2:18: 27:24:9b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7dl0Q95C0pnn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2JiYWFiYTAtN2FhMC00NjhhLTg1M2MtMzg5MjRjODc0NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JP6egaNeHJop6F7D8NDFIzvMRbYO/jmVxTa SdqEXXFjxde5DGCmZLHXWRSNDp3Tz7lJTWo5SO7VPWOTcEZsNbBku6rnOur5LXD1 6HI02UB3qwDkdksrzUpXHENNWDnhtjAbo3bbcsNc8cxOxZPXjmZvwU/wM7zy3lTC SAfo9SOIhuZbOYXtuaX8QjNMW8Fu5poO11a2HnWSgYpful/t1wgPOG0XxEaZt/mW mauanzVzT3u1VALMa7JweoHcHXoQ4VNadOCyL1yDcOeIXBe4EPD3Vjx0OY+ZdjO3 FrKsAbZs7o1wJz1T2OP5v+g0HFcNf18byKokNxAv1TcVGow9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBTMcH2QCl/cmr8xyUE9nsbkBVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM2MjdkYTgtMDljYS0z NjYzLWE3YzktMmE4MGRiY2VlNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBHRbvHpPG2yY5DAQR6M0GESu96thKEV94LNzdnWAXL8g6RaFFho6kZ XuzoemBGymyZPaOyZpGiyms1ycSwjYrPVkEiOdonVUdhzLImhR707WZL0WioHu1t iUz5XeLr6wTAfTKuJrMaRfo0DzoudbOdE4w6AXHRLWbsbaCJGxE+jXvpHDR9tExY hNras6Is7lqyn5GmW3E2X73lELGif+a/Drfa3Ta++PHQATKVe6SIxSDuaM396yU5 WC0NzmYojpWFcKPNYk+Q/c0Oy6mkmwiJe9ehCMq5R+sieidOAA/poF2DC3ODM54F d6ZefdEFMjILbQ1xf82uSoLyGCckmxI= -----END CERTIFICATE-----Generated at Sun Mar 22 07:01:05 2026 by rpki-client