$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c76863-7694-37b8-9c50-582f40a2b334.roa File: c4c76863-7694-37b8-9c50-582f40a2b334.roa (raw, json) Hash identifier: CrZl34+HZVeFjXdXqVEFCi6B2y2L6lvppeZAleoiJp0= Subject key identifier: 73:1E:B8:18:B2:2B:67:C4:10:5F:77:53:12:C6:31:0F:FD:23:1D:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FD187573E90E39733D580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c76863-7694-37b8-9c50-582f40a2b334.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.9.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d1:87:57:3e:90:e3:97:33:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=3369a599-aad7-40ee-9257-e32b539cbeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:c2:af:f3:3b:8e:e0:ce:5e:f9:8e:2d:d6: 17:ab:fd:ca:60:6e:7e:42:88:50:3b:f3:f4:b6:66: a2:b1:1f:69:81:40:bd:c7:5b:d9:71:27:5d:5b:aa: a5:d4:35:68:6c:f1:a3:e1:a5:19:ab:12:e5:8c:0d: fc:75:53:ff:91:cb:5c:45:05:ba:dd:ec:f9:f2:6c: bf:69:6e:0e:a7:a4:40:2b:0b:a8:f8:e9:1f:13:a6: 8d:fc:11:ef:e6:ac:72:5a:7f:d4:ad:94:9c:80:d8: 55:1e:ac:4c:ab:22:55:f2:07:42:08:87:06:9b:bd: 66:5f:49:33:4f:d4:d5:4f:d0:50:62:d8:bd:cc:63: 1c:60:e8:02:bc:13:a5:6f:de:76:d1:22:89:91:0b: 75:76:79:4e:c5:fa:55:2b:fa:44:5e:31:97:86:f9: be:ba:fe:19:45:24:8d:4a:62:a6:95:34:79:3f:70: 56:30:42:70:df:b3:97:34:ea:8e:74:92:57:77:36: f8:e8:5d:31:77:b5:ab:16:80:68:e9:7a:54:9c:1d: 34:18:01:07:22:7a:37:64:06:00:20:5f:50:2f:59: d4:4f:6e:70:41:1e:bb:13:b3:f1:75:eb:75:7d:51: 78:2d:d8:b5:f5:b4:f8:73:ae:7e:ef:2e:4a:39:fe: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1E:B8:18:B2:2B:67:C4:10:5F:77:53:12:C6:31:0F:FD:23:1D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c76863-7694-37b8-9c50-582f40a2b334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fb:90:00:8c:85:1d:77:76:10:09:9d:06:f5:82:a3:4f:4f: fe:91:f5:29:54:4f:8f:de:91:36:25:da:15:5d:b0:67:fb:62: 54:b6:fc:a6:a8:d4:a2:18:4b:9f:78:a2:29:a8:55:ee:10:52: 19:a9:db:db:fa:d9:94:77:a6:8f:27:36:16:cf:e3:54:ec:99: c1:1a:d5:95:77:58:70:97:94:0f:09:df:ac:75:5f:5d:7f:1e: 1c:99:d8:4e:a4:12:51:66:ec:e4:c4:c2:ed:e2:04:12:6b:b7: 3d:c3:9c:6e:15:07:8e:14:19:5a:1f:42:0d:6a:9e:c3:c7:12: f9:e9:39:45:53:75:8f:7e:8f:01:15:f2:86:69:6c:72:95:5d: 30:bd:ae:7f:ba:44:cf:46:f6:de:51:92:9f:98:3e:53:7c:5d: 87:43:8b:4b:6f:c4:ef:f0:ca:fa:d1:e2:a5:02:0a:09:c2:b4: 39:ec:d9:81:64:75:13:12:55:ed:40:0f:8b:fb:6c:71:68:d2: fd:d0:d7:33:fe:77:b3:27:46:8e:3e:71:db:98:29:38:88:02: 00:bd:af:0c:2e:23:10:45:71:9b:6e:c6:f4:c9:24:84:3c:8c: ce:80:1d:bc:cc:0a:e4:5a:89:11:db:ec:a1:72:3e:10:1c:b2: d7:62:d6:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9GHVz6Q45cz1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MzM2OWE1OTktYWFkNy00MGVlLTkyNTctZTMyYjUzOWNiZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijLCr/M7juDOXvmOLdYXq/3KYG5+QohQO/P0 tmaisR9pgUC9x1vZcSddW6ql1DVobPGj4aUZqxLljA38dVP/kctcRQW63ez58my/ aW4Op6RAKwuo+OkfE6aN/BHv5qxyWn/UrZScgNhVHqxMqyJV8gdCCIcGm71mX0kz T9TVT9BQYti9zGMcYOgCvBOlb9520SKJkQt1dnlOxfpVK/pEXjGXhvm+uv4ZRSSN SmKmlTR5P3BWMEJw37OXNOqOdJJXdzb46F0xd7WrFoBo6XpUnB00GAEHIno3ZAYA IF9QL1nUT25wQR67E7Pxdet1fVF4Ldi19bT4c65+7y5KOf6c1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMeuBiyK2fEEF93UxLGMQ/9Ix2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzRjNzY4NjMtNzY5NC0z N2I4LTljNTAtNTgyZjQwYTJiMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/7kACMhR13dhAJnQb1gqNPT/6R9SlUT4/ekTYl2hVdsGf7YlS2/Kao 1KIYS594oimoVe4QUhmp29v62ZR3po8nNhbP41TsmcEa1ZV3WHCXlA8J36x1X11/ HhyZ2E6kElFm7OTEwu3iBBJrtz3DnG4VB44UGVofQg1qnsPHEvnpOUVTdY9+jwEV 8oZpbHKVXTC9rn+6RM9G9t5Rkp+YPlN8XYdDi0tvxO/wyvrR4qUCCgnCtDns2YFk dRMSVe1AD4v7bHFo0v3Q1zP+d7MnRo4+cduYKTiIAgC9rwwuIxBFcZtuxvTJJIQ8 jM6AHbzMCuRaiRHb7KFyPhAcstdi1rg= -----END CERTIFICATE-----Generated at Thu Mar 19 05:39:55 2026 by rpki-client