$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa File: c887e197-9d69-3a72-96de-d7082f725307.roa (raw, json) Hash identifier: ldZJElZQjPAbHXYAzbZw2K6MtIXSSNWfge9oFxMfz2s= Subject key identifier: 2E:95:93:EE:B5:A4:24:48:5D:F9:C1:99:82:01:5B:B8:12:57:FF:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F88FF460D9592720F54C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.14.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:88:ff:46:0d:95:92:72:0f:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=25342f52-77ee-4edd-97be-db20aea4fc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:21:a4:8f:d5:c3:af:3c:b5:fc:77:f3:88: ce:29:e5:fc:6b:a3:81:8d:f8:02:0e:dc:81:7a:68: 8c:33:bf:55:44:f9:66:32:45:3d:df:33:8e:ee:1f: 7b:fb:59:1e:f7:f8:a9:a9:ce:84:18:b2:55:90:9c: 2a:89:fc:81:8e:5e:43:60:5c:f9:b5:b8:cb:92:cb: fd:f0:38:e0:d6:0b:3e:53:54:b7:27:20:a1:82:89: bb:94:75:80:29:c1:a9:9d:de:2c:27:30:7b:b6:77: c2:fb:97:a5:55:34:f9:99:9e:7e:eb:1d:26:3e:ee: be:19:8e:01:c2:94:df:14:de:f8:66:eb:68:e8:d0: 3e:dd:d5:b4:40:c7:83:f4:75:32:0d:ea:77:22:cb: 60:e1:ea:4d:95:4c:0f:00:b3:fd:fe:79:21:c2:28: af:fb:4c:51:c3:26:fb:3c:48:03:99:7c:35:a2:92: a7:55:f6:ec:1d:e0:12:42:59:98:92:13:f9:bb:6b: 47:69:0e:4b:59:6c:59:4a:07:79:9a:68:ce:37:1d: fd:a1:7c:f2:ec:62:9d:6a:b2:6a:5e:3f:64:2d:75: ed:66:1f:b2:b9:49:05:92:cb:11:d0:e3:02:d2:c2: 1e:ca:a6:0d:49:12:c3:9b:b9:71:c7:f9:ff:03:4e: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:93:EE:B5:A4:24:48:5D:F9:C1:99:82:01:5B:B8:12:57:FF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5c:34:46:d7:7e:57:34:9c:ad:08:5a:05:58:79:17:e4:67: 6d:06:75:7d:5f:bd:24:c0:b9:ef:c3:66:b3:2c:b8:28:f7:8f: 20:87:f1:fc:ae:4d:30:78:de:25:39:34:69:1c:da:49:d8:c5: a0:46:f8:b5:c9:1c:84:b5:35:ef:e7:9d:30:37:3f:87:c9:46: 07:2d:f6:c0:3d:f7:b6:88:29:1b:fc:bf:4e:55:b6:df:e8:e1: 49:ea:a1:ab:b2:86:c6:c0:62:f9:b3:81:c3:77:64:e0:7d:9a: 19:25:6c:e4:17:c3:43:e0:24:5d:75:cb:11:86:41:db:9a:ec: 0e:ad:2e:65:7e:bb:1d:e6:c8:24:46:83:01:bc:ee:58:cc:20: b3:39:03:bf:30:a0:9b:09:44:cb:31:ed:89:b7:f8:20:21:6f: 17:f1:e0:9c:c4:5a:63:cb:fc:b2:d3:63:00:da:92:b0:7c:5c: 62:ec:63:63:53:09:7d:63:3f:54:1a:11:87:39:69:e5:a8:3f: bb:0a:1c:03:c9:83:39:83:61:d7:e1:25:dd:ef:c9:c9:93:09: 5f:c4:84:34:f9:13:c0:a7:46:fc:8f:40:00:61:93:d2:bb:fb: db:7c:5d:b7:68:5d:9e:51:62:73:a6:0f:1d:b5:aa:0c:de:8d: 9e:0c:47:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4j/Rg2VknIPVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjUzNDJmNTItNzdlZS00ZWRkLTk3YmUtZGIyMGFlYTRmYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e0hpI/Vw688tfx384jOKeX8a6OBjfgCDtyB emiMM79VRPlmMkU93zOO7h97+1ke9/ipqc6EGLJVkJwqifyBjl5DYFz5tbjLksv9 8Djg1gs+U1S3JyChgom7lHWAKcGpnd4sJzB7tnfC+5elVTT5mZ5+6x0mPu6+GY4B wpTfFN74Zuto6NA+3dW0QMeD9HUyDep3Istg4epNlUwPALP9/nkhwiiv+0xRwyb7 PEgDmXw1opKnVfbsHeASQlmYkhP5u2tHaQ5LWWxZSgd5mmjONx39oXzy7GKdarJq Xj9kLXXtZh+yuUkFkssR0OMC0sIeyqYNSRLDm7lxx/n/A04Z4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6Vk+61pCRIXfnBmYIBW7gSV/9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzg4N2UxOTctOWQ2OS0z YTcyLTk2ZGUtZDcwODJmNzI1MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpcNEbXflc0nK0IWgVYeRfkZ20GdX1fvSTAue/DZrMsuCj3jyCH8fyu TTB43iU5NGkc2knYxaBG+LXJHIS1Ne/nnTA3P4fJRgct9sA997aIKRv8v05Vtt/o 4UnqoauyhsbAYvmzgcN3ZOB9mhklbOQXw0PgJF11yxGGQdua7A6tLmV+ux3myCRG gwG87ljMILM5A78woJsJRMsx7Ym3+CAhbxfx4JzEWmPL/LLTYwDakrB8XGLsY2NT CX1jP1QaEYc5aeWoP7sKHAPJgzmDYdfhJd3vycmTCV/EhDT5E8CnRvyPQABhk9K7 +9t8XbdoXZ5RYnOmDx21qgzejZ4MR3Y= -----END CERTIFICATE-----Generated at Thu Mar 19 05:43:34 2026 by rpki-client