$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb519f78-2527-3619-998b-ca8f9773110d.roa File: cb519f78-2527-3619-998b-ca8f9773110d.roa (raw, json) Hash identifier: noq6uisWBB5gJQ2O2U4/3tYtlYXK6DZodcMm01OAyXk= Subject key identifier: 52:F2:A5:69:5C:C7:5D:C6:81:F0:DD:0A:F5:25:00:BF:84:69:13:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FA0D4122D8644F16D3A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb519f78-2527-3619-998b-ca8f9773110d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.8.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a0:d4:12:2d:86:44:f1:6d:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=cbc1f95d-19b1-4498-88de-1256f1f32b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:9a:05:29:a7:6f:cc:9a:25:8e:cc:8d:d5: 8d:57:e1:98:5b:90:f8:fe:cd:83:d1:da:8e:8d:a2: 76:ef:23:b7:94:d0:b2:c9:b2:1e:dd:b1:29:42:ae: e8:88:00:b0:60:6e:32:0a:d2:b2:8c:92:5a:0d:b7: 96:17:7f:aa:62:83:40:65:f5:a3:c8:42:ce:0a:81: db:63:02:dc:7e:29:0f:d0:23:79:ac:20:29:bc:53: 8c:8d:ff:03:a3:b1:f5:42:fc:86:2f:2e:85:b4:09: f0:51:75:18:74:d6:94:c2:9f:83:16:e6:1a:71:7a: 5d:b9:9f:04:d7:db:b0:95:13:9b:52:b8:4a:b8:30: 00:0c:3f:9c:a5:9e:96:56:90:52:9b:cd:af:1d:71: 6e:0e:e9:36:a9:d1:c8:23:12:6d:48:d4:b0:3f:9b: 18:47:e5:44:d8:d6:cd:cc:97:18:a3:2e:59:d3:2a: 44:01:30:9c:12:3e:a3:6b:0f:cc:71:dd:df:93:61: fd:54:dd:50:87:d9:2d:e4:c0:83:4d:53:33:23:70: a9:50:6f:5d:ce:09:ba:73:46:d1:52:89:31:7b:4c: 30:78:ec:73:52:74:92:80:bf:d3:5c:d9:71:29:eb: ec:04:3d:91:d7:bb:e1:74:48:4e:b6:8d:58:99:e8: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:A5:69:5C:C7:5D:C6:81:F0:DD:0A:F5:25:00:BF:84:69:13:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb519f78-2527-3619-998b-ca8f9773110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:53:48:88:6d:fb:db:0f:2d:23:11:44:95:a9:58:b9:9f:51: 10:b5:c6:8a:9e:79:6d:d3:16:0e:27:c8:a8:8b:bf:35:5c:2b: 62:db:ee:38:7a:b2:d4:28:95:db:e7:9b:a2:8a:85:bd:02:e4: a8:f4:38:88:4f:7e:5a:8f:df:44:9e:69:aa:71:cf:f7:08:dd: c5:ac:b4:0a:50:8c:e9:d5:d0:72:b2:fa:e1:9a:31:c4:bd:92: 77:22:c7:e2:de:06:ad:53:ac:f5:0f:11:2a:4b:42:1a:bc:2e: fc:33:e4:3b:dd:82:6f:14:2b:e7:15:b7:90:19:34:f2:3e:a5: 1b:c1:81:12:6a:70:99:44:e8:98:52:b1:a7:40:fa:03:04:18: 26:3b:ac:9c:a3:23:33:08:e4:0f:3d:ba:f8:56:35:aa:91:aa: e8:d5:74:aa:d5:80:de:91:21:d1:81:5b:28:ca:b4:71:c8:d9: 4c:2a:1e:a3:fa:5a:80:49:cf:65:85:c2:c9:c5:84:40:c8:2c: 94:a4:f9:77:d4:6e:e9:6e:8d:ea:b5:04:e8:b4:df:8b:1e:49: 67:ef:b9:38:a9:8f:8e:d4:ee:8e:0f:77:ac:b6:ae:4b:64:39: b6:f6:0f:f4:9f:0b:5c:5e:8e:0f:7d:c2:20:0a:ec:63:95:0c: 4e:49:d3:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6DUEi2GRPFtOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2JjMWY5NWQtMTliMS00NDk4LTg4ZGUtMTI1NmYxZjMyYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeGaBSmnb8yaJY7MjdWNV+GYW5D4/s2D0dqO jaJ27yO3lNCyybIe3bEpQq7oiACwYG4yCtKyjJJaDbeWF3+qYoNAZfWjyELOCoHb YwLcfikP0CN5rCApvFOMjf8Do7H1QvyGLy6FtAnwUXUYdNaUwp+DFuYacXpduZ8E 19uwlRObUrhKuDAADD+cpZ6WVpBSm82vHXFuDuk2qdHIIxJtSNSwP5sYR+VE2NbN zJcYoy5Z0ypEATCcEj6jaw/Mcd3fk2H9VN1Qh9kt5MCDTVMzI3CpUG9dzgm6c0bR Uokxe0wweOxzUnSSgL/TXNlxKevsBD2R17vhdEhOto1Ymei9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLypWlcx13GgfDdCvUlAL+EaRNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I1MTlmNzgtMjUyNy0z NjE5LTk5OGItY2E4Zjk3NzMxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpTSIht+9sPLSMRRJWpWLmfURC1xoqeeW3TFg4nyKiLvzVcK2Lb7jh6 stQoldvnm6KKhb0C5Kj0OIhPflqP30Seaapxz/cI3cWstApQjOnV0HKy+uGaMcS9 kncix+LeBq1TrPUPESpLQhq8Lvwz5Dvdgm8UK+cVt5AZNPI+pRvBgRJqcJlE6JhS sadA+gMEGCY7rJyjIzMI5A89uvhWNaqRqujVdKrVgN6RIdGBWyjKtHHI2UwqHqP6 WoBJz2WFwsnFhEDILJSk+XfUbulujeq1BOi034seSWfvuTipj47U7o4Pd6y2rktk Obb2D/SfC1xejg99wiAK7GOVDE5J00c= -----END CERTIFICATE-----Generated at Thu Mar 19 05:44:39 2026 by rpki-client