$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa File: d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa (raw, json) Hash identifier: NK4/RUSQ8ZufzhXInKYFZQuSu5MzMRAfwfPBPqlpTtA= Subject key identifier: AD:7D:90:9E:44:80:7C:39:83:DB:08:DF:F4:1E:E0:EF:00:CE:E3:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FE5973530BB2609118F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.224.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:e5:97:35:30:bb:26:09:11:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=58df0e0a-7bee-4412-9698-e390d322c326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:cd:6b:18:c9:0e:d3:18:6f:e7:a5:f3:93: cd:97:b6:70:e9:ef:eb:1d:48:e6:f0:1b:10:70:8d: 80:50:83:38:b9:45:f6:2c:c8:9c:47:f1:fc:bd:a1: aa:06:c6:fd:f0:75:a6:7e:79:4c:00:12:cf:4d:35: 15:03:29:5c:88:58:2a:14:54:5a:74:88:4a:44:f7: 5a:30:61:15:2b:f2:cd:b7:3d:85:54:7f:c7:66:4c: 8f:6d:6f:6d:12:d1:7f:ae:9e:d2:98:6b:19:b7:88: 24:25:aa:09:27:72:33:c0:88:bd:f6:75:10:bd:10: 1b:f1:8f:ae:94:39:9c:cb:b7:23:aa:e7:76:54:69: 26:cb:98:84:ff:41:27:e7:5e:6f:cd:4c:41:3d:31: 0e:1b:42:12:2d:22:68:ac:b9:6d:7b:59:31:f9:a5: ff:fb:5d:34:4c:ab:79:51:5f:0f:b4:5b:f6:56:bf: 67:17:96:32:8c:81:03:90:5b:3b:c4:b9:dd:81:52: 04:38:2a:46:a9:63:29:9a:af:2f:e5:27:90:1c:ef: f6:b9:5a:55:a9:63:e9:8a:74:3f:eb:c0:df:d9:ed: 62:9e:bb:75:c1:4f:fe:86:16:5c:ca:44:9d:18:bd: ac:b4:29:a1:d1:83:b2:c8:fd:54:fd:e3:41:cc:fa: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:90:9E:44:80:7C:39:83:DB:08:DF:F4:1E:E0:EF:00:CE:E3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1e:18:ff:12:4f:dc:df:c6:6d:02:42:e2:89:61:f3:77:a0: 35:95:8a:71:d4:3b:8b:57:99:b8:f3:6b:66:15:97:13:53:c4: 55:29:84:e9:56:ee:67:07:ea:04:21:90:55:08:74:62:22:f9: ac:70:29:3e:88:c5:87:1b:2b:81:60:df:16:0b:e4:30:82:53: 7a:6b:09:7f:03:f0:0d:6d:f9:2f:fd:eb:3a:67:dc:8f:2f:f2: 0f:3d:f3:c5:f7:59:f2:0e:4d:6e:75:60:f2:09:5c:ab:16:45: 8f:ed:6b:2e:dd:1a:d5:f5:e1:f8:87:4f:0d:42:84:a8:e5:e1: 08:e6:9a:15:1e:65:07:cb:50:54:20:bf:96:43:af:ed:cc:de: 6f:26:56:51:c3:6c:04:82:a6:c9:64:fa:3a:ee:36:72:03:19: dc:7c:22:57:9b:d0:01:37:ee:64:47:c8:8f:6b:dc:db:29:49: 2e:4f:d9:2f:ac:6a:a4:26:ee:75:f2:b7:62:c7:17:f7:79:86: 49:cf:3b:90:7f:c9:0f:3b:be:f4:af:a1:44:e0:50:0f:18:16: c7:8e:2f:22:14:9f:f2:89:a4:21:e4:6a:ce:b8:8d:74:d9:b5: ef:37:cf:7b:2e:58:1f:97:dd:63:ab:39:2f:55:88:9b:e7:30: 8c:78:ff:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+WXNTC7JgkRj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NThkZjBlMGEtN2JlZS00NDEyLTk2OTgtZTM5MGQzMjJjMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqprNaxjJDtMYb+el85PNl7Zw6e/rHUjm8BsQ cI2AUIM4uUX2LMicR/H8vaGqBsb98HWmfnlMABLPTTUVAylciFgqFFRadIhKRPda MGEVK/LNtz2FVH/HZkyPbW9tEtF/rp7SmGsZt4gkJaoJJ3IzwIi99nUQvRAb8Y+u lDmcy7cjqud2VGkmy5iE/0En515vzUxBPTEOG0ISLSJorLlte1kx+aX/+100TKt5 UV8PtFv2Vr9nF5YyjIEDkFs7xLndgVIEOCpGqWMpmq8v5SeQHO/2uVpVqWPpinQ/ 68Df2e1inrt1wU/+hhZcykSdGL2stCmh0YOyyP1U/eNBzPpVJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK19kJ5EgHw5g9sI3/Qe4O8AzuPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDFjNDc4Y2MtOGU3MC0z ZGJlLWFlZDgtY2MxMTU4MTExZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARODDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4eGP8ST9zfxm0CQuKJYfN3oDWVinHUO4tXmbjza2YVlxNTxFUphOlW 7mcH6gQhkFUIdGIi+axwKT6IxYcbK4Fg3xYL5DCCU3prCX8D8A1t+S/96zpn3I8v 8g8988X3WfIOTW51YPIJXKsWRY/tay7dGtX14fiHTw1ChKjl4QjmmhUeZQfLUFQg v5ZDr+3M3m8mVlHDbASCpslk+jruNnIDGdx8Ileb0AE37mRHyI9r3NspSS5P2S+s aqQm7nXyt2LHF/d5hknPO5B/yQ87vvSvoUTgUA8YFseOLyIUn/KJpCHkas64jXTZ te83z3suWB+X3WOrOS9ViJvnMIx4/0o= -----END CERTIFICATE-----Generated at Thu Mar 19 05:36:36 2026 by rpki-client