$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d40ddff0-ef50-30a0-847b-893dbb3b45c1.roa File: d40ddff0-ef50-30a0-847b-893dbb3b45c1.roa (raw, json) Hash identifier: ikQh1fikJBZmSwcxOxFlKcT24uWM4OYtHSxbFEoDpgY= Subject key identifier: 4B:68:6A:66:8B:47:04:F9:F8:98:81:D7:38:8B:C9:D8:95:0A:EA:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FF6DEBEEA272CDC9A4F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d40ddff0-ef50-30a0-847b-893dbb3b45c1.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.9.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f6:de:be:ea:27:2c:dc:9a:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=4a0cb3a7-2ea9-4a13-8b70-e1b898e489cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:65:43:fb:a1:da:ce:d8:d5:f9:56:aa:69: 2c:b6:77:48:f3:f8:18:8a:70:05:c7:f7:69:de:70: 32:11:6e:7e:c1:1d:5c:c2:cb:92:ed:76:5a:ce:87: 2b:2d:4e:e3:9c:90:d1:29:63:bd:e8:85:05:cc:d6: 30:76:fc:73:64:b5:ba:c3:e9:9b:a6:f1:cf:6d:d3: e7:96:2c:37:6b:41:6d:64:bb:a9:9d:b6:78:3e:14: 92:91:9c:e0:ab:78:f6:67:a8:b3:c2:e4:5b:b9:f5: 1a:5f:a4:0a:d6:53:b4:90:2d:0c:23:ec:c6:b1:a8: 6d:55:18:65:cd:ad:b1:77:20:2c:ab:e8:a1:34:92: 78:6b:46:2a:94:c9:47:00:27:5c:a8:27:75:16:35: 11:4b:80:a4:bf:71:e2:68:da:8a:07:6e:d8:7f:57: 9f:9e:6f:d3:a1:e6:41:75:39:2b:a2:e8:f9:c5:b3: c1:28:cb:f2:23:8e:fa:d8:6a:c3:63:26:28:04:09: 0e:f4:b3:59:7d:5f:cf:97:d4:c9:1d:7e:b7:fc:14: e3:bf:3a:b0:08:9c:d6:31:e1:3b:15:17:ac:1f:71: 63:30:f0:51:6c:53:eb:2a:23:bd:6c:51:1d:f7:de: ce:48:45:83:54:3e:3c:57:d8:72:51:1c:5f:51:73: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:68:6A:66:8B:47:04:F9:F8:98:81:D7:38:8B:C9:D8:95:0A:EA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d40ddff0-ef50-30a0-847b-893dbb3b45c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a0:99:09:7b:c4:52:11:e0:51:b2:c8:24:70:b0:20:04:91: a7:a2:00:e7:ef:93:f2:6c:54:f3:18:2d:7b:a9:f2:b9:80:35: cc:18:29:4f:c2:5b:d7:21:fe:81:e6:ca:f6:6f:65:95:be:68: af:53:89:4a:a2:32:19:b7:a2:ae:44:9e:89:f1:2b:ca:6c:bb: d9:01:99:42:b7:c1:c0:e6:19:73:30:ee:a6:5a:99:ba:70:5a: 42:02:c9:0d:69:3c:cc:94:76:c9:f5:74:bb:48:36:dd:49:9c: 94:c8:5a:17:3a:00:78:d7:aa:6e:d0:54:43:98:e4:f9:37:a8: 00:ee:47:66:af:50:a0:7b:ff:59:cb:a2:34:0a:ee:b5:04:f0: e6:cc:7f:57:2e:79:af:b8:01:48:b8:b1:2b:cf:64:c2:38:c4: f1:8d:e9:e0:b4:51:58:80:d5:92:8f:f9:4f:a5:d5:1e:9e:df: 2d:9c:93:b0:b9:0b:77:1d:42:ba:02:96:8e:36:82:c9:b6:59: 21:94:28:df:bb:fa:91:db:0e:bf:f9:b4:80:89:fa:15:19:36: f7:7b:e1:a9:e9:eb:9f:de:f0:ee:30:2a:9a:10:e5:37:6e:44: 85:af:3d:d1:ac:13:c8:e4:7e:43:cc:bf:f4:24:79:0f:49:b3: f5:e8:8a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/bevuonLNyaT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NGEwY2IzYTctMmVhOS00YTEzLThiNzAtZTFiODk4ZTQ4OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzJlQ/uh2s7Y1flWqmkstndI8/gYinAFx/dp 3nAyEW5+wR1cwsuS7XZazocrLU7jnJDRKWO96IUFzNYwdvxzZLW6w+mbpvHPbdPn liw3a0FtZLupnbZ4PhSSkZzgq3j2Z6izwuRbufUaX6QK1lO0kC0MI+zGsahtVRhl za2xdyAsq+ihNJJ4a0YqlMlHACdcqCd1FjURS4Ckv3HiaNqKB27Yf1efnm/ToeZB dTkrouj5xbPBKMvyI4762GrDYyYoBAkO9LNZfV/Pl9TJHX63/BTjvzqwCJzWMeE7 FResH3FjMPBRbFPrKiO9bFEd997OSEWDVD48V9hyURxfUXOOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtoamaLRwT5+JiB1ziLydiVCurfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQwZGRmZjAtZWY1MC0z MGEwLTg0N2ItODkzZGJiM2I0NWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADugmQl7xFIR4FGyyCRwsCAEkaeiAOfvk/JsVPMYLXup8rmANcwYKU/C W9ch/oHmyvZvZZW+aK9TiUqiMhm3oq5EnonxK8psu9kBmUK3wcDmGXMw7qZambpw WkICyQ1pPMyUdsn1dLtINt1JnJTIWhc6AHjXqm7QVEOY5Pk3qADuR2avUKB7/1nL ojQK7rUE8ObMf1cuea+4AUi4sSvPZMI4xPGN6eC0UViA1ZKP+U+l1R6e3y2ck7C5 C3cdQroClo42gsm2WSGUKN+7+pHbDr/5tICJ+hUZNvd74anp65/e8O4wKpoQ5Tdu RIWvPdGsE8jkfkPMv/QkeQ9Js/Xoiok= -----END CERTIFICATE-----Generated at Thu Mar 19 05:36:54 2026 by rpki-client