$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa File: e8225f6e-5293-3022-a030-8e64395c90ee.roa (raw, json) Hash identifier: 6pB161oyeDKXhwUJhHpD++K2NWQDlHgUQOh12FQtjq0= Subject key identifier: A7:71:EF:00:86:0B:5B:89:5A:F1:9E:76:64:9A:46:FE:C6:30:3B:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F9F403BB68B72B508E100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.107.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:9f:40:3b:b6:8b:72:b5:08:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=43021439-7cd1-4613-a3ef-8a6efa7b6181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:3c:35:f2:63:8e:e1:af:02:7e:52:d5:f6: 0e:e2:6b:c8:80:82:23:e6:09:9d:e6:b4:9d:94:50: 29:ff:1a:9e:ab:bf:76:67:ad:b0:3d:ff:68:d7:e4: 26:99:e9:f9:89:b5:b1:ae:ef:9c:42:a0:d2:64:02: a2:b1:2c:cf:04:21:8a:58:f1:55:64:ed:d3:75:27: 83:51:f9:ba:6a:9b:fd:3b:62:37:d7:52:33:da:a8: e1:8a:de:0f:2a:1b:58:8c:3c:62:9b:ac:57:b0:c1: 0a:e9:08:fb:20:7e:b3:bb:be:ea:33:06:de:5e:bc: 9e:b0:c0:1a:60:31:db:8a:0d:68:ba:60:e1:71:58: 2c:cc:82:69:c2:b7:0a:0d:67:b5:64:5a:e6:94:b5: b0:99:d1:aa:5d:42:6b:e5:4a:58:5c:13:3a:f6:a4: 7e:9c:c9:a3:84:12:fc:43:e1:23:af:1a:93:98:15: c9:54:f4:84:ba:b9:18:43:76:86:dc:dd:5a:20:30: 9f:b1:c1:2d:e8:56:e5:90:34:a6:21:b2:0b:46:a1: d3:c5:bd:e2:df:30:3d:32:24:25:b0:87:c2:ba:92: 73:9e:06:5a:1a:56:c8:e3:51:b1:49:1e:be:38:12: ad:37:dd:63:df:59:bb:40:6a:c6:28:74:b4:44:fc: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:71:EF:00:86:0B:5B:89:5A:F1:9E:76:64:9A:46:FE:C6:30:3B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e7:d4:aa:5c:44:69:a4:5f:5e:3b:e3:fc:19:91:58:18:23: de:d5:f8:ec:be:4f:ad:0a:ed:61:22:00:8b:b7:9f:6e:08:f0: 2b:f2:e4:46:20:74:1d:c0:7a:e2:5f:f4:3b:f9:fd:c8:e6:bd: 14:59:8c:c3:3a:f0:f1:67:c7:73:fb:55:fe:ae:8d:02:8e:c7: f8:8a:bf:fc:c3:6c:f5:10:99:21:4a:03:be:b6:fd:81:19:37: e8:86:55:4a:93:12:de:a5:a3:63:3a:a4:a3:2f:5c:dd:42:8a: 3c:c8:43:4a:36:d2:11:e8:a0:8b:a1:dc:07:d9:7a:64:5f:71: 99:79:a8:2f:84:c0:ec:34:72:98:7e:26:27:1b:21:d1:d7:05: 6f:1a:2f:cc:b4:be:6c:71:49:76:ef:6a:55:05:df:c4:74:8f: 43:56:c9:2f:48:80:18:b0:37:ab:21:e3:e0:5f:39:38:33:08: fc:d4:fa:cd:44:7b:1f:3e:e9:71:8f:f8:db:ab:4a:0b:db:60: d9:b0:24:60:8c:4d:69:74:c2:fc:e0:11:1e:fa:3a:9f:3e:62: 3c:d9:1f:d9:96:39:f5:af:dd:41:90:18:77:66:28:c1:5d:2f: e8:f5:56:bb:54:c6:21:8c:d0:8e:fd:9a:38:65:f3:3e:5b:b5: ca:e0:1b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n59AO7aLcrUI4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDMwMjE0MzktN2NkMS00NjEzLWEzZWYtOGE2ZWZhN2I2MTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1c8NfJjjuGvAn5S1fYO4mvIgIIj5gmd5rSd lFAp/xqeq792Z62wPf9o1+Qmmen5ibWxru+cQqDSZAKisSzPBCGKWPFVZO3TdSeD Ufm6apv9O2I311Iz2qjhit4PKhtYjDxim6xXsMEK6Qj7IH6zu77qMwbeXryesMAa YDHbig1oumDhcVgszIJpwrcKDWe1ZFrmlLWwmdGqXUJr5UpYXBM69qR+nMmjhBL8 Q+EjrxqTmBXJVPSEurkYQ3aG3N1aIDCfscEt6FblkDSmIbILRqHTxb3i3zA9MiQl sIfCupJzngZaGlbI41GxSR6+OBKtN91j31m7QGrGKHS0RPy57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdx7wCGC1uJWvGedmSaRv7GMDu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTgyMjVmNmUtNTI5My0z MDIyLWEwMzAtOGU2NDM5NWM5MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHn1KpcRGmkX1474/wZkVgYI97V+Oy+T60K7WEiAIu3n24I8Cvy5EYg dB3AeuJf9Dv5/cjmvRRZjMM68PFnx3P7Vf6ujQKOx/iKv/zDbPUQmSFKA762/YEZ N+iGVUqTEt6lo2M6pKMvXN1CijzIQ0o20hHooIuh3AfZemRfcZl5qC+EwOw0cph+ JicbIdHXBW8aL8y0vmxxSXbvalUF38R0j0NWyS9IgBiwN6sh4+BfOTgzCPzU+s1E ex8+6XGP+NurSgvbYNmwJGCMTWl0wvzgER76Op8+YjzZH9mWOfWv3UGQGHdmKMFd L+j1VrtUxiGM0I79mjhl8z5btcrgG4I= -----END CERTIFICATE-----Generated at Thu Mar 19 07:09:20 2026 by rpki-client