$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e94cabca-3873-3468-a4c8-c1cab1f428ec.roa File: e94cabca-3873-3468-a4c8-c1cab1f428ec.roa (raw, json) Hash identifier: jlHbmTuQ2/f4byAGTbZ/+xm7NUgG6AFojLQc9UXB1ek= Subject key identifier: CE:7C:F3:B0:4A:AA:5A:34:D3:33:7A:A8:72:48:BA:02:D2:7A:A1:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBE527B38FB541C6D5700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e94cabca-3873-3468-a4c8-c1cab1f428ec.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.230.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:be:52:7b:38:fb:54:1c:6d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c88269dd-29c1-46b5-b373-f11176479d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:92:6d:86:3d:e8:fe:6c:4d:83:cd:ce:c8: 61:a3:22:c3:ee:b1:64:bb:00:c1:4e:a6:81:ff:ee: cb:77:c6:31:0d:02:3f:bb:ee:3c:94:13:5e:77:86: e6:00:c4:af:7b:d4:1b:6e:81:b0:46:fe:5b:9b:e0: 13:f6:36:4d:4b:06:0d:a1:0d:db:f7:c8:5a:55:b6: c3:31:dc:1e:90:fd:ff:b2:f6:43:ec:d8:b3:5c:76: 5b:82:71:6f:8d:a0:8e:94:c5:a8:0d:04:c4:ae:7c: d4:27:67:a2:e7:fb:fa:b9:e5:a2:6d:3c:28:92:d2: e4:c7:23:1a:5e:f1:7a:85:5d:13:ee:87:1f:34:f5: d5:a4:bb:01:c2:34:3a:ad:ee:35:e3:b9:17:fc:c1: 71:2c:a6:5d:a7:ce:b2:8d:90:b0:6a:a6:7a:66:aa: ee:ca:c2:de:1a:e1:4f:ff:90:29:f8:04:d0:f7:35: a7:c7:2d:83:d0:62:49:f2:4b:85:08:ae:6b:cf:ee: 3c:27:1d:70:a5:01:65:13:fe:42:d7:23:f3:e3:c9: c1:d0:c3:52:c3:97:bb:55:46:f3:3a:3b:48:e4:7f: 52:70:d7:15:c9:f3:5e:38:74:50:df:48:de:1c:e3: 75:08:4b:09:77:0f:77:fe:fa:9b:d8:bd:6d:76:2f: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7C:F3:B0:4A:AA:5A:34:D3:33:7A:A8:72:48:BA:02:D2:7A:A1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e94cabca-3873-3468-a4c8-c1cab1f428ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b0:08:84:42:98:5c:3d:21:6c:f5:00:be:ef:ba:80:3d:73: 31:28:4c:5b:d0:8c:01:0e:b9:6c:f8:c9:74:ab:48:71:40:f5: ce:e8:a4:7d:d1:f2:10:09:52:d3:1a:83:02:e8:0a:82:1d:18: 69:11:5a:43:d2:4a:05:47:29:b5:47:37:b6:fe:0f:2f:dd:08: f5:eb:ca:9e:85:49:3f:07:94:b9:80:f3:e3:64:c1:22:82:38: a4:d6:6f:b8:28:66:3d:5e:58:34:15:1b:58:2f:8a:2d:14:f7: fe:53:9a:e2:1e:9b:ca:6d:3e:2d:bc:b2:f4:11:fa:b6:ac:c0: 1b:33:9d:b3:5f:02:92:48:99:66:dc:f9:dd:42:85:da:5a:32: 1e:23:fa:f4:bc:2e:45:43:a0:66:00:5e:b7:c0:32:4a:11:89: 15:a1:0d:5b:cc:9f:d6:26:5a:29:df:81:41:18:5a:21:84:c1: 88:86:ce:0e:9a:23:98:7d:74:c9:01:1d:4c:ef:e1:52:d7:63: 70:3c:e1:52:1e:d8:68:ae:c4:54:1f:c0:65:c0:7b:63:52:c9: 67:b8:cb:84:af:5c:82:a8:84:ef:0f:ef:4a:fe:f7:51:d6:d8: 71:65:03:f4:aa:2f:05:c9:cb:fe:39:df:82:52:e3:4d:04:0b: 63:0a:14:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n75Sezj7VBxtVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Yzg4MjY5ZGQtMjljMS00NmI1LWIzNzMtZjExMTc2NDc5ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY6SbYY96P5sTYPNzshhoyLD7rFkuwDBTqaB /+7Ld8YxDQI/u+48lBNed4bmAMSve9QbboGwRv5bm+AT9jZNSwYNoQ3b98haVbbD MdwekP3/svZD7NizXHZbgnFvjaCOlMWoDQTErnzUJ2ei5/v6ueWibTwoktLkxyMa XvF6hV0T7ocfNPXVpLsBwjQ6re4147kX/MFxLKZdp86yjZCwaqZ6ZqruysLeGuFP /5Ap+ATQ9zWnxy2D0GJJ8kuFCK5rz+48Jx1wpQFlE/5C1yPz48nB0MNSw5e7VUbz OjtI5H9ScNcVyfNeOHRQ30jeHON1CEsJdw93/vqb2L1tdi+WmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5887BKqlo00zN6qHJIugLSeqHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTk0Y2FiY2EtMzg3My0z NDY4LWE0YzgtYzFjYWIxZjQyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEawCIRCmFw9IWz1AL7vuoA9czEoTFvQjAEOuWz4yXSrSHFA9c7opH3R 8hAJUtMagwLoCoIdGGkRWkPSSgVHKbVHN7b+Dy/dCPXryp6FST8HlLmA8+NkwSKC OKTWb7goZj1eWDQVG1gvii0U9/5TmuIem8ptPi28svQR+raswBsznbNfApJImWbc +d1ChdpaMh4j+vS8LkVDoGYAXrfAMkoRiRWhDVvMn9YmWinfgUEYWiGEwYiGzg6a I5h9dMkBHUzv4VLXY3A84VIe2GiuxFQfwGXAe2NSyWe4y4SvXIKohO8P70r+91HW 2HFlA/SqLwXJy/4534JS400EC2MKFAo= -----END CERTIFICATE-----Generated at Thu Mar 19 06:57:13 2026 by rpki-client