$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fab55d89-5ebb-3475-ac66-f6d5e93b0961.roa File: fab55d89-5ebb-3475-ac66-f6d5e93b0961.roa (raw, json) Hash identifier: PbdcRYqADC4jwTayeC00zRZnVLTiS5OfIFhMWWkJTAg= Subject key identifier: EE:FE:21:B9:EB:86:D4:98:38:19:B4:7F:F5:28:F0:A0:9D:19:A0:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A0216647D8611B9B6D5200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fab55d89-5ebb-3475-ac66-f6d5e93b0961.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.10.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:21:66:47:d8:61:1b:9b:6d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=ef70bff8-c131-4077-b9d7-a08a002afae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c2:59:4a:6b:22:51:5a:ab:6b:91:a4:7c:46: 57:71:d4:33:38:d1:6c:66:a6:c3:e7:d3:96:0f:74: 5b:1f:49:2f:4f:35:2f:ee:7e:a4:82:76:de:63:a6: f1:3b:8e:34:ae:5b:06:25:65:51:d6:43:c8:e5:e0: 38:a8:b8:af:d1:2c:9a:0b:b3:7b:0d:ce:51:1f:72: ac:13:79:64:98:43:07:9d:81:44:ca:03:e9:3a:4d: 1d:a4:d3:d6:8a:52:88:91:8e:70:5a:c9:23:b0:f0: 2a:40:a0:69:66:01:b0:0c:81:a2:36:ad:06:40:bd: f6:63:7a:73:40:9c:9d:22:00:6e:d3:19:57:36:44: 82:db:21:c8:13:0e:ba:34:bc:20:37:23:84:fe:25: 9a:9b:62:85:de:1a:6a:c1:ca:54:6b:47:70:db:4c: d0:2a:d6:97:87:af:a2:f0:25:18:b4:2f:5d:85:fa: d5:af:55:c8:07:cc:34:c1:0a:87:a7:7f:ea:91:25: 66:13:3b:24:92:bc:0e:3e:73:04:07:a6:8c:3b:67: eb:6d:89:fd:43:83:ee:42:d0:83:6c:52:2f:ff:30: 95:ee:c0:b6:f4:6a:d2:ff:03:3a:8a:5d:fb:f4:88: 51:75:19:8c:71:12:c9:d1:6d:ff:93:a4:e4:ef:08: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:21:B9:EB:86:D4:98:38:19:B4:7F:F5:28:F0:A0:9D:19:A0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fab55d89-5ebb-3475-ac66-f6d5e93b0961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:37:1a:a1:d8:ee:8b:92:e2:4d:f7:6e:99:e8:85:21:78:90: a9:42:4b:a9:34:cb:80:09:e1:2e:90:e4:07:78:ef:f3:16:85: 96:72:3f:66:25:59:39:f0:50:19:34:d2:4e:de:21:94:af:b7: 3e:a9:ed:5b:f2:86:18:a3:9d:ff:1e:7b:27:2d:0c:c7:5c:f0: e4:9d:f4:bd:d3:54:d4:d0:59:e0:4c:3a:af:84:e2:ed:4f:32: 82:06:2b:c6:b3:d6:43:21:79:ce:69:71:e0:d6:90:d0:df:20: 77:77:c3:76:78:73:97:4a:1a:8f:e4:a1:2b:80:da:f8:bd:4b: c5:86:c5:fc:25:f2:1a:f6:3e:59:4b:86:16:05:3a:3e:5d:59: 80:34:4b:f5:d6:1e:5d:f7:97:d0:26:ee:12:82:1c:63:fe:88: c2:11:2f:b9:3d:67:94:7c:65:55:bb:89:02:c7:ec:4a:31:c7: 61:e7:72:bd:74:24:10:b5:77:47:c7:9d:b3:4d:18:63:bf:03: 0d:41:f6:6a:06:8c:c5:a2:2e:1e:23:d1:97:2c:f1:ac:9e:cd: 52:ca:30:03:7e:ea:b0:54:cc:50:53:a0:2e:c4:6c:33:2a:dd: b1:d5:f7:8a:cb:ac:98:ff:bf:f3:67:0d:21:49:eb:26:18:95: 58:35:77:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oCFmR9hhG5ttUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWY3MGJmZjgtYzEzMS00MDc3LWI5ZDctYTA4YTAwMmFmYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8JZSmsiUVqra5GkfEZXcdQzONFsZqbD59OW D3RbH0kvTzUv7n6kgnbeY6bxO440rlsGJWVR1kPI5eA4qLiv0SyaC7N7Dc5RH3Ks E3lkmEMHnYFEygPpOk0dpNPWilKIkY5wWskjsPAqQKBpZgGwDIGiNq0GQL32Y3pz QJydIgBu0xlXNkSC2yHIEw66NLwgNyOE/iWam2KF3hpqwcpUa0dw20zQKtaXh6+i 8CUYtC9dhfrVr1XIB8w0wQqHp3/qkSVmEzskkrwOPnMEB6aMO2frbYn9Q4PuQtCD bFIv/zCV7sC29GrS/wM6il379IhRdRmMcRLJ0W3/k6Tk7wj4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7+IbnrhtSYOBm0f/Uo8KCdGaDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmFiNTVkODktNWViYi0z NDc1LWFjNjYtZjZkNWU5M2IwOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc3GqHY7ouS4k33bpnohSF4kKlCS6k0y4AJ4S6Q5Ad47/MWhZZyP2Yl WTnwUBk00k7eIZSvtz6p7Vvyhhijnf8eeyctDMdc8OSd9L3TVNTQWeBMOq+E4u1P MoIGK8az1kMhec5pceDWkNDfIHd3w3Z4c5dKGo/koSuA2vi9S8WGxfwl8hr2PllL hhYFOj5dWYA0S/XWHl33l9Am7hKCHGP+iMIRL7k9Z5R8ZVW7iQLH7Eoxx2Hncr10 JBC1d0fHnbNNGGO/Aw1B9moGjMWiLh4j0Zcs8ayezVLKMAN+6rBUzFBToC7EbDMq 3bHV94rLrJj/v/NnDSFJ6yYYlVg1dzg= -----END CERTIFICATE-----Generated at Thu Mar 19 07:14:12 2026 by rpki-client