$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd7bdce4-203d-3677-8553-37c104ff728a.roa File: fd7bdce4-203d-3677-8553-37c104ff728a.roa (raw, json) Hash identifier: 5TdxLRwh00BEHs0WGqyCbByBNSnY4jhjU2k1H6pXxyw= Subject key identifier: 43:34:E5:5F:70:69:B7:89:A4:46:58:FC:0B:B7:6A:D7:28:3A:36:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBB77B7B18A2B927232C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd7bdce4-203d-3677-8553-37c104ff728a.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.224.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:bb:77:b7:b1:8a:2b:92:72:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=1a7d5c27-60b9-4eb5-8151-84c6d0722ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:19:bb:8c:9f:04:28:8f:c1:48:12:c4:1a: 65:fb:89:fe:b1:fb:23:9a:85:10:f9:d6:f1:ce:59: 97:70:7c:ab:35:da:fc:d1:c3:47:b3:2c:09:2d:26: db:a3:67:f3:3b:df:be:a0:09:91:37:22:25:a1:23: 86:c1:5c:0f:25:14:14:5e:b6:b3:35:a6:d6:23:b0: d9:6a:97:5b:25:83:fd:dc:5e:eb:7b:ab:f4:09:90: 86:49:4c:e2:03:71:3c:86:0b:00:1b:37:fe:80:84: e8:d4:82:22:ef:2d:c3:92:9e:7d:5c:30:48:2e:0f: 87:90:42:1d:17:47:62:18:82:47:a9:52:4c:6f:00: c3:37:96:19:9a:97:db:bb:af:4c:41:22:61:39:02: 4d:38:28:45:16:2b:1f:65:8b:81:83:aa:fb:1c:47: 3d:66:c7:19:07:fa:30:57:cc:06:40:e0:1c:ef:09: 45:56:75:0f:82:6b:17:35:6a:99:d3:2c:55:4d:21: 91:90:ca:11:cd:cd:31:76:79:c5:e3:04:c2:20:62: 88:be:ff:ca:1b:2f:4f:14:d3:6e:45:ed:74:c1:f0: a6:5b:e2:b6:e5:99:c4:f0:28:fc:56:27:07:6c:0f: c8:6d:75:aa:7f:9d:b4:62:dd:4a:1d:28:ea:2d:74: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:E5:5F:70:69:B7:89:A4:46:58:FC:0B:B7:6A:D7:28:3A:36:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd7bdce4-203d-3677-8553-37c104ff728a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cd:df:fc:f4:64:34:e6:26:8c:85:e5:3d:d1:c8:08:f5:68: 16:08:77:19:46:ed:f6:7f:e7:6d:e2:17:5c:23:8f:a6:89:fc: ef:d4:b8:e1:ca:6c:e5:70:12:6e:6e:5d:d4:06:84:a5:cb:49: a1:0e:bc:76:3e:a4:1f:6e:c6:d4:23:10:fc:6d:5a:67:98:f8: 08:1b:93:52:a5:37:97:f2:ec:70:25:f5:58:8b:1b:f0:6d:17: e0:c7:44:94:d7:f8:79:85:5b:20:d2:50:fa:6a:4b:b0:6f:ba: 34:d6:20:2a:8e:e3:0c:65:1f:ec:6d:7b:95:d8:fb:b1:b1:e0: 55:ea:cf:ba:49:e0:45:8b:28:05:a8:6e:3e:53:d8:7f:d6:5c: 71:c9:22:8c:e5:1e:70:95:d3:76:78:cc:ef:93:b5:ed:ca:80: 0c:d7:13:6d:3b:99:a2:37:d2:75:08:fe:94:2d:89:cf:e4:e0: 97:67:00:4e:8d:5c:d2:88:d4:df:62:c3:43:9e:8e:64:1f:d2: cc:10:58:52:d7:85:7a:a2:16:cc:f3:2c:ca:d4:14:43:50:79: 7a:2e:18:39:f0:4d:37:4b:ed:f3:de:69:7a:c9:41:07:a0:7f: 12:4c:ca:b6:41:75:d1:11:a9:c2:fa:96:00:11:42:5b:e9:d6: f2:28:86:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7t3t7GKK5JyMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MWE3ZDVjMjctNjBiOS00ZWI1LTgxNTEtODRjNmQwNzIyYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCwZu4yfBCiPwUgSxBpl+4n+sfsjmoUQ+dbx zlmXcHyrNdr80cNHsywJLSbbo2fzO9++oAmRNyIloSOGwVwPJRQUXrazNabWI7DZ apdbJYP93F7re6v0CZCGSUziA3E8hgsAGzf+gITo1IIi7y3Dkp59XDBILg+HkEId F0diGIJHqVJMbwDDN5YZmpfbu69MQSJhOQJNOChFFisfZYuBg6r7HEc9ZscZB/ow V8wGQOAc7wlFVnUPgmsXNWqZ0yxVTSGRkMoRzc0xdnnF4wTCIGKIvv/KGy9PFNNu Re10wfCmW+K25ZnE8Cj8VicHbA/IbXWqf520Yt1KHSjqLXQXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM05V9wabeJpEZY/Au3atcoOjZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQ3YmRjZTQtMjAzZC0z Njc3LTg1NTMtMzdjMTA0ZmY3MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROC6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALN3/z0ZDTmJoyF5T3RyAj1aBYIdxlG7fZ/523iF1wjj6aJ/O/UuOHK bOVwEm5uXdQGhKXLSaEOvHY+pB9uxtQjEPxtWmeY+Agbk1KlN5fy7HAl9ViLG/Bt F+DHRJTX+HmFWyDSUPpqS7BvujTWICqO4wxlH+xte5XY+7Gx4FXqz7pJ4EWLKAWo bj5T2H/WXHHJIozlHnCV03Z4zO+Tte3KgAzXE207maI30nUI/pQtic/k4JdnAE6N XNKI1N9iw0OejmQf0swQWFLXhXqiFszzLMrUFENQeXouGDnwTTdL7fPeaXrJQQeg fxJMyrZBddERqcL6lgARQlvp1vIohpc= -----END CERTIFICATE-----Generated at Thu Mar 19 05:37:46 2026 by rpki-client