$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a119b07-7ce4-38cb-92de-c87805afa7a3.roa File: 3a119b07-7ce4-38cb-92de-c87805afa7a3.roa (raw, json) Hash identifier: OKlN0wluM1YEqvzziF0bmtbKbKxlBMr8gnKRK0zQkzY= Subject key identifier: 39:36:D7:C9:27:3F:45:89:E6:CD:3F:7A:E4:F3:95:6C:13:A5:26:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBD057F575868CA3977A1C900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a119b07-7ce4-38cb-92de-c87805afa7a3.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 22773 IP address blocks: 68.0.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:7f:57:58:68:ca:39:77:a1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=3a4d445e-5c5b-4f21-b2eb-3b5a38f713ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:9d:e1:87:e9:bc:05:d6:c4:06:fc:43:04: 3f:10:15:ff:fc:cd:6d:3d:78:f3:53:15:c9:3b:4b: 6c:18:db:6e:94:f1:e8:ea:33:25:5c:66:24:0e:52: 40:d9:7f:6c:3e:7b:f5:40:de:8d:f4:1d:1b:c2:cb: ad:6b:04:d0:4c:bc:c1:f4:31:4f:39:3f:20:7e:1c: b6:60:69:f5:41:bd:3b:0e:3c:0e:05:55:cf:3f:5f: 72:e5:b6:9d:c7:4a:70:e8:2e:26:9a:f4:63:5a:f0: 22:17:4c:b3:12:af:0e:0f:86:48:40:93:9c:fa:52: 51:22:15:f8:ad:a9:ff:7f:a7:21:a3:23:a2:c5:5b: e9:a4:28:d6:c8:df:43:19:eb:09:1f:b8:01:bc:ff: 71:b0:4e:ae:b6:b1:e9:8c:56:ae:df:e3:98:31:8d: ad:99:8a:39:03:1b:ec:89:5f:3e:79:7b:bf:51:b4: 47:f9:80:54:b9:8e:7b:ed:cc:af:15:5e:90:a1:bd: ac:85:e8:df:d1:67:8b:8e:0b:32:74:5e:62:ed:7e: 8a:30:f1:b4:55:b2:c7:4f:3d:34:85:f5:48:c5:bd: 16:ba:1f:d2:51:bf:d1:a1:4d:62:d7:1e:97:95:0a: 79:bb:52:d0:ee:89:48:bf:cd:a4:63:d2:3a:86:4c: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:36:D7:C9:27:3F:45:89:E6:CD:3F:7A:E4:F3:95:6C:13:A5:26:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a119b07-7ce4-38cb-92de-c87805afa7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c2:45:09:37:06:d9:7b:63:5b:71:5d:79:2c:35:44:a0:41: b9:0b:c9:25:1e:9c:82:4f:bc:c5:c5:c1:16:6f:06:9a:80:41: 04:b3:8d:be:e5:75:77:dd:2d:9e:47:49:5a:4b:a2:4a:83:b6: 8d:0a:29:d0:46:e5:d1:44:18:e4:e7:33:dd:d0:35:ca:94:d3: 2e:50:f9:f1:30:12:e2:f1:4e:b1:4a:47:e8:50:7c:a2:8e:35: bd:19:74:2e:0b:fd:1f:54:e2:95:80:7f:d6:8f:e5:6d:eb:86: 94:48:e0:f5:a0:c6:fa:b0:3f:d1:28:71:de:1b:8f:aa:28:5a: b8:84:59:7a:e2:f6:64:80:77:14:24:1c:39:82:3c:66:64:b9: 1c:e8:75:76:92:46:d4:2d:8e:50:83:2f:f1:20:96:76:ee:20: 75:a1:b4:a7:d9:2f:ff:25:73:41:a3:f0:71:e3:73:3a:a6:5b: 95:d1:59:48:22:bc:de:0f:10:69:01:17:60:71:e7:44:92:27: d1:78:ac:8d:09:66:42:47:0d:42:61:10:b4:5c:df:f2:5d:2b: b3:ed:9e:e9:c7:5f:db:a1:02:b2:f9:4f:73:aa:32:0b:36:93: a2:30:88:1e:a9:4e:f9:9e:e6:19:26:d8:33:6b:1a:ef:56:09: aa:79:9d:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BX9XWGjKOXehyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk M2E0ZDQ0NWUtNWM1Yi00ZjIxLWIyZWItM2I1YTM4ZjcxM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVed4YfpvAXWxAb8QwQ/EBX//M1tPXjzUxXJ O0tsGNtulPHo6jMlXGYkDlJA2X9sPnv1QN6N9B0bwsutawTQTLzB9DFPOT8gfhy2 YGn1Qb07DjwOBVXPP19y5badx0pw6C4mmvRjWvAiF0yzEq8OD4ZIQJOc+lJRIhX4 ran/f6choyOixVvppCjWyN9DGesJH7gBvP9xsE6utrHpjFau3+OYMY2tmYo5Axvs iV8+eXu/UbRH+YBUuY577cyvFV6Qob2shejf0WeLjgsydF5i7X6KMPG0VbLHTz00 hfVIxb0Wuh/SUb/RoU1i1x6XlQp5u1LQ7olIv82kY9I6hkzbLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk218knP0WJ5s0/euTzlWwTpSbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ExMTliMDctN2NlNC0z OGNiLTkyZGUtYzg3ODA1YWZhN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbCRQk3Btl7Y1txXXksNUSgQbkLySUenIJPvMXFwRZvBpqAQQSzjb7l dXfdLZ5HSVpLokqDto0KKdBG5dFEGOTnM93QNcqU0y5Q+fEwEuLxTrFKR+hQfKKO Nb0ZdC4L/R9U4pWAf9aP5W3rhpRI4PWgxvqwP9Eocd4bj6ooWriEWXri9mSAdxQk HDmCPGZkuRzodXaSRtQtjlCDL/EglnbuIHWhtKfZL/8lc0Gj8HHjczqmW5XRWUgi vN4PEGkBF2Bx50SSJ9F4rI0JZkJHDUJhELRc3/JdK7PtnunHX9uhArL5T3OqMgs2 k6IwiB6pTvme5hkm2DNrGu9WCap5nYM= -----END CERTIFICATE-----Generated at Wed May 13 07:12:15 2026 by rpki-client