$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa File: 7df12012-1386-3a47-89db-6c4f1b6aa143.roa (raw, json) Hash identifier: jr2aPHoOZPUG23k4+bBfPLGMrnHMKZnFqa+JgZDqTxk= Subject key identifier: 8A:E2:2F:71:16:D6:F0:6C:67:BD:E9:70:56:16:AE:94:0B:9D:F9:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D39CF91618CC4D5141C3A5C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.228.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:91:61:8c:c4:d5:14:1c:3a:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=1188443e-d637-41b0-80a4-966926783cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:8a:9c:0c:19:f9:32:28:54:49:48:e4:7e: aa:56:23:0a:63:80:7b:8e:5e:97:83:3a:2f:5e:80: f0:1c:5e:62:5c:c8:b6:d9:63:dd:2a:b2:3c:91:3c: 4e:90:d4:e1:84:da:b0:b5:50:9f:10:7a:27:d9:30: 26:c6:e3:3a:14:d9:01:93:80:79:44:34:58:6c:e8: 72:c1:46:ed:17:56:8c:3a:34:19:16:fa:c5:87:88: a2:92:a0:62:16:ff:87:c4:81:e4:17:70:a6:96:a1: 78:91:59:36:86:26:a4:22:ce:64:f0:82:cf:29:df: 2c:b5:2f:fc:eb:56:8d:18:a5:32:8b:b3:54:b1:fe: 7c:53:d1:81:a8:15:1a:11:8a:e5:b3:d8:ed:96:0d: ce:b5:0f:85:b9:23:93:36:90:8c:cf:15:05:1d:89: 5f:5a:a5:67:ad:93:0b:8a:a4:c2:e7:7c:c9:dc:fc: 5a:0c:92:5c:e2:08:37:79:65:06:7f:9d:b2:e6:7f: 10:05:11:7d:e4:c4:40:ff:fc:33:98:65:10:5c:fc: 7f:40:63:7e:10:87:0b:e1:a8:54:6b:a7:0e:32:1e: 21:96:33:f3:f7:f1:fc:1b:2a:04:a7:34:4f:bd:99: c5:04:2c:40:62:2d:b3:5c:59:e4:f6:dc:72:f0:92: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:2F:71:16:D6:F0:6C:67:BD:E9:70:56:16:AE:94:0B:9D:F9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:33:66:9d:ed:71:f3:e2:47:83:fb:9d:6c:14:a6:76:94:c1: e6:a8:e3:55:35:d3:fd:de:60:10:b8:4a:d1:f3:e4:cc:fc:6d: 76:f6:79:ee:fa:f7:5c:56:83:f5:50:7b:dd:0c:fd:67:66:70: 1c:4b:3a:8c:b3:31:66:83:70:15:e8:77:f1:d3:53:db:ba:28: 19:36:a0:4c:f7:a5:cd:5d:8e:69:c3:d7:32:8f:2c:15:e6:88: 44:a1:b3:58:e0:0c:7d:e5:0a:ac:f8:6a:7c:b2:d3:d6:b1:cf: f7:c9:93:dd:ea:3a:ea:5a:48:28:6c:ec:9d:df:ea:8d:8c:3b: 33:4f:dd:6a:1d:ef:07:46:0f:38:b1:97:ba:1f:8a:69:a0:38: 4b:b8:ed:c1:ab:a2:cf:ff:63:0c:fd:7c:18:b1:30:f9:33:71: 76:ef:ee:46:ae:fc:74:44:36:d6:4e:9b:ae:62:de:58:3c:31: 67:df:de:61:99:ad:96:39:18:70:08:1c:e2:6b:03:69:0d:8e: 10:d5:ab:d5:9c:30:8a:0b:4f:41:58:63:7d:8a:5b:28:17:19: 6e:b3:a5:8e:ff:e9:73:f8:c3:81:85:82:04:f7:13:8b:3e:b8: 52:7d:54:3b:67:18:1d:52:86:6a:18:a5:76:4b:e6:e1:37:45: b5:59:20:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5FhjMTVFBw6XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MTE4ODQ0M2UtZDYzNy00MWIwLTgwYTQtOTY2OTI2NzgzY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnOKnAwZ+TIoVElI5H6qViMKY4B7jl6Xgzov XoDwHF5iXMi22WPdKrI8kTxOkNThhNqwtVCfEHon2TAmxuM6FNkBk4B5RDRYbOhy wUbtF1aMOjQZFvrFh4iikqBiFv+HxIHkF3CmlqF4kVk2hiakIs5k8ILPKd8stS/8 61aNGKUyi7NUsf58U9GBqBUaEYrls9jtlg3OtQ+FuSOTNpCMzxUFHYlfWqVnrZML iqTC53zJ3PxaDJJc4gg3eWUGf52y5n8QBRF95MRA//wzmGUQXPx/QGN+EIcL4ahU a6cOMh4hljPz9/H8GyoEpzRPvZnFBCxAYi2zXFnk9txy8JIsVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIriL3EW1vBsZ73pcFYWrpQLnfn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RmMTIwMTItMTM4Ni0z YTQ3LTg5ZGItNmM0ZjFiNmFhMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARORvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8zZp3tcfPiR4P7nWwUpnaUweao41U10/3eYBC4StHz5Mz8bXb2ee76 91xWg/VQe90M/WdmcBxLOoyzMWaDcBXod/HTU9u6KBk2oEz3pc1djmnD1zKPLBXm iEShs1jgDH3lCqz4anyy09axz/fJk93qOupaSChs7J3f6o2MOzNP3Wod7wdGDzix l7ofimmgOEu47cGros//Ywz9fBixMPkzcXbv7kau/HRENtZOm65i3lg8MWff3mGZ rZY5GHAIHOJrA2kNjhDVq9WcMIoLT0FYY32KWygXGW6zpY7/6XP4w4GFggT3E4s+ uFJ9VDtnGB1ShmoYpXZL5uE3RbVZIGc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:24 2026 by rpki-client