$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa File: f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa (raw, json) Hash identifier: XWxIJpkc7Zxz2ku6vXx8m91kXQq3VhiLjUhgkSrOGrM= Subject key identifier: 67:D3:9B:EB:6A:33:30:9D:05:9C:3B:F4:AF:71:FB:E2:89:84:36:BD Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584D492A7283770D0F8434F862AE Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 55002 IP address blocks: 216.68.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:72:83:77:0d:0f:84:34:f8:62:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=a326460f-36b4-4a0f-912f-0c6648ae0a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:3d:2e:df:2d:73:0f:4c:90:14:66:62:c8: fc:20:26:d5:dc:7b:4f:47:52:a9:76:8a:5b:1d:98: 8f:dd:88:cd:f2:c6:39:b2:05:83:24:b0:f6:01:f8: f7:c5:68:15:c7:5b:57:6f:11:91:0f:fd:06:67:aa: 4c:65:ba:c7:94:a8:4a:f8:60:cc:a0:95:fd:c6:93: 30:c8:92:28:83:d8:a4:2d:30:84:e9:36:75:0f:a5: 8f:b0:2e:b9:9d:be:a9:f2:3e:fd:db:85:66:66:e4: ea:af:f5:cb:b6:e0:0c:74:41:3b:0b:f4:5e:03:62: a7:ff:ac:83:01:db:9a:f0:7b:e0:79:89:ad:35:55: 9e:5c:42:d7:c0:ea:a5:f4:af:66:0c:e6:f8:a7:56: d7:55:04:61:90:62:a6:05:4d:58:dd:1d:bc:86:e0: 9c:87:05:6b:62:5e:96:a7:30:bf:fc:5c:60:07:f5: 9c:3d:3c:f9:52:66:2f:8a:db:d1:ad:40:ed:bb:36: 78:ea:e3:29:79:08:87:83:61:e5:70:80:f7:f0:5e: ca:40:cf:7a:14:a1:65:30:46:50:8c:a1:c5:4b:29: b6:28:39:ec:c8:ec:f1:97:71:f7:97:14:26:93:3e: 86:a7:56:f2:56:db:2f:1b:4c:da:03:8a:34:b1:91: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:9B:EB:6A:33:30:9D:05:9C:3B:F4:AF:71:FB:E2:89:84:36:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:42:21:0d:ff:ab:8a:a5:4b:d3:02:39:ed:2b:f1:6c:63:23: 97:96:04:63:bc:31:eb:95:c3:77:b7:12:b5:56:c1:62:f1:c3: f2:8d:e8:d8:bb:8f:fc:65:d4:96:6b:e8:5a:9e:66:80:58:4a: 7a:15:7a:ff:de:a7:e5:3c:ef:bc:49:ab:5d:3a:db:c2:ef:f9: 57:ad:c1:2a:03:25:d9:03:bf:1d:14:e4:25:98:ff:44:52:60: 71:44:1c:4a:02:5d:76:24:b2:7f:62:ee:13:ce:88:a7:2d:cd: ff:a7:da:70:1c:8f:12:3e:25:f1:97:87:cd:bf:5e:0e:31:90: 10:60:65:27:fe:5b:6a:01:65:f8:ed:5b:1d:aa:59:41:ff:13: c1:72:2a:49:e9:64:45:f3:d0:77:60:cb:ef:aa:ee:ba:df:ad: 61:7e:45:0e:b2:ad:b2:d0:a7:bc:b7:f4:92:ba:38:67:ac:6a: 3d:7d:7b:04:64:b2:5c:fc:97:50:bd:56:40:b5:ab:6f:3b:59: 3d:4e:16:b0:2d:bd:41:d4:b2:86:8e:dd:73:30:8c:c1:0f:f6: c1:23:42:44:3c:78:57:ac:bb:1e:51:8f:d2:bf:18:c4:0c:42: f8:7f:bc:7d:28:9e:8d:09:9a:bf:5d:52:e9:a9:f8:36:68:dd: 48:c9:97:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnKDdw0PhDT4Yq4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YTMyNjQ2MGYtMzZiNC00YTBmLTkxMmYtMGM2NjQ4YWUwYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSA9Lt8tcw9MkBRmYsj8ICbV3HtPR1Kpdopb HZiP3YjN8sY5sgWDJLD2Afj3xWgVx1tXbxGRD/0GZ6pMZbrHlKhK+GDMoJX9xpMw yJIog9ikLTCE6TZ1D6WPsC65nb6p8j7924VmZuTqr/XLtuAMdEE7C/ReA2Kn/6yD Adua8HvgeYmtNVWeXELXwOql9K9mDOb4p1bXVQRhkGKmBU1Y3R28huCchwVrYl6W pzC//FxgB/WcPTz5UmYvitvRrUDtuzZ46uMpeQiHg2HlcID38F7KQM96FKFlMEZQ jKHFSym2KDnsyOzxl3H3lxQmkz6Gp1byVtsvG0zaA4o0sZGbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfTm+tqMzCdBZw79K9x++KJhDa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvZjczZmNlNmMtMzZiZS0z MmNlLWE3YzUtNDcxNzRjZTk3ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ERaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpCIQ3/q4qlS9MCOe0r8WxjI5eWBGO8MeuVw3e3ErVWwWLxw/KN6Ni7 j/xl1JZr6FqeZoBYSnoVev/ep+U877xJq10628Lv+VetwSoDJdkDvx0U5CWY/0RS YHFEHEoCXXYksn9i7hPOiKctzf+n2nAcjxI+JfGXh82/Xg4xkBBgZSf+W2oBZfjt Wx2qWUH/E8FyKknpZEXz0Hdgy++q7rrfrWF+RQ6yrbLQp7y39JK6OGesaj19ewRk slz8l1C9VkC1q287WT1OFrAtvUHUsoaO3XMwjMEP9sEjQkQ8eFesux5Rj9K/GMQM Qvh/vH0ono0Jmr9dUump+DZo3UjJl3k= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:26 2026 by rpki-client