$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa File: 890657e2-2f37-3642-bba7-2b0835ec2741.roa (raw, json) Hash identifier: GTJoXAQaGqsN69EER93bHSMAV2GQx6coc+6vflqcWlg= Subject key identifier: 3E:02:55:8B:8A:14:52:F8:14:50:BA:FC:3C:CE:06:50:DC:80:29:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D747007E65CD3FA78D821CE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 68.227.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:07:e6:5c:d3:fa:78:d8:21:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3ec05ee0-0bee-454b-8b4e-e67166a73f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:c8:22:01:af:e7:b1:f7:8d:64:bc:13:c6: 16:9d:2c:a6:92:c4:ee:c1:80:cc:35:1c:7b:cc:58: 25:1f:83:10:9e:8e:7f:d0:c3:7d:fb:ff:a2:e6:c0: 74:e7:3a:59:51:b1:a6:5a:41:7b:11:fc:69:59:ad: 53:af:0b:d8:39:90:c2:7c:92:1f:9b:3b:d2:3b:e0: 0a:67:76:8e:ca:65:53:28:6a:e3:c5:5b:5c:c9:48: 44:45:7c:16:8f:6a:75:d8:95:11:bf:6c:86:ad:df: 19:1f:09:81:fb:92:35:4c:d2:68:eb:41:87:6f:28: ad:df:60:86:56:63:7b:a6:f7:e4:0b:d3:38:70:28: 8a:76:22:64:4b:7a:bc:48:67:27:94:a0:88:6b:53: 9f:b8:28:16:c2:eb:c0:24:9e:01:b7:4c:37:d3:54: 93:62:47:ec:95:59:35:fb:bc:c1:8a:a3:05:31:c3: c6:33:da:a5:b2:66:ee:ad:6a:17:22:0e:bb:4b:9e: f6:a4:1e:eb:90:49:16:3e:40:37:80:ea:cd:62:e3: 39:ca:3d:da:e9:0e:a4:4f:e6:9b:97:97:81:21:ae: 55:3c:b0:73:c0:e3:18:13:9e:ef:58:01:e0:5e:f0: 39:1d:20:10:e3:e6:dc:81:3d:2a:2d:e0:fa:d3:52: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:55:8B:8A:14:52:F8:14:50:BA:FC:3C:CE:06:50:DC:80:29:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:02:8a:35:16:26:43:86:49:51:79:f9:0b:c5:37:98:28:e0: 3b:d4:56:c8:82:f4:02:68:3e:7b:22:cc:9e:7b:f3:5c:4c:9c: d7:4f:54:d7:2c:b5:45:6c:f7:8b:3d:57:c0:b4:d4:3f:6f:7f: d1:a0:d6:7e:77:40:fd:3a:e3:35:b9:fe:a9:85:f5:6c:3b:fb: 55:36:5e:07:78:09:ac:80:04:a3:4f:24:c7:78:57:ec:6c:73: 53:04:a1:22:28:f3:43:6e:d3:bd:ce:6d:bf:3c:0d:7e:00:b4: 4f:36:cb:49:aa:fc:f5:b8:09:e9:7f:3e:e7:52:3a:98:9c:f8: 1a:14:fe:4e:b9:72:a6:61:b1:f1:d0:45:70:99:4d:83:dd:d2: df:11:ae:81:ad:6b:14:61:e5:80:09:6b:27:82:7b:d8:d2:8f: cd:74:c4:9a:94:86:08:20:4f:09:6b:bc:cd:db:d9:58:49:16: dc:fc:93:03:38:b9:bc:b9:c8:52:21:23:25:71:d2:a0:ac:d9: 88:86:fc:ea:d1:a2:3e:fd:2e:64:b9:ed:00:59:b9:f6:d9:29: d8:60:db:7e:b8:78:c0:1c:03:77:7b:e1:fe:f8:98:83:26:7f: 89:77:46:fa:8a:52:1a:24:f1:2c:1c:f3:45:cd:66:a6:27:e0: 02:24:39:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAfmXNP6eNghzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2VjMDVlZTAtMGJlZS00NTRiLThiNGUtZTY3MTY2YTczZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBrIIgGv57H3jWS8E8YWnSymksTuwYDMNRx7 zFglH4MQno5/0MN9+/+i5sB05zpZUbGmWkF7EfxpWa1TrwvYOZDCfJIfmzvSO+AK Z3aOymVTKGrjxVtcyUhERXwWj2p12JURv2yGrd8ZHwmB+5I1TNJo60GHbyit32CG VmN7pvfkC9M4cCiKdiJkS3q8SGcnlKCIa1OfuCgWwuvAJJ4Bt0w301STYkfslVk1 +7zBiqMFMcPGM9qlsmburWoXIg67S572pB7rkEkWPkA3gOrNYuM5yj3a6Q6kT+ab l5eBIa5VPLBzwOMYE57vWAHgXvA5HSAQ4+bcgT0qLeD601IdMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4CVYuKFFL4FFC6/DzOBlDcgCnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODkwNjU3ZTItMmYzNy0z NjQyLWJiYTctMmIwODM1ZWMyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROMGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsCijUWJkOGSVF5+QvFN5go4DvUVsiC9AJoPnsizJ5781xMnNdPVNcs tUVs94s9V8C01D9vf9Gg1n53QP064zW5/qmF9Ww7+1U2Xgd4CayABKNPJMd4V+xs c1MEoSIo80Nu073Obb88DX4AtE82y0mq/PW4Cel/PudSOpic+BoU/k65cqZhsfHQ RXCZTYPd0t8RroGtaxRh5YAJayeCe9jSj810xJqUhgggTwlrvM3b2VhJFtz8kwM4 uby5yFIhIyVx0qCs2YiG/OrRoj79LmS57QBZufbZKdhg2364eMAcA3d74f74mIMm f4l3RvqKUhok8Swc80XNZqYn4AIkOSY= -----END CERTIFICATE-----Generated at Fri Apr 17 11:14:35 2026 by rpki-client