$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0282d76-fd3e-3fc6-b703-f8a84546c998.roa File: a0282d76-fd3e-3fc6-b703-f8a84546c998.roa (raw, json) Hash identifier: +NxMMR2jNAJlXvd5pxBdG6naoAaUSXfzqVmAUdoVKSc= Subject key identifier: 39:FE:92:CD:1A:50:B6:B7:32:2A:96:90:08:31:BE:CC:0C:4A:16:C2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D59EA47ED9C6916A38BEB2500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0282d76-fd3e-3fc6-b703-f8a84546c998.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22773 IP address blocks: 68.108.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:47:ed:9c:69:16:a3:8b:eb:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=12f7ddd6-bf9b-46b2-99ea-7ca6846c5009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:f3:20:5b:1f:e0:c6:60:f9:9d:63:8e:28: e2:d5:ac:1c:2d:a6:bd:0e:5b:83:f2:85:32:8c:c6: ea:e6:b2:6d:c0:bb:46:f1:bb:81:8b:43:aa:c3:b5: 6f:ca:ca:06:cc:86:ac:9a:92:71:c4:09:60:2c:60: 8c:dc:db:be:73:52:f8:7c:dd:3b:09:fb:aa:29:78: 84:cd:93:99:d3:62:4f:22:c9:87:a9:90:fd:11:9a: 5c:13:ca:d0:20:8d:c6:81:7e:aa:4c:46:bb:8c:e0: d7:d5:47:81:d4:78:0b:17:37:b9:55:2d:4d:fb:36: 48:f0:1e:e1:16:f0:38:a9:cd:59:02:96:68:f2:c4: c8:ae:fe:b9:0c:d1:4c:48:04:53:04:52:28:98:68: 10:4a:18:24:ab:8c:64:ca:d1:76:fc:a4:84:82:26: 1f:2d:e0:85:78:d5:5d:a9:67:b8:f4:82:eb:cc:4a: 1c:40:4b:cc:fc:76:f0:d7:3e:6b:d9:5e:13:21:bc: 35:87:42:58:8e:dd:6d:a7:96:f5:da:95:ea:5e:5e: c5:24:90:4f:75:78:a7:3a:02:a7:61:d0:b8:34:00: d9:93:4a:2f:2f:fb:ed:c0:fe:c8:03:3e:d9:22:0a: b9:33:18:18:25:5d:42:e1:12:3b:40:ed:40:7e:66: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:92:CD:1A:50:B6:B7:32:2A:96:90:08:31:BE:CC:0C:4A:16:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0282d76-fd3e-3fc6-b703-f8a84546c998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:75:6c:0a:27:c1:43:5a:38:d8:68:88:b8:d5:36:48:35:5a: 2d:60:8e:b0:e3:b0:08:e3:53:2c:96:51:c8:78:6a:6f:09:ac: 7a:d5:51:0d:d9:73:01:b1:13:d5:33:ce:f2:25:b0:52:03:67: b4:76:73:e3:40:74:28:42:fd:55:57:7a:cb:d7:ee:38:db:3b: 2d:7f:5f:65:45:bc:26:f9:a8:a9:93:f0:f7:f0:fb:52:9c:dd: cb:1e:1b:52:53:89:2b:06:04:ec:68:e4:57:af:38:86:1b:0b: 10:0f:94:91:5d:99:6d:22:51:b5:3c:97:5c:bf:ae:9d:ad:dd: 02:d2:4f:d5:c0:29:64:5d:e8:0a:73:b1:f7:22:c3:6f:d4:1d: 05:b0:36:c6:4e:5c:48:fa:bf:5d:b7:fc:b1:d7:75:f1:25:67: a3:47:12:ed:be:a3:6c:ca:c5:59:13:dc:19:ca:54:02:d4:1f: 9d:56:69:f8:41:dc:9a:e1:a8:a2:33:ff:75:5f:75:e9:7d:c6: 19:c4:16:be:e8:e9:e3:9a:56:2c:b1:46:ea:df:42:1b:56:24: 66:64:78:5c:97:08:21:b8:cb:1b:69:45:29:72:eb:32:72:14: b2:16:3c:d0:d0:54:5b:d4:09:cf:2c:ae:56:2a:db:4b:e3:1d: c3:6c:48:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6kftnGkWo4vrJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MTJmN2RkZDYtYmY5Yi00NmIyLTk5ZWEtN2NhNjg0NmM1MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkETzIFsf4MZg+Z1jjiji1awcLaa9DluD8oUy jMbq5rJtwLtG8buBi0Oqw7VvysoGzIasmpJxxAlgLGCM3Nu+c1L4fN07CfuqKXiE zZOZ02JPIsmHqZD9EZpcE8rQII3GgX6qTEa7jODX1UeB1HgLFze5VS1N+zZI8B7h FvA4qc1ZApZo8sTIrv65DNFMSARTBFIomGgQShgkq4xkytF2/KSEgiYfLeCFeNVd qWe49ILrzEocQEvM/Hbw1z5r2V4TIbw1h0JYjt1tp5b12pXqXl7FJJBPdXinOgKn YdC4NADZk0ovL/vtwP7IAz7ZIgq5MxgYJV1C4RI7QO1AfmZwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn+ks0aULa3MiqWkAgxvswMShbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTAyODJkNzYtZmQzZS0z ZmM2LWI3MDMtZjhhODQ1NDZjOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGyWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx1bAonwUNaONhoiLjVNkg1Wi1gjrDjsAjjUyyWUch4am8JrHrVUQ3Z cwGxE9UzzvIlsFIDZ7R2c+NAdChC/VVXesvX7jjbOy1/X2VFvCb5qKmT8Pfw+1Kc 3cseG1JTiSsGBOxo5FevOIYbCxAPlJFdmW0iUbU8l1y/rp2t3QLST9XAKWRd6Apz sfciw2/UHQWwNsZOXEj6v123/LHXdfElZ6NHEu2+o2zKxVkT3BnKVALUH51WafhB 3JrhqKIz/3Vfdel9xhnEFr7o6eOaViyxRurfQhtWJGZkeFyXCCG4yxtpRSly6zJy FLIWPNDQVFvUCc8srlYq20vjHcNsSK8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:24:13 2026 by rpki-client