$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/228c3a7f-b86a-3970-a66b-8269c16c5963.roa File: 228c3a7f-b86a-3970-a66b-8269c16c5963.roa (raw, json) Hash identifier: f60otiLT7p5GAkJU0Wfn3FdVss8y5Z++v/6dojDBhcU= Subject key identifier: 56:0D:C8:74:4C:F3:60:68:DE:53:A9:21:41:81:69:09:BD:07:39:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DC135AACB4C0BA7B1AC5824E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/228c3a7f-b86a-3970-a66b-8269c16c5963.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22773 IP address blocks: 68.229.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:aa:cb:4c:0b:a7:b1:ac:58:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=d25ddc88-4f3b-43a7-9d80-acc8bf385765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:3f:60:42:ff:f3:b2:66:19:0e:6d:bd:b0: 66:ea:af:c3:73:f5:77:6c:22:70:30:04:b5:33:38: e4:d6:4e:e9:ff:cc:f5:6f:d9:b4:3c:7f:93:58:ce: b6:0a:8e:ea:cc:db:79:fe:9d:62:2a:ce:ca:8a:b7: aa:e9:2b:0d:c4:44:f8:ac:c0:d6:de:cb:b1:9e:b6: 7d:90:48:50:eb:d1:5e:a9:d7:8a:8f:31:61:7d:65: 1b:60:ed:39:af:dc:96:ad:c4:59:6c:9d:36:19:7f: 20:01:a4:d5:ed:41:c7:20:59:15:f6:db:49:9e:45: 1f:13:c1:7c:e6:81:6d:a3:b7:d5:aa:38:d8:69:aa: cc:fd:ee:a5:ed:56:61:61:c1:d4:ce:0b:d1:e1:4d: 18:75:fd:e5:1c:58:91:da:fd:ac:64:bb:bd:14:a5: 55:7a:99:a2:d7:44:46:35:e8:85:51:3d:a5:ad:99: fd:d5:32:d2:c9:1b:5c:07:2e:da:7d:b1:3a:95:7c: 1c:41:4c:9f:e9:f8:d1:1b:0d:b4:14:a5:a3:2f:9e: 2f:f4:3a:b2:40:dc:cf:95:53:49:21:82:c3:af:d7: 9a:63:5a:1b:25:d5:fc:98:12:aa:4b:e1:89:c2:b0: d0:d6:94:ed:66:33:ca:7c:80:c7:b5:17:a7:ca:f4: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0D:C8:74:4C:F3:60:68:DE:53:A9:21:41:81:69:09:BD:07:39:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/228c3a7f-b86a-3970-a66b-8269c16c5963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4b:64:7b:79:d0:df:85:c7:8d:00:82:3d:ca:7d:03:f8:21: 43:8e:4e:25:9b:3c:86:b3:67:43:a8:b1:c7:e8:d7:57:4c:e6: 1f:4f:77:2e:10:03:25:20:cb:71:7f:65:91:e4:41:71:f8:eb: 57:89:35:e0:8e:f9:24:d6:a0:ab:45:08:de:e5:cf:06:fc:20: 7d:d1:6c:8d:35:c4:93:4c:7b:07:a4:27:e6:bc:c6:9f:cc:12: 80:e1:87:dd:d1:cc:8d:9d:05:37:53:65:8c:cf:b1:8b:b9:5d: 74:d6:fa:7a:7c:96:04:8b:e7:13:ac:81:d4:1c:98:ce:d7:ab: e7:41:c5:a1:22:e7:2f:97:e5:ee:d8:58:66:24:d9:98:90:2e: e7:6b:aa:30:23:80:d1:c5:1d:82:81:1f:c1:ef:a6:f6:ca:b6: d5:38:ed:74:1a:90:85:b5:bd:cf:8e:04:76:81:56:d4:9b:6f: f6:56:80:85:57:85:9b:78:ab:41:2c:96:84:a7:1a:50:23:54: fa:97:17:37:64:3f:3a:08:0c:c4:d4:63:71:ee:a9:62:7e:32: 92:a4:19:dc:c9:7a:68:a1:ec:a4:2a:7c:4f:e8:1d:74:ef:30: ca:1e:a5:e9:b9:9e:4e:ae:f7:22:7b:16:c7:a0:0c:80:90:64: 34:bc:19:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNarLTAunsaxYJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk ZDI1ZGRjODgtNGYzYi00M2E3LTlkODAtYWNjOGJmMzg1NzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp0/YEL/87JmGQ5tvbBm6q/Dc/V3bCJwMAS1 Mzjk1k7p/8z1b9m0PH+TWM62Co7qzNt5/p1iKs7Kireq6SsNxET4rMDW3suxnrZ9 kEhQ69FeqdeKjzFhfWUbYO05r9yWrcRZbJ02GX8gAaTV7UHHIFkV9ttJnkUfE8F8 5oFto7fVqjjYaarM/e6l7VZhYcHUzgvR4U0Ydf3lHFiR2v2sZLu9FKVVepmi10RG NeiFUT2lrZn91TLSyRtcBy7afbE6lXwcQUyf6fjRGw20FKWjL54v9DqyQNzPlVNJ IYLDr9eaY1obJdX8mBKqS+GJwrDQ1pTtZjPKfIDHtRenyvTFLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYNyHRM82Bo3lOpIUGBaQm9Bzl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI4YzNhN2YtYjg2YS0z OTcwLWE2NmItODI2OWMxNmM1OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1LZHt50N+Fx40Agj3KfQP4IUOOTiWbPIazZ0Ooscfo11dM5h9Pdy4Q AyUgy3F/ZZHkQXH461eJNeCO+STWoKtFCN7lzwb8IH3RbI01xJNMewekJ+a8xp/M EoDhh93RzI2dBTdTZYzPsYu5XXTW+np8lgSL5xOsgdQcmM7Xq+dBxaEi5y+X5e7Y WGYk2ZiQLudrqjAjgNHFHYKBH8HvpvbKttU47XQakIW1vc+OBHaBVtSbb/ZWgIVX hZt4q0EsloSnGlAjVPqXFzdkPzoIDMTUY3HuqWJ+MpKkGdzJemih7KQqfE/oHXTv MMoepem5nk6u9yJ7FsegDICQZDS8GS0= -----END CERTIFICATE-----Generated at Wed May 13 10:45:25 2026 by rpki-client