$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23c319a3-1095-33b9-9740-17d3ff5fa27c.roa File: 23c319a3-1095-33b9-9740-17d3ff5fa27c.roa (raw, json) Hash identifier: QFyIPlrssBFB3ZGzArKFSOazNzwRDsrJmVZimDz/k28= Subject key identifier: 54:CF:0D:3A:B3:9F:92:5B:A4:64:DC:6E:95:5A:BD:68:FE:B5:E6:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBE6B0C0F2E006D04729CDE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23c319a3-1095-33b9-9740-17d3ff5fa27c.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 22773 IP address blocks: 68.108.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:0c:0f:2e:00:6d:04:72:9c:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=70e596a4-6e37-4ac1-a337-f281e6df2f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:bb:e3:7e:e3:a6:56:59:0f:19:e3:3c:a6: 80:0b:af:5b:64:11:a0:bd:83:46:f3:cd:51:61:b9: f8:f1:e2:0e:87:f3:6a:39:76:07:90:54:2c:ba:3a: 5c:2f:be:58:cb:ab:7d:2b:29:17:11:c4:af:4e:ff: 45:30:16:8a:18:4f:a2:4e:38:03:78:71:3d:af:fc: a9:6a:8a:76:8c:a3:29:fb:c3:c3:da:8c:80:30:e1: cc:07:71:f6:fe:50:d4:f8:d3:a0:d3:02:1e:93:9f: c9:a7:92:97:fc:8c:2b:11:2b:a4:b9:66:c9:3e:bd: 78:85:ca:05:8a:a3:11:0d:13:52:7a:4c:39:b5:af: 18:f0:57:c6:6f:57:0b:6c:0b:d0:14:b4:cb:e9:e0: 58:17:2c:33:a4:cb:42:63:b2:b5:d7:28:22:94:69: 93:5b:aa:dd:98:ed:48:7f:f5:c0:34:c6:6f:bf:2f: 10:61:f0:a1:56:7c:40:29:78:76:47:67:c6:71:a6: d7:ef:9f:a6:5d:6a:44:28:80:00:c8:67:b1:a2:89: 64:99:af:d0:00:1e:bb:05:e5:a2:9e:0f:4e:50:aa: 24:df:f4:6c:9f:eb:88:0e:d2:12:b9:96:d2:d7:10: 35:5f:9c:1d:6e:5c:b0:a7:29:1f:c7:e3:ad:2f:92: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CF:0D:3A:B3:9F:92:5B:A4:64:DC:6E:95:5A:BD:68:FE:B5:E6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23c319a3-1095-33b9-9740-17d3ff5fa27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:09:fd:a0:36:bc:b9:29:8b:4e:d7:a6:98:94:d7:9c:33:b4: 4c:ce:48:7d:b8:2b:0a:ad:a5:a2:dc:4f:93:b4:5d:b4:91:5c: 19:c1:18:fb:85:aa:48:c1:3d:d5:f1:56:b3:70:6c:1f:f6:2e: de:3d:73:7a:8f:3d:20:7e:d5:19:60:44:58:f2:dc:34:e4:dd: cf:ba:05:cc:6a:20:41:d5:48:ba:d8:3b:90:da:29:df:85:59: 4d:39:c2:6b:b8:a3:70:25:d3:9b:5f:46:42:79:e5:05:b3:60: a3:a7:64:ec:d7:3c:76:c8:67:2d:07:49:f6:30:8e:31:c6:87: 96:09:6f:6f:d2:73:9f:c7:f2:fc:7a:94:b6:56:d1:16:e1:0e: 83:37:bd:9f:17:04:eb:32:fe:28:45:95:71:b0:d9:d9:5d:b6: ff:c7:c5:df:02:47:22:cb:89:93:1b:ad:3d:4f:a7:9c:34:b7: 0c:82:83:c8:00:59:0f:35:d4:ec:4c:8a:e2:32:5e:f5:8d:c5: 83:7e:74:3c:79:15:be:fd:b8:80:cd:81:5f:1b:eb:46:5e:a5: 93:30:be:97:4d:d6:96:74:61:57:d5:ed:5b:c1:4f:cd:31:4e: 0c:2b:64:0d:25:9a:31:46:67:bc:cd:8c:df:f0:0d:df:0d:ed: e5:a8:e6:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+awwPLgBtBHKc3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk NzBlNTk2YTQtNmUzNy00YWMxLWEzMzctZjI4MWU2ZGYyZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC67437jplZZDxnjPKaAC69bZBGgvYNG881R Ybn48eIOh/NqOXYHkFQsujpcL75Yy6t9KykXEcSvTv9FMBaKGE+iTjgDeHE9r/yp aop2jKMp+8PD2oyAMOHMB3H2/lDU+NOg0wIek5/Jp5KX/IwrESukuWbJPr14hcoF iqMRDRNSekw5ta8Y8FfGb1cLbAvQFLTL6eBYFywzpMtCY7K11ygilGmTW6rdmO1I f/XANMZvvy8QYfChVnxAKXh2R2fGcabX75+mXWpEKIAAyGexoolkma/QAB67BeWi ng9OUKok3/Rsn+uIDtISuZbS1xA1X5wdblywpykfx+OtL5L4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTPDTqzn5JbpGTcbpVavWj+teZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNjMzE5YTMtMTA5NS0z M2I5LTk3NDAtMTdkM2ZmNWZhMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsJ/aA2vLkpi07XppiU15wztEzOSH24KwqtpaLcT5O0XbSRXBnBGPuF qkjBPdXxVrNwbB/2Lt49c3qPPSB+1RlgRFjy3DTk3c+6BcxqIEHVSLrYO5DaKd+F WU05wmu4o3Al05tfRkJ55QWzYKOnZOzXPHbIZy0HSfYwjjHGh5YJb2/Sc5/H8vx6 lLZW0RbhDoM3vZ8XBOsy/ihFlXGw2dldtv/Hxd8CRyLLiZMbrT1Pp5w0twyCg8gA WQ811OxMiuIyXvWNxYN+dDx5Fb79uIDNgV8b60ZepZMwvpdN1pZ0YVfV7VvBT80x TgwrZA0lmjFGZ7zNjN/wDd8N7eWo5pA= -----END CERTIFICATE-----Generated at Wed May 13 09:04:51 2026 by rpki-client