$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b98f495-2282-3b63-9bd9-c8851b4212b3.roa File: 2b98f495-2282-3b63-9bd9-c8851b4212b3.roa (raw, json) Hash identifier: c1y/CIrrz9UGUVYwhw9WRR7iK/rl1wIwgM0D48VJKhI= Subject key identifier: 32:79:DC:DD:FC:01:D2:50:3E:99:99:ED:AE:4C:B0:9E:54:25:E9:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBE6AFEEE2652AEC0CF543580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b98f495-2282-3b63-9bd9-c8851b4212b3.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 22773 IP address blocks: 68.106.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6a:fe:ee:26:52:ae:c0:cf:54:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=33aa544c-b9a2-4fd9-8767-4a0d117e37be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:e8:a3:4b:6a:d7:71:6b:5e:c7:6d:ba:2b: f0:54:99:66:16:59:0f:a3:d3:4f:55:94:e5:00:d6: 4a:da:8b:32:b7:75:02:d9:7d:b0:44:3c:8f:7e:20: e0:9c:9f:21:bc:dd:e9:71:92:6f:a2:20:4b:c0:5d: 9c:64:86:74:cf:86:40:c9:d9:b4:e9:f8:bb:12:05: a9:eb:10:46:4d:4b:d1:da:e8:2b:be:b8:71:c7:a5: fd:ec:e1:86:25:9d:92:fd:f2:91:75:c6:77:49:49: fc:9d:23:2b:66:ba:af:d4:13:af:d6:6b:2d:69:dc: 2d:60:d3:80:77:cc:0c:d5:71:06:88:53:91:2f:e5: 59:75:8e:5d:12:b6:de:f0:4c:c1:99:37:50:fb:4e: 4f:cd:9d:5a:5f:1b:3b:31:14:11:b7:28:3a:80:a1: be:0e:d3:a6:80:63:4b:93:92:b6:e6:83:a9:2d:d5: 62:64:be:d4:18:38:30:4e:fe:ea:77:26:c6:05:d6: 43:e1:b3:47:87:c5:9f:59:af:9e:9e:ab:50:ea:5e: 75:b7:46:ca:c0:b6:01:e3:12:02:e8:67:73:f8:58: 4a:4f:d3:5e:3e:6c:a3:7d:b5:58:4d:72:c3:88:35: 6e:60:f9:72:80:9e:d3:2e:2e:a6:57:5b:14:21:9e: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:79:DC:DD:FC:01:D2:50:3E:99:99:ED:AE:4C:B0:9E:54:25:E9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b98f495-2282-3b63-9bd9-c8851b4212b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9e:9b:09:e3:1c:49:f2:01:82:c9:4f:77:47:8d:87:34:c5: c7:16:b1:81:eb:ae:2b:72:95:87:11:92:50:28:49:5b:a5:1d: 0a:07:4c:d8:1e:a1:3a:fb:db:99:ad:1f:65:70:4f:b7:1a:fb: bf:45:61:9b:07:12:88:0b:70:b0:4d:ee:73:17:f5:b7:56:41: ff:f9:ff:e5:3e:ec:31:72:a3:8e:b6:10:f1:b3:01:1e:97:a1: 97:8e:86:56:51:b4:58:bb:93:c9:4e:63:12:e5:54:4a:19:d6: 2e:20:cd:d0:8c:49:80:aa:0c:ca:52:2c:02:d1:54:87:38:2a: 32:ed:18:34:30:dd:8d:a8:d1:ad:36:11:fb:ce:21:db:04:48: 5c:d2:c9:b5:09:fc:28:cd:9b:61:f3:ed:ef:57:c3:02:d5:0d: c4:c7:10:eb:ad:d5:19:37:36:20:a0:9b:d8:09:8c:df:18:08: f3:1f:1b:2e:9b:ab:b2:72:93:89:5a:5f:5d:c9:5f:9b:8c:c2: 68:c2:b5:df:e7:9d:ef:ed:57:d7:fe:94:d9:6c:1e:d7:17:1a: b2:db:fc:dc:2f:ea:e9:7f:ff:97:a3:46:0f:09:d6:bb:18:0b: 61:0f:37:1d:e1:24:6c:2d:0e:20:95:0f:54:68:fc:4c:25:1c: e3:1c:31:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+av7uJlKuwM9UNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk MzNhYTU0NGMtYjlhMi00ZmQ5LTg3NjctNGEwZDExN2UzN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJXoo0tq13FrXsdtuivwVJlmFlkPo9NPVZTl ANZK2osyt3UC2X2wRDyPfiDgnJ8hvN3pcZJvoiBLwF2cZIZ0z4ZAydm06fi7EgWp 6xBGTUvR2ugrvrhxx6X97OGGJZ2S/fKRdcZ3SUn8nSMrZrqv1BOv1mstadwtYNOA d8wM1XEGiFORL+VZdY5dErbe8EzBmTdQ+05PzZ1aXxs7MRQRtyg6gKG+DtOmgGNL k5K25oOpLdViZL7UGDgwTv7qdybGBdZD4bNHh8WfWa+enqtQ6l51t0bKwLYB4xIC 6Gdz+FhKT9NePmyjfbVYTXLDiDVuYPlygJ7TLi6mV1sUIZ7NLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ53N38AdJQPpmZ7a5MsJ5UJemsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI5OGY0OTUtMjI4Mi0z YjYzLTliZDktYzg4NTFiNDIxMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2emwnjHEnyAYLJT3dHjYc0xccWsYHrritylYcRklAoSVulHQoHTNge oTr725mtH2VwT7ca+79FYZsHEogLcLBN7nMX9bdWQf/5/+U+7DFyo462EPGzAR6X oZeOhlZRtFi7k8lOYxLlVEoZ1i4gzdCMSYCqDMpSLALRVIc4KjLtGDQw3Y2o0a02 EfvOIdsESFzSybUJ/CjNm2Hz7e9XwwLVDcTHEOut1Rk3NiCgm9gJjN8YCPMfGy6b q7Jyk4laX13JX5uMwmjCtd/nne/tV9f+lNlsHtcXGrLb/Nwv6ul//5ejRg8J1rsY C2EPNx3hJGwtDiCVD1Ro/EwlHOMcMbY= -----END CERTIFICATE-----Generated at Wed May 13 11:48:49 2026 by rpki-client