$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d4a7f5-d99e-3032-b942-7756ec2be653.roa File: 32d4a7f5-d99e-3032-b942-7756ec2be653.roa (raw, json) Hash identifier: bwKKu5nSyRNnLUKtwlUcAAOcdxvLz50eWeBRK4D2YRE= Subject key identifier: AB:32:1C:80:06:A1:C4:21:15:C5:23:35:7A:80:91:25:78:3F:D0:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DC135C0D57DFF6B0EC1CD5EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d4a7f5-d99e-3032-b942-7756ec2be653.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22773 IP address blocks: 68.224.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c0:d5:7d:ff:6b:0e:c1:cd:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=635ad10e-1dd6-4d50-94d7-3c3aa9bfee71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:c0:73:04:f6:24:2d:f0:14:0b:66:9e:18: d9:7e:8b:d3:e9:99:b6:5f:05:2e:a3:c8:ce:c2:15: 50:a0:5d:f2:7c:f1:c1:3f:0c:61:a5:9f:d5:b0:c1: 6f:f3:42:ba:c1:d5:07:57:94:95:a7:55:5a:47:dd: fb:6f:de:63:f2:63:3d:7b:8e:69:a9:92:91:48:41: 1b:f5:bc:71:9f:56:f3:93:7e:82:a6:a5:8b:09:bf: a8:dc:ca:a1:34:44:85:08:d5:5a:c0:68:81:9e:34: f8:97:91:1a:96:4a:98:14:2f:73:56:02:fe:ad:fa: 63:f5:70:b4:4d:3d:b0:f2:4f:ae:5f:cc:79:53:38: 30:1d:eb:9d:69:cf:0f:02:cc:5c:be:58:f1:56:6d: 2b:61:ed:9f:cf:6c:4f:65:aa:6f:78:d4:a0:11:10: ba:90:6c:61:bd:84:f1:6a:9e:ba:53:43:da:d9:2c: 06:86:ec:4a:fa:cd:50:60:89:fc:c2:07:b0:29:b3: 2f:80:c8:25:ab:0e:51:65:29:ab:4c:50:2f:7a:bf: 7b:11:82:39:70:68:74:53:5c:b7:52:d9:31:f8:26: 94:f3:8a:a9:78:41:8a:7b:76:fb:48:86:05:ea:ae: 6a:8d:94:8d:db:3d:66:2b:5f:af:55:a9:8f:75:e5: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:1C:80:06:A1:C4:21:15:C5:23:35:7A:80:91:25:78:3F:D0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d4a7f5-d99e-3032-b942-7756ec2be653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:22:4a:21:2e:ed:98:ff:b5:c5:da:0c:bd:08:7a:dd:3c:e3: 05:50:4d:99:2b:67:75:a9:2a:0a:90:f8:50:d9:4e:1a:5f:2a: 78:ce:d8:d5:99:4f:2e:57:4a:6e:da:f9:65:cc:7a:06:98:e0: fb:a5:c0:ac:7b:a8:5f:1b:75:57:4a:ea:0a:4b:ea:a4:7a:0b: ff:e7:da:b5:d0:33:f4:4d:44:3b:a2:d9:97:c0:2f:dd:41:e4: c4:a7:0d:8a:d8:f3:99:2b:62:d0:3f:ea:55:cb:6d:03:65:74: fa:99:a6:78:36:ee:56:af:0c:2e:49:e7:5c:eb:44:22:38:2c: 05:cd:2b:28:4d:b5:2c:d3:cd:35:fb:77:84:33:10:be:33:26: 88:bc:2b:81:34:97:fb:26:54:84:d4:69:a3:fd:65:b7:25:91: 59:cb:a3:08:dd:6f:4f:47:bc:f0:c9:79:69:9c:1e:30:93:28: 71:a7:5a:7b:91:5f:8a:76:1b:95:a2:5e:35:cd:ea:30:60:23: 14:0c:86:33:91:fe:6a:66:87:5e:3b:c9:61:bc:9c:b7:54:d2: c7:1a:5e:8c:8b:f6:42:68:d2:f5:b2:7a:48:6b:9e:dc:77:e2: c4:02:d7:9e:63:cc:7d:e0:87:96:0a:78:d8:84:56:22:d4:fe: b1:0c:84:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcDVff9rDsHNXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk NjM1YWQxMGUtMWRkNi00ZDUwLTk0ZDctM2MzYWE5YmZlZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9vAcwT2JC3wFAtmnhjZfovT6Zm2XwUuo8jO whVQoF3yfPHBPwxhpZ/VsMFv80K6wdUHV5SVp1VaR937b95j8mM9e45pqZKRSEEb 9bxxn1bzk36CpqWLCb+o3MqhNESFCNVawGiBnjT4l5EalkqYFC9zVgL+rfpj9XC0 TT2w8k+uX8x5UzgwHeudac8PAsxcvljxVm0rYe2fz2xPZapveNSgERC6kGxhvYTx ap66U0Pa2SwGhuxK+s1QYIn8wgewKbMvgMglqw5RZSmrTFAver97EYI5cGh0U1y3 Utkx+CaU84qpeEGKe3b7SIYF6q5qjZSN2z1mK1+vVamPdeVpmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsyHIAGocQhFcUjNXqAkSV4P9CbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJkNGE3ZjUtZDk5ZS0z MDMyLWI5NDItNzc1NmVjMmJlNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRODwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEiSiEu7Zj/tcXaDL0Iet084wVQTZkrZ3WpKgqQ+FDZThpfKnjO2NWZ Ty5XSm7a+WXMegaY4PulwKx7qF8bdVdK6gpL6qR6C//n2rXQM/RNRDui2ZfAL91B 5MSnDYrY85krYtA/6lXLbQNldPqZpng27lavDC5J51zrRCI4LAXNKyhNtSzTzTX7 d4QzEL4zJoi8K4E0l/smVITUaaP9ZbclkVnLowjdb09HvPDJeWmcHjCTKHGnWnuR X4p2G5WiXjXN6jBgIxQMhjOR/mpmh147yWG8nLdU0scaXoyL9kJo0vWyekhrntx3 4sQC155jzH3gh5YKeNiEViLU/rEMhAo= -----END CERTIFICATE-----Generated at Wed May 13 06:13:24 2026 by rpki-client