$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a4f3615-dc69-3f98-ac3c-3792404dccba.roa File: 3a4f3615-dc69-3f98-ac3c-3792404dccba.roa (raw, json) Hash identifier: kvk05KGhOMASszNzXikcsBa6MDY/bxeAJ9vJykrn9o4= Subject key identifier: 68:E2:E1:D3:41:05:E3:CD:54:B8:C4:34:35:23:51:F8:A4:FF:ED:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DC135C0BD1871E9E8FF54DC20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a4f3615-dc69-3f98-ac3c-3792404dccba.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22773 IP address blocks: 68.229.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c0:bd:18:71:e9:e8:ff:54:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=e1b4e16d-9e98-48ce-aa56-a80bad9de006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:de:6b:0e:bd:ee:cc:e4:56:be:35:98:d1: a3:cd:15:55:bd:4b:f7:97:b7:28:3b:ae:8a:a9:dd: d8:91:2d:8b:77:3f:70:1a:10:73:f8:b7:cb:68:96: 5f:87:a7:cd:f7:9c:23:28:a3:65:f0:6c:cd:88:54: bd:7d:0b:c2:7a:26:6c:8b:dc:1a:61:e5:f7:e0:52: 46:7a:72:b0:e3:28:79:39:50:e6:65:24:5b:d7:28: 3a:99:5e:72:f8:d7:3e:44:b2:68:26:57:01:b3:67: c6:2f:fd:a9:ee:58:2d:3e:c0:7f:b9:f3:fe:cd:75: 93:07:bd:c1:64:52:02:fa:49:03:6d:62:bf:9a:c8: e4:57:b6:07:23:55:1e:16:58:4b:10:28:80:2b:40: 48:cc:f3:ba:fd:01:f6:c8:43:b6:ff:dc:89:dc:8e: be:5f:ff:36:64:06:7d:19:31:0e:f9:46:7a:f5:c5: 49:51:1a:96:1d:d5:b1:f1:2e:4a:48:23:11:7d:14: 30:0f:8b:45:58:f9:78:6e:af:48:69:06:3b:12:94: 8f:1e:f4:a5:9a:e2:8c:53:32:f9:3a:cc:fa:22:dc: 7c:16:c9:df:0a:39:26:20:9e:4f:ce:42:40:ae:05: 6a:7b:79:ed:ec:d5:64:83:5a:99:d2:29:cf:76:8e: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E2:E1:D3:41:05:E3:CD:54:B8:C4:34:35:23:51:F8:A4:FF:ED:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a4f3615-dc69-3f98-ac3c-3792404dccba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:92:21:3d:53:36:16:e8:26:14:4e:89:25:de:68:60:61:f9: 72:2b:16:45:94:6f:35:9e:e1:8f:4d:44:e2:1e:6b:fe:e7:01: 7e:c5:75:40:43:02:75:42:02:a1:e0:16:9f:09:e4:b1:63:97: ec:1d:14:ea:bc:47:6c:9c:1a:bd:f6:8c:08:21:ab:01:3d:56: 51:16:42:cc:5b:5f:6e:96:60:01:b9:f5:8e:03:17:84:c6:9b: a4:21:be:25:64:00:bd:bb:d9:33:da:58:cf:9e:e6:97:cb:11: f3:cf:6b:24:d3:75:8c:92:a4:7c:f7:de:f5:53:7b:c5:2c:32: b8:0f:2b:ae:79:54:2d:20:18:3a:0a:d8:70:90:95:e8:1c:2b: a5:8a:dd:c0:49:6f:f9:bb:b4:04:de:e3:92:0d:d1:57:aa:7b: 22:dc:15:f7:0f:b7:a1:11:03:a8:e7:3f:70:3c:e8:62:0b:01: 49:ce:4e:06:b6:21:62:79:f5:4b:47:39:06:80:d8:b1:7f:0b: fb:68:45:d7:2b:8d:03:01:48:d5:0f:37:7d:9e:7a:c2:7c:52: 0a:d0:45:87:b0:b5:3e:b0:83:a4:cc:8b:1f:0e:7b:e2:6f:6f: 20:37:af:f7:e2:20:f3:7b:75:b1:87:a1:ed:c0:32:13:e4:f0: 59:63:8f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcC9GHHp6P9U3CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTFiNGUxNmQtOWU5OC00OGNlLWFhNTYtYTgwYmFkOWRlMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SPeaw697szkVr41mNGjzRVVvUv3l7coO66K qd3YkS2Ldz9wGhBz+LfLaJZfh6fN95wjKKNl8GzNiFS9fQvCeiZsi9waYeX34FJG enKw4yh5OVDmZSRb1yg6mV5y+Nc+RLJoJlcBs2fGL/2p7lgtPsB/ufP+zXWTB73B ZFIC+kkDbWK/msjkV7YHI1UeFlhLECiAK0BIzPO6/QH2yEO2/9yJ3I6+X/82ZAZ9 GTEO+UZ69cVJURqWHdWx8S5KSCMRfRQwD4tFWPl4bq9IaQY7EpSPHvSlmuKMUzL5 Osz6Itx8FsnfCjkmIJ5PzkJArgVqe3nt7NVkg1qZ0inPdo4OJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGji4dNBBePNVLjENDUjUfik/+2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E0ZjM2MTUtZGM2OS0z Zjk4LWFjM2MtMzc5MjQwNGRjY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiSIT1TNhboJhROiSXeaGBh+XIrFkWUbzWe4Y9NROIea/7nAX7FdUBD AnVCAqHgFp8J5LFjl+wdFOq8R2ycGr32jAghqwE9VlEWQsxbX26WYAG59Y4DF4TG m6QhviVkAL272TPaWM+e5pfLEfPPayTTdYySpHz33vVTe8UsMrgPK655VC0gGDoK 2HCQlegcK6WK3cBJb/m7tATe45IN0VeqeyLcFfcPt6ERA6jnP3A86GILAUnOTga2 IWJ59UtHOQaA2LF/C/toRdcrjQMBSNUPN32eesJ8UgrQRYewtT6wg6TMix8Oe+Jv byA3r/fiIPN7dbGHoe3AMhPk8Fljjzs= -----END CERTIFICATE-----Generated at Wed May 13 08:13:16 2026 by rpki-client