$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa File: 42560064-0659-32dc-a3b0-1a01cfca664e.roa (raw, json) Hash identifier: Ov/E4fc7FcY3TFHWCbuxIjRJ9saTmeQBPCl39+UR1oM= Subject key identifier: 4F:89:65:AA:FC:6F:2A:68:44:21:4F:03:9E:9A:7B:8B:B1:D2:F4:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBD05DF2736E7E2EB37537040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 22773 IP address blocks: 68.0.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:df:27:36:e7:e2:eb:37:53:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=4667e4da-d388-4c45-a0aa-36840c020d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:04:7c:4d:6b:b3:40:7e:71:69:78:f9:b6: 0b:d8:ba:a9:45:c0:56:e5:16:af:9f:4b:d0:af:7a: b5:4f:72:b8:65:ba:f1:fa:61:2f:ef:37:0f:3d:bb: b1:26:f0:99:ed:de:aa:3b:f1:46:66:67:e0:8f:49: 0c:db:c6:ea:08:16:b2:6f:c8:81:bc:98:12:d6:86: f0:40:e4:bd:a8:11:a8:10:5a:5a:66:e7:ae:67:77: 21:02:68:c5:2f:ca:da:76:29:5e:90:0a:89:6c:19: be:8a:76:1f:aa:fe:13:20:ee:55:da:9d:c8:f9:06: 60:fc:39:f6:94:95:45:cc:fc:e5:9b:d4:c0:a7:1e: 21:81:cc:09:78:1b:f3:50:72:b3:8a:a9:90:52:0e: 85:b7:56:c1:1d:88:27:1b:82:c1:3a:25:4c:d7:d3: c6:3e:46:fb:22:9d:ba:b3:29:68:10:46:0b:5d:18: 8d:f4:7a:5f:8d:fe:2c:c8:40:2c:09:e9:32:ae:14: 8a:51:12:b5:e5:6e:b0:63:de:8f:34:59:79:52:ea: 13:6f:21:94:f9:26:03:37:b5:27:a0:ff:06:56:a9: 72:10:5b:74:99:c6:07:54:fd:83:88:c3:bd:6a:dd: f7:58:a5:21:f8:a3:5c:07:73:c2:b4:00:c0:2c:7a: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:89:65:AA:FC:6F:2A:68:44:21:4F:03:9E:9A:7B:8B:B1:D2:F4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:21:4a:47:d9:be:1b:d9:83:ef:ec:19:cd:62:1c:30:91:c9: 5a:90:f4:a9:1d:3a:b1:0d:a3:55:81:55:fa:95:08:da:9f:76: 39:f0:25:b7:34:e2:47:5c:75:4c:29:65:fb:ab:5d:f4:a9:ec: 2e:ae:3f:0e:a2:ce:53:46:8c:d5:c0:85:7f:f2:1b:69:0f:58: 4d:75:ef:e0:8b:00:c5:13:65:a6:18:d1:a6:3c:23:78:9a:1d: bf:e3:61:c1:aa:22:0e:d0:07:86:4c:2e:6f:c2:84:0d:79:f8: a1:b1:5e:59:0b:ab:be:04:76:38:b2:6a:f5:1e:bb:e9:d4:df: 32:d6:b3:02:c3:b7:a1:56:2d:d8:a7:28:72:36:52:94:a2:49: 05:df:d7:2c:5e:53:b9:29:21:bc:2b:b0:75:92:48:69:3e:84: 26:7b:85:5d:ef:68:5f:52:38:0c:54:dd:8b:56:1c:45:84:0b: 98:d3:d6:39:34:6e:1d:69:f0:7c:12:42:54:21:57:8a:29:45: 52:d8:6c:28:88:9f:68:59:71:ae:9e:cd:7f:12:02:84:6c:39: a0:01:a5:a0:ac:0d:b5:79:51:ad:0e:b0:97:07:1f:d4:48:0c: d7:b5:44:37:f7:3b:ad:9e:9c:44:2f:b6:cf:2e:6f:93:9c:ee: 69:4c:81:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29Bd8nNufi6zdTcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NDY2N2U0ZGEtZDM4OC00YzQ1LWEwYWEtMzY4NDBjMDIwZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDoEfE1rs0B+cWl4+bYL2LqpRcBW5Ravn0vQ r3q1T3K4Zbrx+mEv7zcPPbuxJvCZ7d6qO/FGZmfgj0kM28bqCBayb8iBvJgS1obw QOS9qBGoEFpaZueuZ3chAmjFL8radilekAqJbBm+inYfqv4TIO5V2p3I+QZg/Dn2 lJVFzPzlm9TApx4hgcwJeBvzUHKziqmQUg6Ft1bBHYgnG4LBOiVM19PGPkb7Ip26 syloEEYLXRiN9Hpfjf4syEAsCekyrhSKURK15W6wY96PNFl5UuoTbyGU+SYDN7Un oP8GVqlyEFt0mcYHVP2DiMO9at33WKUh+KNcB3PCtADALHq5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+JZar8bypoRCFPA56ae4ux0vQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDI1NjAwNjQtMDY1OS0z MmRjLWEzYjAtMWEwMWNmY2E2NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJghSkfZvhvZg+/sGc1iHDCRyVqQ9KkdOrENo1WBVfqVCNqfdjnwJbc0 4kdcdUwpZfurXfSp7C6uPw6izlNGjNXAhX/yG2kPWE117+CLAMUTZaYY0aY8I3ia Hb/jYcGqIg7QB4ZMLm/ChA15+KGxXlkLq74EdjiyavUeu+nU3zLWswLDt6FWLdin KHI2UpSiSQXf1yxeU7kpIbwrsHWSSGk+hCZ7hV3vaF9SOAxU3YtWHEWEC5jT1jk0 bh1p8HwSQlQhV4opRVLYbCiIn2hZca6ezX8SAoRsOaABpaCsDbV5Ua0OsJcHH9RI DNe1RDf3O62enEQvts8ub5Oc7mlMgTM= -----END CERTIFICATE-----Generated at Wed May 13 07:10:12 2026 by rpki-client