$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e380796-c2fa-3f3e-902f-946591bff2db.roa File: 4e380796-c2fa-3f3e-902f-946591bff2db.roa (raw, json) Hash identifier: s0+GtGJSyG6ZBaaDno21UPbnZJLyj/rjpZwgnqCb/KQ= Subject key identifier: AD:48:20:13:53:53:21:95:BE:23:35:43:95:83:D2:0C:6D:E3:03:88 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBA3AEC2CAFFD094B4603B780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e380796-c2fa-3f3e-902f-946591bff2db.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 68.2.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:ec:2c:af:fd:09:4b:46:03:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=5a468228-e413-4a62-bd06-621f237c9ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:33:30:e6:21:b1:fe:af:9e:ca:33:f3:81: a4:b2:61:35:d9:44:af:f4:da:64:56:60:45:d5:84: 40:16:a3:68:7d:eb:31:88:90:4c:28:72:91:0b:53: ef:88:1f:cf:65:db:ef:38:d7:1e:64:93:71:14:94: 7e:da:00:2b:e8:12:30:8f:bf:c8:90:f0:a5:7d:21: af:30:a5:16:6d:56:59:27:37:21:ef:61:98:00:75: 97:82:97:56:1c:11:db:34:f4:1f:f1:b8:74:4e:99: 94:56:a9:c3:3e:ed:df:73:27:ba:08:f6:05:90:46: 61:ce:a6:4c:38:a3:78:ea:8b:cc:89:ea:58:6a:96: 03:cf:dc:5e:6c:60:b1:1f:98:0f:73:46:61:03:e5: 1e:af:66:6d:ff:7b:18:a7:cd:39:2a:58:48:10:3f: 8d:05:eb:d7:73:df:a0:c2:55:a7:4e:f1:68:f7:67: f0:50:15:84:e3:cd:82:a9:15:fd:eb:c5:5e:14:b6: 09:34:f4:b4:db:5e:34:c9:ab:81:f3:1e:34:af:5f: 03:3f:1a:cd:be:af:77:85:3d:07:b0:ca:b5:32:1c: 7e:15:32:89:a7:c3:fd:01:4c:ad:5a:27:1a:e9:f5: f8:09:c0:95:2b:c8:dc:90:a0:55:2f:5a:a6:33:32: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:20:13:53:53:21:95:BE:23:35:43:95:83:D2:0C:6D:E3:03:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e380796-c2fa-3f3e-902f-946591bff2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c8:9b:a1:97:11:6c:55:a5:d3:da:42:92:e3:37:b0:df:6c: 2e:46:5c:43:50:36:d1:33:c1:78:a8:46:d4:9e:e9:3d:a9:27: 6f:41:e2:48:fa:aa:5a:40:1e:40:29:9a:ca:37:36:18:7e:1a: 5b:98:7f:6f:ef:de:09:7c:d3:e9:ff:46:19:f4:ba:52:1b:b6: 4b:df:91:b3:c2:92:35:26:67:58:cc:f8:89:40:86:fd:20:6f: dd:96:23:33:de:a1:9b:22:6b:b5:02:9d:4c:4c:b1:e2:57:a1: 3a:55:8b:41:8a:1d:7d:4a:4d:5a:ae:0e:16:e8:24:be:04:74: a8:db:02:cd:1c:12:f0:66:51:cb:35:3f:d2:44:6c:85:ab:24: 43:06:6a:8e:fb:53:59:d0:1f:9d:36:e9:5a:45:d3:7e:f1:91: d6:fc:91:16:3b:a3:79:fe:db:2e:89:2e:f5:9b:eb:c4:dc:3a: 98:46:ca:aa:e0:18:c6:48:21:39:f9:77:b1:87:81:61:2b:11: 49:bb:b8:98:a1:cd:b2:b5:22:a4:13:cf:14:50:d5:4f:fe:2e: dc:f6:b1:2d:19:4c:b3:11:3b:d1:dd:1d:81:78:61:1b:dd:a6: 22:db:80:8b:85:fc:5e:c0:99:3d:a3:29:c3:94:c8:b6:85:e4: 85:6a:4a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ouwsr/0JS0YDt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NWE0NjgyMjgtZTQxMy00YTYyLWJkMDYtNjIxZjIzN2M5ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRozMOYhsf6vnsoz84GksmE12USv9NpkVmBF 1YRAFqNofesxiJBMKHKRC1PviB/PZdvvONceZJNxFJR+2gAr6BIwj7/IkPClfSGv MKUWbVZZJzch72GYAHWXgpdWHBHbNPQf8bh0TpmUVqnDPu3fcye6CPYFkEZhzqZM OKN46ovMiepYapYDz9xebGCxH5gPc0ZhA+Uer2Zt/3sYp805KlhIED+NBevXc9+g wlWnTvFo92fwUBWE482CqRX968VeFLYJNPS02140yauB8x40r18DPxrNvq93hT0H sMq1Mhx+FTKJp8P9AUytWica6fX4CcCVK8jckKBVL1qmMzIR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1IIBNTUyGVviM1Q5WD0gxt4wOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGUzODA3OTYtYzJmYS0z ZjNlLTkwMmYtOTQ2NTkxYmZmMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXIm6GXEWxVpdPaQpLjN7DfbC5GXENQNtEzwXioRtSe6T2pJ29B4kj6 qlpAHkApmso3Nhh+GluYf2/v3gl80+n/Rhn0ulIbtkvfkbPCkjUmZ1jM+IlAhv0g b92WIzPeoZsia7UCnUxMseJXoTpVi0GKHX1KTVquDhboJL4EdKjbAs0cEvBmUcs1 P9JEbIWrJEMGao77U1nQH5026VpF037xkdb8kRY7o3n+2y6JLvWb68TcOphGyqrg GMZIITn5d7GHgWErEUm7uJihzbK1IqQTzxRQ1U/+Ltz2sS0ZTLMRO9HdHYF4YRvd piLbgIuF/F7AmT2jKcOUyLaF5IVqSg8= -----END CERTIFICATE-----Generated at Wed May 13 03:17:33 2026 by rpki-client