$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa File: 4fae2510-3129-3a69-94d5-78a79e2cec6e.roa (raw, json) Hash identifier: eXIp2exWpbeArcliqGB0pXfXPbhR6T0a05akKpg/JF0= Subject key identifier: 94:2C:52:CD:B9:CA:13:8D:BD:ED:EF:4C:43:7E:0A:2A:06:E3:29:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBD05E3E35C875A8D72B9E300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 22773 IP address blocks: 68.98.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:e3:e3:5c:87:5a:8d:72:b9:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=a982695c-2e82-4a68-a578-d1162c5d851f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:ac:c4:c3:24:8b:18:f4:bd:65:1b:c3:52: 73:43:34:91:f7:6a:0e:d3:34:e5:8e:aa:58:21:0f: c8:14:20:34:06:f5:fc:5a:b8:15:2b:5d:f8:8f:e7: 9c:7c:07:42:d1:98:91:d1:bf:d2:ea:6b:33:9e:05: 9c:71:67:f1:69:8f:23:32:86:fe:01:c5:e7:5d:36: 91:7d:ff:9c:ea:1a:11:96:13:83:a7:0b:47:45:51: ab:37:b6:b0:94:9b:85:c2:00:1c:4f:16:f1:ae:01: eb:b3:3d:9a:17:39:6c:18:cc:66:e8:ac:8f:0f:b4: 92:33:23:9e:95:cb:9c:58:9d:34:81:b4:a9:b0:be: 81:58:65:32:05:f8:a3:6b:0a:9a:86:f6:58:83:9a: eb:b4:04:72:2e:85:03:d4:57:3c:bd:93:c4:7e:e3: a2:61:00:59:84:56:c0:d7:27:e9:00:3c:d0:24:0a: 97:53:d5:9d:4d:f6:02:0b:a9:cf:16:70:e5:b1:f4: b7:42:f9:3f:cd:0d:70:e7:ea:a9:27:b9:cf:6a:f7: 87:91:f4:35:96:f2:b6:75:13:93:7c:3a:6a:e8:cd: 0a:9a:74:d8:f8:f1:f6:50:11:6f:a4:bc:04:c9:8d: 90:e9:41:cd:5f:34:f2:f4:7b:09:90:9c:0d:1d:fe: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2C:52:CD:B9:CA:13:8D:BD:ED:EF:4C:43:7E:0A:2A:06:E3:29:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c8:5a:8a:97:74:5e:82:f8:15:c6:50:96:ef:93:16:cf:84: 97:bc:d5:e1:a6:ff:e5:26:a2:2a:fb:1c:71:5b:b2:ad:1a:9b: 2d:58:92:b3:3f:a4:87:b2:cc:59:fe:33:19:59:f2:85:55:3d: 64:f0:08:9f:b8:ab:d9:13:71:bf:c9:9f:56:74:33:6a:42:6f: 98:3c:98:7e:11:bd:7e:02:f6:32:a5:e9:93:19:5a:9e:99:ac: f9:7a:f4:2b:e6:b7:6b:7d:ac:d7:28:61:eb:e0:9f:38:81:d1: 23:66:1f:59:16:09:3b:28:b7:8c:6a:29:68:ee:08:02:c4:6c: 61:b6:30:cc:f0:78:ad:0c:fa:3f:4a:d3:94:12:f3:f5:0d:a0: 62:be:63:48:31:c4:cd:6b:cf:71:21:99:2a:bd:11:e8:b2:73: da:3a:d3:b7:29:00:60:eb:f8:9a:ce:fa:4a:66:65:7a:9c:a4: af:e1:1d:43:d8:25:0c:81:60:9a:29:f6:d5:c9:04:b8:73:c2: 95:11:1c:ff:86:68:34:5a:55:46:e0:b8:cc:cf:fd:74:f8:0a: e3:e1:9b:89:48:4f:c5:44:45:70:68:10:7b:83:0b:cc:8d:4e: b0:89:86:3a:dc:f7:1f:dd:fd:7a:f9:a3:d9:c3:7e:cd:2b:c0: 57:6a:57:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BePjXIdajXK54wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk YTk4MjY5NWMtMmU4Mi00YTY4LWE1NzgtZDExNjJjNWQ4NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqSsxMMkixj0vWUbw1JzQzSR92oO0zTljqpY IQ/IFCA0BvX8WrgVK134j+ecfAdC0ZiR0b/S6mszngWccWfxaY8jMob+AcXnXTaR ff+c6hoRlhODpwtHRVGrN7awlJuFwgAcTxbxrgHrsz2aFzlsGMxm6KyPD7SSMyOe lcucWJ00gbSpsL6BWGUyBfijawqahvZYg5rrtARyLoUD1Fc8vZPEfuOiYQBZhFbA 1yfpADzQJAqXU9WdTfYCC6nPFnDlsfS3Qvk/zQ1w5+qpJ7nPaveHkfQ1lvK2dROT fDpq6M0KmnTY+PH2UBFvpLwEyY2Q6UHNXzTy9HsJkJwNHf7/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQsUs25yhONve3vTEN+CioG4ymwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZhZTI1MTAtMzEyOS0z YTY5LTk0ZDUtNzhhNzllMmNlYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLIWoqXdF6C+BXGUJbvkxbPhJe81eGm/+Umoir7HHFbsq0amy1YkrM/ pIeyzFn+MxlZ8oVVPWTwCJ+4q9kTcb/Jn1Z0M2pCb5g8mH4RvX4C9jKl6ZMZWp6Z rPl69Cvmt2t9rNcoYevgnziB0SNmH1kWCTsot4xqKWjuCALEbGG2MMzweK0M+j9K 05QS8/UNoGK+Y0gxxM1rz3EhmSq9Eeiyc9o607cpAGDr+JrO+kpmZXqcpK/hHUPY JQyBYJop9tXJBLhzwpURHP+GaDRaVUbguMzP/XT4CuPhm4lIT8VERXBoEHuDC8yN TrCJhjrc9x/d/Xr5o9nDfs0rwFdqV4k= -----END CERTIFICATE-----Generated at Wed May 13 07:17:47 2026 by rpki-client