$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa File: 1a10b291-b16d-3725-931a-b5c526e9bdb6.roa (raw, json) Hash identifier: ON3EAy1QAzp+T4ANkEQ+pZt90Qk8a0Rsmz5p3VTZfWY= Subject key identifier: 6E:46:45:B1:BD:46:6C:55:A6:FD:BE:72:0B:7B:67:90:DE:7F:AF:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D8AC54AE31D7848E9C6A43240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 68.227.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4a:e3:1d:78:48:e9:c6:a4:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=66a5d5da-3c84-473b-ad55-01597946fc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:31:02:75:64:15:02:80:2a:30:fb:2f:a7: 3d:96:62:c2:b8:db:5d:76:e5:95:99:77:94:11:2d: 3d:7e:0d:fb:1e:e2:a4:1e:7d:49:27:bb:1d:72:75: 04:26:56:83:a1:dc:13:2c:cf:dd:ff:60:87:db:af: 93:c2:1c:ae:e6:97:9f:d6:eb:36:2b:31:7f:12:1b: 98:6c:56:c2:66:52:69:17:29:d0:b6:26:21:5b:f3: 0d:4b:1e:ab:27:1d:02:4b:27:91:85:b4:a9:27:7c: 11:06:db:14:bf:dd:6f:40:69:28:a4:d2:03:49:d6: d7:8a:c9:3c:43:87:ba:12:62:09:34:af:8b:38:d5: 6e:63:f3:09:6f:33:dd:0a:26:2d:9a:37:5d:66:52: a1:12:cf:be:0c:4c:76:a1:5a:eb:51:34:b3:a9:e6: dd:18:39:be:57:6a:52:bd:be:35:db:40:90:0a:df: f9:36:b1:bd:68:39:8b:ee:87:fc:2b:2e:bc:a6:48: f3:bf:9a:70:bb:27:10:35:84:96:53:d5:44:15:03: b2:63:b2:09:12:2a:fa:01:da:e0:6b:87:47:4d:40: f4:61:b3:b4:d4:55:69:cc:70:cb:01:01:1f:c8:90: 59:66:09:c2:a4:2d:95:08:92:72:5f:4b:51:7c:e5: 3c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:46:45:B1:BD:46:6C:55:A6:FD:BE:72:0B:7B:67:90:DE:7F:AF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bc:cb:c5:0c:61:db:30:a2:95:04:25:3a:e6:80:9b:84:b9: 36:f7:bf:ac:25:f9:78:b6:80:6e:89:b5:d8:2d:82:70:25:84: b6:b7:4a:1c:2f:eb:87:2d:9b:b9:14:fd:3b:05:da:95:95:e7: a4:c7:4f:e4:4a:f7:5a:ab:4f:8d:4a:d0:a8:0e:fd:18:d4:79: 7b:c4:56:6c:ff:17:40:bb:6c:c1:b7:e9:42:17:dc:f6:70:c2: 89:32:ac:8f:6d:eb:98:7b:12:1a:fc:74:43:95:cd:32:2f:18: 1c:ee:95:ac:f6:e0:e6:d4:70:8b:1d:fb:d2:4b:33:99:67:90: 0d:20:9f:ae:bb:99:23:dd:3a:11:dc:a6:38:00:be:a5:6a:40: 7f:39:29:cb:01:2b:ea:a3:ec:1d:8e:e8:6f:b6:20:01:25:82: 37:5e:eb:8b:01:52:6c:5f:99:60:64:07:43:1a:95:e9:5c:8d: 5e:4e:8f:d7:f8:68:b7:10:37:b4:94:b0:4c:e3:88:ec:14:39: c2:a8:6e:2b:78:3e:c3:1e:47:5b:28:4a:7e:38:ff:6e:f2:23: 1c:22:4c:a6:bd:da:18:1d:8f:b6:10:59:f5:ee:a6:cc:b3:99: b9:c2:54:04:4a:31:bf:2c:39:9a:cf:20:5f:cd:26:03:82:18: c7:53:24:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUrjHXhI6cakMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NjZhNWQ1ZGEtM2M4NC00NzNiLWFkNTUtMDE1OTc5NDZmYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm4xAnVkFQKAKjD7L6c9lmLCuNtdduWVmXeU ES09fg37HuKkHn1JJ7sdcnUEJlaDodwTLM/d/2CH26+Twhyu5pef1us2KzF/EhuY bFbCZlJpFynQtiYhW/MNSx6rJx0CSyeRhbSpJ3wRBtsUv91vQGkopNIDSdbXisk8 Q4e6EmIJNK+LONVuY/MJbzPdCiYtmjddZlKhEs++DEx2oVrrUTSzqebdGDm+V2pS vb4120CQCt/5NrG9aDmL7of8Ky68pkjzv5pwuycQNYSWU9VEFQOyY7IJEir6Adrg a4dHTUD0YbO01FVpzHDLAQEfyJBZZgnCpC2VCJJyX0tRfOU8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5GRbG9RmxVpv2+cgt7Z5Def69HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWExMGIyOTEtYjE2ZC0z NzI1LTkzMWEtYjVjNTI2ZTliZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO8y8UMYdswopUEJTrmgJuEuTb3v6wl+Xi2gG6JtdgtgnAlhLa3Shwv 64ctm7kU/TsF2pWV56THT+RK91qrT41K0KgO/RjUeXvEVmz/F0C7bMG36UIX3PZw wokyrI9t65h7Ehr8dEOVzTIvGBzulaz24ObUcIsd+9JLM5lnkA0gn667mSPdOhHc pjgAvqVqQH85KcsBK+qj7B2O6G+2IAElgjde64sBUmxfmWBkB0MalelcjV5Oj9f4 aLcQN7SUsEzjiOwUOcKobit4PsMeR1soSn44/27yIxwiTKa92hgdj7YQWfXupsyz mbnCVARKMb8sOZrPIF/NJgOCGMdTJBM= -----END CERTIFICATE-----Generated at Mon May 4 22:39:08 2026 by rpki-client