$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa File: 524ae170-b28a-36e5-a920-d65b545312e1.roa (raw, json) Hash identifier: 6X8+LwqXAzrBZQV9g4il4MmQ1huRuqQRRkvQsTsXO18= Subject key identifier: D3:FA:28:58:AA:DD:2B:1A:F4:32:E0:28:B2:4E:72:4A:CB:21:48:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D95F00CF24095255E53A92580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 22773 IP address blocks: 68.226.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0c:f2:40:95:25:5e:53:a9:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=29a5e0fc-006a-4ede-b9f4-0c2924b2cbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f9:99:aa:57:17:f8:92:fc:02:77:4a:29:da: e6:70:73:5c:c5:c9:a9:28:f0:d9:ab:0d:05:9d:e5: ec:5e:eb:7b:9f:ce:23:af:52:ee:7a:cd:53:ae:11: 7f:9c:c5:21:40:70:96:ec:89:42:2c:a6:50:62:24: 4a:b6:75:8a:90:a6:cc:41:f5:fc:25:6c:08:5a:68: 20:fb:5e:e1:16:a5:92:43:53:dc:46:a9:c8:7a:e1: 6d:c2:f3:b1:ac:ca:10:80:4c:56:1d:70:28:23:29: 6f:95:2b:a3:26:ac:9b:48:7e:b8:19:90:78:ab:9f: 51:ae:65:c1:aa:28:63:66:ab:00:8c:5a:79:4c:e7: 34:bf:54:f6:f0:be:c7:37:ed:f5:f9:be:79:4a:02: 5e:af:e4:0b:1c:21:db:83:42:f6:b2:1a:c0:b4:5a: f4:31:4e:49:90:33:21:ed:9b:f9:30:9b:c8:67:95: ca:80:b3:67:28:fa:06:10:27:da:ac:34:26:74:e3: 04:0a:0e:3a:f0:06:92:a2:20:24:b9:c2:fe:ff:6f: 17:d4:21:d6:07:38:7b:00:ad:7a:c4:b6:cc:00:91: 0b:20:bb:c7:70:af:8f:dc:82:a2:47:21:d8:42:24: 31:34:6d:35:d8:34:6b:12:e2:56:47:26:d9:8c:58: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FA:28:58:AA:DD:2B:1A:F4:32:E0:28:B2:4E:72:4A:CB:21:48:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0a:35:51:00:a3:b5:29:b0:87:fb:5b:d4:e0:59:18:28:c9: e7:a7:08:21:2e:35:97:44:b8:a9:36:fe:9f:7e:4d:78:ed:aa: 13:cf:d2:83:b8:5e:ad:2e:3e:9e:71:7f:58:96:0c:b4:64:e3: ac:ea:6f:fe:29:64:48:a0:76:6f:b2:ef:bc:5d:3c:94:29:73: 9c:f0:cf:26:1d:93:07:07:bc:64:f6:4e:b0:f6:9b:ba:36:a6: c4:07:eb:e9:f1:82:bf:a5:5e:63:2a:b8:60:77:3e:fb:dc:75: 6a:7a:45:be:f3:e7:70:4d:62:88:3a:0d:59:b5:a2:d2:c1:65: 6c:7a:44:2a:e2:49:2b:a6:5d:61:94:7d:f7:39:04:cd:34:dd: 2c:00:0c:3d:fc:ea:d3:75:fe:08:0b:a0:12:95:ba:69:0a:d5: db:df:a7:7b:60:9e:33:a9:ce:c4:c5:2a:0a:8b:81:af:86:f9: 4a:4d:2c:15:27:7d:fa:2e:f9:c9:dd:bc:4f:3e:2e:b5:5d:68: f7:28:7a:23:c6:bb:21:c4:6d:ce:18:08:fd:6e:c2:ff:7a:1c: 2d:49:84:1b:53:d4:7d:07:41:85:86:5e:7c:d7:cf:a3:4e:b6: 71:5b:28:ba:1f:c9:9a:fd:27:54:b5:f8:c5:86:4a:4a:e5:70: 96:90:e4:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AzyQJUlXlOpJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MjlhNWUwZmMtMDA2YS00ZWRlLWI5ZjQtMGMyOTI0YjJjYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/mZqlcX+JL8AndKKdrmcHNcxcmpKPDZqw0F neXsXut7n84jr1Lues1TrhF/nMUhQHCW7IlCLKZQYiRKtnWKkKbMQfX8JWwIWmgg +17hFqWSQ1PcRqnIeuFtwvOxrMoQgExWHXAoIylvlSujJqybSH64GZB4q59RrmXB qihjZqsAjFp5TOc0v1T28L7HN+31+b55SgJer+QLHCHbg0L2shrAtFr0MU5JkDMh 7Zv5MJvIZ5XKgLNnKPoGECfarDQmdOMECg468AaSoiAkucL+/28X1CHWBzh7AK16 xLbMAJELILvHcK+P3IKiRyHYQiQxNG012DRrEuJWRybZjFjguwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP6KFiq3Ssa9DLgKLJOckrLIUgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0YWUxNzAtYjI4YS0z NmU1LWE5MjAtZDY1YjU0NTMxMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0KNVEAo7UpsIf7W9TgWRgoyeenCCEuNZdEuKk2/p9+TXjtqhPP0oO4 Xq0uPp5xf1iWDLRk46zqb/4pZEigdm+y77xdPJQpc5zwzyYdkwcHvGT2TrD2m7o2 psQH6+nxgr+lXmMquGB3PvvcdWp6Rb7z53BNYog6DVm1otLBZWx6RCriSSumXWGU ffc5BM003SwADD386tN1/ggLoBKVumkK1dvfp3tgnjOpzsTFKgqLga+G+UpNLBUn ffou+cndvE8+LrVdaPcoeiPGuyHEbc4YCP1uwv96HC1JhBtT1H0HQYWGXnzXz6NO tnFbKLofyZr9J1S1+MWGSkrlcJaQ5NU= -----END CERTIFICATE-----Generated at Mon May 4 22:37:25 2026 by rpki-client