$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b4836b56-02d6-3808-b632-9566024b2f3a.roa File: b4836b56-02d6-3808-b632-9566024b2f3a.roa (raw, json) Hash identifier: f7gCeeV7gJrUJ+REDRNJodLsBWdXCta5kMZvwM3LgdY= Subject key identifier: E5:8E:E7:14:63:E3:B7:9E:3B:2F:48:DD:FC:23:98:9D:6F:8E:C8:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D9FB58DFADE7302128DD403B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b4836b56-02d6-3808-b632-9566024b2f3a.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 17378 IP address blocks: 68.109.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8d:fa:de:73:02:12:8d:d4:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=fb7d56ce-fde9-463b-b98e-c175f10f2509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:49:59:aa:e1:af:b9:b1:b3:0c:ca:17:eb: ff:97:79:a3:b2:7c:bd:11:bb:30:9d:c4:8a:01:fd: ca:1a:96:4f:54:ff:32:38:d3:93:c1:5a:12:62:0a: 6e:8e:6c:14:c2:fd:25:3c:63:b0:d0:fe:27:3c:d8: b8:25:0f:2e:5f:24:84:88:fa:fe:c1:2f:78:1b:69: 41:ae:9f:5a:62:6e:b8:69:4f:f0:46:19:72:bc:d1: 03:8b:cd:45:51:2d:63:ed:66:da:30:75:f9:cd:da: 39:a4:fb:84:6c:94:14:b1:70:7a:8b:6e:dd:40:d9: e0:6a:e2:38:a7:76:80:bc:48:74:f6:b4:55:e4:90: 73:f7:33:03:30:4a:9d:f1:8b:97:23:e8:b6:15:f5: 11:ac:37:36:c0:43:f5:8b:58:cd:1d:e1:54:2f:2a: bc:d3:0f:80:fd:65:c1:8d:8a:c9:01:79:e3:91:c6: 86:1c:2c:04:b1:31:6b:f3:35:0d:5a:0c:89:89:02: 88:39:c4:69:4f:ed:75:11:98:ed:2a:ba:79:41:22: 4b:b6:64:dc:7f:39:65:4e:d7:e8:ec:e6:ae:00:8f: 5e:84:05:96:5e:f3:41:6a:09:78:5a:0e:49:89:7d: 83:28:22:1b:3d:2b:e9:ce:c7:86:8e:d1:32:d7:82: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8E:E7:14:63:E3:B7:9E:3B:2F:48:DD:FC:23:98:9D:6F:8E:C8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b4836b56-02d6-3808-b632-9566024b2f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c3:e1:eb:db:bf:47:83:58:02:75:90:94:b0:59:da:68:0a: 11:e5:69:34:f1:82:70:99:f3:67:d1:34:67:d2:a5:82:92:f4: 2b:72:6f:ea:ef:0a:6c:31:fd:c8:30:f1:17:e7:8a:db:2c:83: 81:2c:11:86:6f:cc:c4:c1:a2:e1:e4:34:34:54:09:ab:dd:58: ab:03:1c:93:ba:ba:38:c8:9d:92:fa:5c:f0:43:1a:d4:85:48: 7a:f0:e6:e9:d4:6b:e9:3d:ae:e4:8e:bc:1b:89:70:1c:33:76: ab:b6:22:cf:75:fc:3b:dc:8c:6e:4d:aa:84:db:1b:ee:a2:86: cb:99:a6:43:8d:ab:39:cb:8b:3a:7e:0b:01:59:c3:94:a4:82: f6:74:c2:c2:0c:d0:d1:45:c3:66:53:f5:8d:e0:bf:d8:36:26: 36:1c:42:11:e4:d3:32:d1:43:b8:09:25:7c:9a:c5:88:48:2e: 5f:44:b0:84:76:d1:66:ad:b7:f0:23:78:74:45:67:6a:54:43: 02:f6:43:65:2a:91:70:28:2f:41:20:84:31:21:9e:a1:ce:fd: 8e:2e:a9:aa:2a:4a:e6:d5:77:2e:42:f2:80:c9:24:30:63:45: 5c:a4:11:cf:73:9b:fd:27:14:cb:18:70:2e:1c:65:36:e5:f0: d2:7a:13:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftY363nMCEo3UA7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ZmI3ZDU2Y2UtZmRlOS00NjNiLWI5OGUtYzE3NWYxMGYyNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqRJWarhr7mxswzKF+v/l3mjsny9EbswncSK Af3KGpZPVP8yONOTwVoSYgpujmwUwv0lPGOw0P4nPNi4JQ8uXySEiPr+wS94G2lB rp9aYm64aU/wRhlyvNEDi81FUS1j7WbaMHX5zdo5pPuEbJQUsXB6i27dQNngauI4 p3aAvEh09rRV5JBz9zMDMEqd8YuXI+i2FfURrDc2wEP1i1jNHeFULyq80w+A/WXB jYrJAXnjkcaGHCwEsTFr8zUNWgyJiQKIOcRpT+11EZjtKrp5QSJLtmTcfzllTtfo 7OauAI9ehAWWXvNBagl4Wg5JiX2DKCIbPSvpzseGjtEy14L5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWO5xRj47eeOy9I3fwjmJ1vjsjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQ4MzZiNTYtMDJkNi0z ODA4LWI2MzItOTU2NjAyNGIyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvD4evbv0eDWAJ1kJSwWdpoChHlaTTxgnCZ82fRNGfSpYKS9Ctyb+rv Cmwx/cgw8Rfnitssg4EsEYZvzMTBouHkNDRUCavdWKsDHJO6ujjInZL6XPBDGtSF SHrw5unUa+k9ruSOvBuJcBwzdqu2Is91/DvcjG5NqoTbG+6ihsuZpkONqznLizp+ CwFZw5SkgvZ0wsIM0NFFw2ZT9Y3gv9g2JjYcQhHk0zLRQ7gJJXyaxYhILl9EsIR2 0Watt/AjeHRFZ2pUQwL2Q2UqkXAoL0EghDEhnqHO/Y4uqaoqSubVdy5C8oDJJDBj RVykEc9zm/0nFMsYcC4cZTbl8NJ6E50= -----END CERTIFICATE-----Generated at Mon May 4 23:29:20 2026 by rpki-client