$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5b8e16-0bed-36bd-90c7-434e848e2333.roa File: cb5b8e16-0bed-36bd-90c7-434e848e2333.roa (raw, json) Hash identifier: +Iiyk3fXsPTT7laa+8yk5Q8T8jsY4hW583z18cMdako= Subject key identifier: E0:54:92:41:BF:46:B3:1E:FC:51:4E:2E:E1:1A:BB:60:8D:85:56:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DAC4592ABD8DC872C5C8D51F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5b8e16-0bed-36bd-90c7-434e848e2333.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 22773 IP address blocks: 64.147.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:92:ab:d8:dc:87:2c:5c:8d:51:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=7730f717-9579-42ab-937a-cbfc142caeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:dc:04:77:6c:80:82:9b:86:79:ec:56:b9: ae:24:ac:64:e1:25:9f:c6:cf:e1:4b:af:b9:79:ec: dd:a0:99:5f:a8:30:70:40:2a:84:79:7a:77:1a:ef: b7:2e:b8:7a:42:0f:c1:1d:98:42:6d:ae:c6:dc:ff: dc:07:ab:2f:5b:d4:3f:3a:e5:82:27:34:4b:29:6a: ad:86:85:56:fe:b2:df:f5:47:c8:13:8f:26:30:b1: 86:ba:bb:93:e5:0f:f3:bc:93:4a:f9:f2:92:28:bd: d4:9c:b9:1b:cc:bd:50:d4:63:30:94:d9:d3:a7:a0: 83:d8:a8:d1:5a:67:5d:bb:14:7f:3f:8f:2d:78:0b: be:04:ee:d2:15:4e:d4:b0:85:00:71:31:9f:d4:d0: 56:29:83:02:b7:8b:5c:11:f5:53:d6:92:e7:15:70: b0:cc:d6:8a:37:9a:48:ed:ba:dc:84:3d:93:00:c3: 45:ed:a8:a9:0c:18:88:a0:1c:55:c9:3d:ba:4b:41: 55:34:f8:cf:9a:2e:7d:11:58:d2:ff:81:58:30:f6: 17:8d:70:25:75:5c:8e:61:bd:95:b7:98:00:7e:c7: c0:80:8a:62:84:5a:ea:f3:44:d9:6c:df:f6:70:b2: 8d:b2:a1:aa:a8:ee:f9:a7:77:75:2e:16:8a:a5:cc: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:54:92:41:BF:46:B3:1E:FC:51:4E:2E:E1:1A:BB:60:8D:85:56:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5b8e16-0bed-36bd-90c7-434e848e2333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 64.147.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:fd:65:0f:f0:35:4d:d7:82:02:83:21:0b:96:bf:7a:e2:0d: be:8a:17:34:b9:a8:e4:d7:24:c6:69:ef:80:d6:b2:96:d0:4a: cc:00:6c:a1:95:53:02:fc:ae:54:8a:71:85:ea:4d:7a:fd:1e: ae:8c:9c:d3:a4:5a:6f:1d:72:40:48:58:72:55:22:43:f4:a7: fb:5a:bd:67:5b:f1:6e:8a:8a:2e:94:34:53:3b:6f:ea:d8:11: a7:dd:6d:bf:ad:b5:15:4e:47:ae:36:b4:1e:02:56:9b:db:47: b6:fc:41:9b:77:a5:b5:d6:86:c3:f3:a5:c6:79:81:0a:2d:12: b6:3e:60:cb:1e:4a:14:1a:7d:f0:0d:4f:88:f3:b5:cb:49:2c: 7e:99:16:8b:e0:eb:19:28:01:57:15:74:1d:a1:72:a5:13:81: 4a:5a:8c:dd:d4:ca:97:93:ca:3e:bf:af:f0:30:5e:18:84:9b: 5e:6b:dc:1b:be:bb:a1:0b:c8:8d:9e:45:fe:e8:98:ec:e7:26: 50:b3:31:6d:da:24:f3:16:9b:c6:ba:cb:c1:1b:70:34:73:e8: 5a:7a:78:79:d1:8c:1d:49:5f:25:6e:0b:4f:33:36:ac:8d:d8: 71:d2:3e:0e:52:79:04:6d:92:cd:b0:dc:b6:1b:b0:4f:18:01: 2d:9c:20:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZKr2NyHLFyNUfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NzczMGY3MTctOTU3OS00MmFiLTkzN2EtY2JmYzE0MmNhZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57jcBHdsgIKbhnnsVrmuJKxk4SWfxs/hS6+5 eezdoJlfqDBwQCqEeXp3Gu+3Lrh6Qg/BHZhCba7G3P/cB6svW9Q/OuWCJzRLKWqt hoVW/rLf9UfIE48mMLGGuruT5Q/zvJNK+fKSKL3UnLkbzL1Q1GMwlNnTp6CD2KjR WmdduxR/P48teAu+BO7SFU7UsIUAcTGf1NBWKYMCt4tcEfVT1pLnFXCwzNaKN5pI 7brchD2TAMNF7aipDBiIoBxVyT26S0FVNPjPmi59EVjS/4FYMPYXjXAldVyOYb2V t5gAfsfAgIpihFrq80TZbN/2cLKNsqGqqO75p3d1LhaKpcyg+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBUkkG/RrMe/FFOLuEau2CNhVZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I1YjhlMTYtMGJlZC0z NmJkLTkwYzctNDM0ZTg0OGUyMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJMZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb9ZQ/wNU3XggKDIQuWv3riDb6KFzS5qOTXJMZp74DWspbQSswAbKGV UwL8rlSKcYXqTXr9Hq6MnNOkWm8dckBIWHJVIkP0p/tavWdb8W6Kii6UNFM7b+rY Eafdbb+ttRVOR642tB4CVpvbR7b8QZt3pbXWhsPzpcZ5gQotErY+YMseShQaffAN T4jztctJLH6ZFovg6xkoAVcVdB2hcqUTgUpajN3UypeTyj6/r/AwXhiEm15r3Bu+ u6ELyI2eRf7omOznJlCzMW3aJPMWm8a6y8EbcDRz6Fp6eHnRjB1JXyVuC08zNqyN 2HHSPg5SeQRtks2w3LYbsE8YAS2cIEQ= -----END CERTIFICATE-----Generated at Mon May 4 22:37:07 2026 by rpki-client