$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa File: f342d759-5e92-372e-bef5-c4dbf2076730.roa (raw, json) Hash identifier: kyRo6rWWZ82kj81HYXpJE9BwAz6uSGfrfi+yBrabzIs= Subject key identifier: A8:3D:11:E5:9C:7A:CC:8A:03:D4:8C:DB:75:34:DF:58:BD:C0:84:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DAAE040B41685EDD07DBEBBC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 20269 IP address blocks: 68.228.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:40:b4:16:85:ed:d0:7d:be:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=73da53dc-f29c-42e5-a61b-d92a1dafcf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:74:59:0c:b2:32:13:82:88:b4:5b:8c:65: 9e:07:5d:e1:95:cc:e2:0a:4d:c7:3c:c4:c1:1d:eb: 5f:4d:84:8e:a7:ed:0f:c3:7e:ba:a8:80:f3:b6:90: eb:f6:c8:44:1b:7b:0a:ab:55:53:1e:27:c1:b5:32: 83:7c:51:70:5d:4e:1d:54:98:19:e9:04:22:ad:a9: c2:db:60:2c:98:b7:87:34:be:d1:0b:b1:e9:e0:bd: 06:82:55:e8:dd:b2:91:c4:36:47:bc:56:38:c4:33: e4:81:b8:09:6c:af:45:79:59:1c:06:0a:5b:35:ee: 88:a1:1f:b4:3b:21:87:f7:d1:39:5e:72:70:b7:79: dc:b1:cb:88:2b:2b:61:42:cd:9a:c3:04:3b:36:15: df:3a:c9:db:62:6a:2d:17:a1:a9:27:83:94:41:42: 61:f0:86:f5:59:08:04:2e:b5:d0:59:f0:a2:03:15: 2d:41:47:7e:d9:f4:af:01:bc:1e:6d:2e:1e:f9:22: 48:0c:ec:ed:60:0f:03:af:9f:40:d2:46:86:54:4f: c9:0b:55:a6:df:e9:f6:9e:9f:ee:9c:aa:66:50:e0: 7e:06:4d:77:8b:ca:7f:da:e4:a6:6e:f8:5d:6e:ef: c4:e2:09:7b:92:e5:f6:f2:0f:ff:58:14:d0:ee:89: 22:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3D:11:E5:9C:7A:CC:8A:03:D4:8C:DB:75:34:DF:58:BD:C0:84:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:12:9d:cb:fe:1b:0d:52:c9:88:11:c8:67:06:a9:66:ec:35: 7a:cb:5a:34:20:79:23:f6:0c:b6:20:df:bc:7a:63:3c:7c:cc: 07:93:a3:83:07:c8:15:26:fa:f4:1e:a1:fe:b6:f6:b0:16:61: ee:31:19:8c:26:e2:26:e1:ff:e0:4c:c1:0f:04:d0:08:86:0d: 8b:df:59:34:d4:26:50:cd:9e:ac:72:5a:b3:0d:90:a3:bf:22: 61:0a:72:d5:51:6e:b3:4f:d9:2f:1e:b0:c8:53:4d:a4:5d:91: 21:7d:f2:d0:c7:88:2d:3b:fc:25:11:c5:f5:98:a3:4f:35:8a: 20:01:f4:ac:20:66:b2:8f:0e:00:f1:23:46:07:18:06:38:3c: e9:e0:5e:0b:a7:1d:6a:a1:2a:d7:0d:b3:d2:b5:1f:6b:1c:f5: 89:87:97:c2:3a:b3:51:27:af:17:15:4a:74:8e:7d:e6:c0:3b: 0f:12:03:1a:1c:d8:03:cc:37:a6:14:2c:83:7e:6b:83:04:f8: 1e:2b:30:1b:58:69:ed:d2:43:bf:02:c3:7f:96:09:aa:09:8d: ad:3f:89:95:9e:b6:1c:9a:1d:fe:c3:c4:4c:11:18:39:2d:71: f5:f8:14:2a:c8:ab:ba:3d:23:b7:aa:8f:2b:7b:60:63:6d:bb: cc:a9:7f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4EC0FoXt0H2+u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NzNkYTUzZGMtZjI5Yy00MmU1LWE2MWItZDkyYTFkYWZjZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVp0WQyyMhOCiLRbjGWeB13hlcziCk3HPMTB HetfTYSOp+0Pw366qIDztpDr9shEG3sKq1VTHifBtTKDfFFwXU4dVJgZ6QQiranC 22AsmLeHNL7RC7Hp4L0GglXo3bKRxDZHvFY4xDPkgbgJbK9FeVkcBgpbNe6IoR+0 OyGH99E5XnJwt3ncscuIKythQs2awwQ7NhXfOsnbYmotF6GpJ4OUQUJh8Ib1WQgE LrXQWfCiAxUtQUd+2fSvAbwebS4e+SJIDOztYA8Dr59A0kaGVE/JC1Wm3+n2np/u nKpmUOB+Bk13i8p/2uSmbvhdbu/E4gl7kuX28g//WBTQ7okirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg9EeWcesyKA9SM23U031i9wIQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjM0MmQ3NTktNWU5Mi0z NzJlLWJlZjUtYzRkYmYyMDc2NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARORvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABASncv+Gw1SyYgRyGcGqWbsNXrLWjQgeSP2DLYg37x6Yzx8zAeTo4MH yBUm+vQeof629rAWYe4xGYwm4ibh/+BMwQ8E0AiGDYvfWTTUJlDNnqxyWrMNkKO/ ImEKctVRbrNP2S8esMhTTaRdkSF98tDHiC07/CURxfWYo081iiAB9KwgZrKPDgDx I0YHGAY4POngXgunHWqhKtcNs9K1H2sc9YmHl8I6s1EnrxcVSnSOfebAOw8SAxoc 2APMN6YULIN+a4ME+B4rMBtYae3SQ78Cw3+WCaoJja0/iZWethyaHf7DxEwRGDkt cfX4FCrIq7o9I7eqjyt7YGNtu8ypf5Y= -----END CERTIFICATE-----Generated at Tue May 5 00:11:51 2026 by rpki-client