$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cef4f778-e1a3-377a-adcf-2947f257161d.roa File: cef4f778-e1a3-377a-adcf-2947f257161d.roa (raw, json) Hash identifier: KP90KM5oIkbwFC4YjurySxUBKWNxcRSKVRhqCwYQ948= Subject key identifier: 6A:8D:72:4C:8D:E4:47:3D:A6:03:4D:9B:49:6C:CB:50:8A:52:5D:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D6EDA6DA184B369B46BD8A920 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cef4f778-e1a3-377a-adcf-2947f257161d.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 68.225.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:6d:a1:84:b3:69:b4:6b:d8:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=ab3a14e4-4830-48fb-a0f9-b4f4d8e6297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:e2:33:d0:39:da:30:dd:84:25:36:b8:92: 94:dc:da:87:4d:b7:d1:05:d7:24:d0:d3:d5:7d:61: ba:8e:58:a3:00:d5:cb:6e:ca:98:bd:ed:00:30:59: b4:bd:04:49:c8:29:40:e1:ff:19:7f:a9:c2:be:60: b0:fc:2a:bc:56:55:a6:80:2d:31:1e:a1:39:3f:e9: 7a:e3:37:0f:c0:82:b9:96:5f:52:6b:f5:ff:e0:f8: 3f:d4:69:87:3d:f3:09:80:41:49:03:63:2b:fb:9c: 18:52:ab:90:f5:cf:0e:a4:f9:a4:4f:34:a6:29:1d: 35:b8:5f:0a:bd:ad:4c:ce:b6:d8:2b:b4:00:88:42: 3d:c3:38:17:fc:2b:44:b1:0c:86:af:51:cf:e5:5b: 63:07:33:a8:a6:e3:4f:da:e1:a9:cb:16:5d:30:c8: ee:dc:63:06:ac:05:2c:85:17:2a:d8:2a:18:97:0d: 71:96:03:f0:82:51:fc:3d:4d:85:14:79:b6:a9:0c: 71:e7:a0:34:91:8c:93:72:ad:a2:53:b3:33:5e:bb: 21:4d:4d:b1:e0:14:c1:22:7f:00:5a:fa:da:81:93: 24:34:e7:8e:29:02:99:97:87:a3:77:ca:c7:19:46: 3a:2f:e1:9a:9d:88:2a:b0:74:f0:a5:bf:08:9b:c7: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:72:4C:8D:E4:47:3D:A6:03:4D:9B:49:6C:CB:50:8A:52:5D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cef4f778-e1a3-377a-adcf-2947f257161d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d1:c5:f6:09:eb:21:76:07:a7:e6:50:db:5f:b3:63:d5:d5: a3:90:a0:b2:15:a2:ae:a6:88:73:d1:b9:3a:70:c3:7c:7c:37: 4c:3d:63:b8:c2:16:a5:af:e4:5c:90:23:28:1e:9f:da:71:fa: 12:ed:b0:ce:74:5f:ad:a6:2e:39:c8:52:da:e9:e9:90:8b:8c: 75:29:c2:88:69:9b:be:e2:b2:68:11:08:c1:2f:c6:9a:09:99: 60:ad:a7:39:da:70:71:d7:f9:9a:3f:41:bb:33:71:35:de:bb: 60:33:1c:e5:4d:1e:b4:35:04:dd:56:97:66:23:59:b7:3a:ed: 32:3b:e2:64:ea:07:31:65:9c:b7:42:9c:5f:ca:b8:39:87:20: 1a:76:da:d6:11:93:83:f7:c7:e0:a4:b7:e1:b8:f9:d9:a8:63: 5c:c6:e7:94:ca:f5:9e:0b:4f:3a:8a:20:b8:53:0a:5f:ad:5b: f5:e3:57:31:d3:4f:2f:be:a7:b3:f4:43:b2:ad:c3:de:9c:d6: 5a:cd:b9:db:46:63:6b:e0:13:26:89:f4:5f:b3:4d:7c:59:b6: 44:b9:6d:a9:d1:f1:66:81:34:eb:58:cc:f5:22:a7:fc:0d:1b: d8:ef:28:62:85:d9:a1:df:e8:d9:8a:83:da:ae:83:52:29:9b: 2b:12:04:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2m2hhLNptGvYqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YWIzYTE0ZTQtNDgzMC00OGZiLWEwZjktYjRmNGQ4ZTYyOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSDiM9A52jDdhCU2uJKU3NqHTbfRBdck0NPV fWG6jlijANXLbsqYve0AMFm0vQRJyClA4f8Zf6nCvmCw/Cq8VlWmgC0xHqE5P+l6 4zcPwIK5ll9Sa/X/4Pg/1GmHPfMJgEFJA2Mr+5wYUquQ9c8OpPmkTzSmKR01uF8K va1MzrbYK7QAiEI9wzgX/CtEsQyGr1HP5VtjBzOopuNP2uGpyxZdMMju3GMGrAUs hRcq2CoYlw1xlgPwglH8PU2FFHm2qQxx56A0kYyTcq2iU7MzXrshTU2x4BTBIn8A WvragZMkNOeOKQKZl4ejd8rHGUY6L+GanYgqsHTwpb8Im8cvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqNckyN5Ec9pgNNm0lsy1CKUl2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2VmNGY3NzgtZTFhMy0z NzdhLWFkY2YtMjk0N2YyNTcxNjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3RxfYJ6yF2B6fmUNtfs2PV1aOQoLIVoq6miHPRuTpww3x8N0w9Y7jC FqWv5FyQIygen9px+hLtsM50X62mLjnIUtrp6ZCLjHUpwohpm77ismgRCMEvxpoJ mWCtpznacHHX+Zo/QbszcTXeu2AzHOVNHrQ1BN1Wl2YjWbc67TI74mTqBzFlnLdC nF/KuDmHIBp22tYRk4P3x+Ckt+G4+dmoY1zG55TK9Z4LTzqKILhTCl+tW/XjVzHT Ty++p7P0Q7Ktw96c1lrNudtGY2vgEyaJ9F+zTXxZtkS5banR8WaBNOtYzPUip/wN G9jvKGKF2aHf6NmKg9qug1IpmysSBAY= -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:09 2026 by rpki-client