$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171ac25a-9291-37d8-8d12-0ca4d13684ee.roa File: 171ac25a-9291-37d8-8d12-0ca4d13684ee.roa (raw, json) Hash identifier: kqe5dYxIJl8D80zEb11olj9WZNp8X6a12Tt3c4EXjlk= Subject key identifier: 52:84:31:E6:F8:45:88:23:2E:9A:74:90:5A:C5:54:43:03:71:C8:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E4650EA15E0FC2F107B588 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171ac25a-9291-37d8-8d12-0ca4d13684ee.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.107.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:65:0e:a1:5e:0f:c2:f1:07:b5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=65d71c4f-6c72-431a-8112-e2b2e70f2c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:cd:4f:b2:ff:15:ae:0b:f0:7e:ec:84:99: 5a:d6:8b:b8:e0:f1:ed:ff:4a:99:c8:6e:84:64:05: 03:0e:6d:1d:3e:cf:f1:d4:19:df:4c:9e:0d:60:31: ab:c8:c2:62:62:de:80:93:34:f4:47:36:9f:0f:f1: 0f:05:99:5d:b1:86:c8:f8:c9:a6:00:0a:9e:08:0d: eb:13:ce:62:e9:17:39:72:d8:93:75:0f:51:8f:ec: 3e:78:9f:2d:a7:1a:88:05:36:73:7c:51:0e:54:d7: 74:da:27:a2:ce:fa:a0:64:8e:2a:a4:48:44:46:c9: c4:35:d1:f8:fd:9e:54:4c:bf:73:d8:df:29:e2:3b: 72:cd:dc:56:f5:36:94:4f:04:fc:8d:1e:19:3a:f0: 1c:4d:86:aa:32:f6:d1:25:9e:b4:50:75:1f:15:6d: 19:62:b7:d2:cc:14:2f:0e:4f:2b:33:c4:b2:41:7c: 3c:40:84:65:aa:d7:3c:2e:40:24:07:f7:4e:ce:e6: 7c:b6:46:d9:5c:30:21:78:86:29:71:5d:a3:ee:44: 9f:dc:3c:23:4f:df:2b:53:5e:13:f4:00:f6:b9:83: 9f:be:e9:b5:6d:29:5f:ba:dc:4e:27:98:33:01:89: 80:12:d5:28:ff:78:ec:26:88:aa:9b:35:0b:58:1e: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:31:E6:F8:45:88:23:2E:9A:74:90:5A:C5:54:43:03:71:C8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171ac25a-9291-37d8-8d12-0ca4d13684ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:20:26:fa:a5:75:a1:76:82:30:a5:c8:3b:7c:28:15:cb:be: e4:37:f5:4e:70:87:90:cf:2f:87:a4:00:b0:fa:fd:fe:cd:ee: 69:a5:5c:1c:69:4f:79:b9:a5:5e:23:98:d6:1d:c7:3d:83:a7: 87:17:17:84:c9:12:a6:03:0c:58:5b:ed:2d:c7:7b:b0:07:e6: ac:4d:9d:51:0c:e7:60:a1:5d:ef:44:80:58:dd:ed:d8:71:54: 85:a9:cd:c7:a9:b8:c0:71:38:2b:59:06:5e:6f:86:0b:da:41: ea:5a:c4:71:1f:bc:2a:1d:e3:2d:62:96:9d:2f:4d:c9:8b:29: 78:4a:a9:ae:43:5c:f5:e8:7b:47:94:3e:f3:16:30:f7:e0:8d: 01:1c:b4:a2:07:e5:c3:c2:c9:5f:6d:26:c4:5b:74:58:46:c0: bf:2e:21:77:eb:28:65:f6:8d:26:4f:1e:01:ae:ef:25:96:01: 3e:a8:ab:ee:be:15:31:b8:9b:37:ab:36:20:73:c9:3c:51:56: 8a:ee:5e:e4:6c:38:98:16:43:1f:8b:e4:51:9a:21:e1:14:d3: d7:37:76:e9:8b:0d:f5:6a:43:a0:23:c4:47:74:89:a8:70:b3: 2b:53:13:17:94:f7:a5:2d:54:e1:b5:6f:5b:18:5c:a7:07:b5: 57:44:da:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5GUOoV4PwvEHtYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NjVkNzFjNGYtNmM3Mi00MzFhLTgxMTItZTJiMmU3MGYyYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NrNT7L/Fa4L8H7shJla1ou44PHt/0qZyG6E ZAUDDm0dPs/x1BnfTJ4NYDGryMJiYt6AkzT0RzafD/EPBZldsYbI+MmmAAqeCA3r E85i6Rc5ctiTdQ9Rj+w+eJ8tpxqIBTZzfFEOVNd02ieizvqgZI4qpEhERsnENdH4 /Z5UTL9z2N8p4jtyzdxW9TaUTwT8jR4ZOvAcTYaqMvbRJZ60UHUfFW0ZYrfSzBQv Dk8rM8SyQXw8QIRlqtc8LkAkB/dOzuZ8tkbZXDAheIYpcV2j7kSf3DwjT98rU14T 9AD2uYOfvum1bSlfutxOJ5gzAYmAEtUo/3jsJoiqmzULWB5rOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKEMeb4RYgjLpp0kFrFVEMDcch0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcxYWMyNWEtOTI5MS0z N2Q4LThkMTItMGNhNGQxMzY4NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkgJvqldaF2gjClyDt8KBXLvuQ39U5wh5DPL4ekALD6/f7N7mmlXBxp T3m5pV4jmNYdxz2Dp4cXF4TJEqYDDFhb7S3He7AH5qxNnVEM52ChXe9EgFjd7dhx VIWpzcepuMBxOCtZBl5vhgvaQepaxHEfvCod4y1ilp0vTcmLKXhKqa5DXPXoe0eU PvMWMPfgjQEctKIH5cPCyV9tJsRbdFhGwL8uIXfrKGX2jSZPHgGu7yWWAT6oq+6+ FTG4mzerNiBzyTxRVoruXuRsOJgWQx+L5FGaIeEU09c3dumLDfVqQ6AjxEd0iahw sytTExeU96UtVOG1b1sYXKcHtVdE2kQ= -----END CERTIFICATE-----Generated at Sat Jun 13 16:33:23 2026 by rpki-client