$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23029e7e-de59-35b5-92de-7d54a7646f9b.roa File: 23029e7e-de59-35b5-92de-7d54a7646f9b.roa (raw, json) Hash identifier: UsVskXZEPcwFTygsL89ie+1J0WFxTGeE+v1HWM+b1uQ= Subject key identifier: A1:16:6A:CE:9B:98:2F:6D:CC:56:B5:2A:4D:CA:FF:A8:62:AA:7E:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E495D2B01B18F043D06D60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23029e7e-de59-35b5-92de-7d54a7646f9b.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.229.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:95:d2:b0:1b:18:f0:43:d0:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=133f4e2f-efca-47fe-afab-5a92c4ec2c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:47:f5:36:ea:e2:76:11:6f:ab:7e:96:8f: da:96:b0:8a:a2:66:7b:4e:0f:b0:f3:d6:3e:b4:b3: 99:1f:db:bb:15:7d:a2:e3:20:05:8c:bf:36:25:99: b6:78:3c:22:23:d6:08:95:7d:7b:6a:2b:e5:5f:11: 3f:23:40:28:38:40:03:2e:ce:d3:dc:58:74:0c:c5: db:0c:ad:35:9e:e2:1e:31:d4:02:5e:eb:06:d7:34: 53:cb:2c:e5:5a:0e:e3:b1:86:1b:b7:ff:31:5f:44: 5a:23:27:13:88:74:a7:48:e4:36:51:0d:7c:0e:e2: 6f:7b:82:97:b9:e0:d0:30:31:fa:31:78:d0:5a:00: a0:05:16:2b:6e:d8:f9:23:d1:50:d8:bd:34:16:1e: a8:03:73:31:e9:9f:41:1b:23:81:b1:72:bf:30:68: c3:38:8b:2a:51:28:7a:51:87:91:76:b7:92:a5:bb: c4:df:e3:a6:de:4a:b1:28:f2:f8:2a:37:60:13:5c: 50:c4:a0:65:eb:37:1b:da:8c:06:70:80:6b:df:79: dc:44:df:33:2d:c4:93:57:6f:e9:e9:3a:5d:4b:26: 16:98:1e:c1:40:51:c2:c7:6e:c3:e5:ac:b2:95:9b: a5:14:ef:db:f8:fe:1b:59:ef:06:52:f1:43:d9:df: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:16:6A:CE:9B:98:2F:6D:CC:56:B5:2A:4D:CA:FF:A8:62:AA:7E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23029e7e-de59-35b5-92de-7d54a7646f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0f:b9:e7:9c:ab:77:a6:ce:c1:d1:96:17:e7:43:e1:6e:6c: c4:21:c4:88:fe:23:23:36:cf:36:8f:ee:8f:6e:0c:53:37:dc: a4:9f:0b:0e:6c:26:8c:a5:07:30:b7:a4:d3:5d:5e:45:2b:9b: 4f:2c:e1:6b:ba:b0:1a:3e:12:6b:61:8d:c5:29:cf:46:67:63: b5:0c:2c:64:1c:f9:b9:ed:72:00:0d:72:d8:a8:10:13:fa:36: 1d:05:8e:cd:ac:a7:bc:da:d0:43:23:d3:91:ee:b7:7b:9f:1b: 51:8b:83:c5:ba:ef:bc:03:5b:6c:ca:40:de:2f:57:77:16:19: 52:72:c7:f4:c7:84:6b:f6:86:1d:4d:75:24:36:51:64:d0:db: 9a:d5:38:47:dc:ab:31:60:cd:e8:4a:13:5f:2c:ab:4b:37:7f: 7a:54:6f:e3:b4:ba:5e:7d:84:d6:bc:43:fa:07:3f:cd:9c:b5: c7:ec:20:fc:5c:ab:b7:ff:e9:4d:2c:15:46:f2:9a:f7:eb:96: 85:5a:e1:c4:3a:91:04:fa:2d:45:d1:27:9a:40:92:dc:70:ef: 82:96:5e:87:29:a7:b0:d4:fe:58:52:73:0d:f7:7d:ad:b5:b2: e4:d4:44:f8:39:64:b8:53:6f:9d:4c:cd:a5:5b:66:02:1d:bd: 5e:82:2f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5JXSsBsY8EPQbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MTMzZjRlMmYtZWZjYS00N2ZlLWFmYWItNWE5MmM0ZWMyYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI9H9Tbq4nYRb6t+lo/alrCKomZ7Tg+w89Y+ tLOZH9u7FX2i4yAFjL82JZm2eDwiI9YIlX17aivlXxE/I0AoOEADLs7T3Fh0DMXb DK01nuIeMdQCXusG1zRTyyzlWg7jsYYbt/8xX0RaIycTiHSnSOQ2UQ18DuJve4KX ueDQMDH6MXjQWgCgBRYrbtj5I9FQ2L00Fh6oA3Mx6Z9BGyOBsXK/MGjDOIsqUSh6 UYeRdreSpbvE3+Om3kqxKPL4KjdgE1xQxKBl6zcb2owGcIBr33ncRN8zLcSTV2/p 6TpdSyYWmB7BQFHCx27D5ayylZulFO/b+P4bWe8GUvFD2d8HiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEWas6bmC9tzFa1Kk3K/6hiqn7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMwMjllN2UtZGU1OS0z NWI1LTkyZGUtN2Q1NGE3NjQ2ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwPueecq3emzsHRlhfnQ+FubMQhxIj+IyM2zzaP7o9uDFM33KSfCw5s JoylBzC3pNNdXkUrm08s4Wu6sBo+EmthjcUpz0ZnY7UMLGQc+bntcgANctioEBP6 Nh0Fjs2sp7za0EMj05Hut3ufG1GLg8W677wDW2zKQN4vV3cWGVJyx/THhGv2hh1N dSQ2UWTQ25rVOEfcqzFgzehKE18sq0s3f3pUb+O0ul59hNa8Q/oHP82ctcfsIPxc q7f/6U0sFUbymvfrloVa4cQ6kQT6LUXRJ5pAktxw74KWXocpp7DU/lhScw33fa21 suTURPg5ZLhTb51MzaVbZgIdvV6CL2Q= -----END CERTIFICATE-----Generated at Sat Jun 13 08:56:44 2026 by rpki-client