$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa File: 2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa (raw, json) Hash identifier: LmrXG1DUBWOCinA9JGeDbgNlGY7h3R6WZkaMwLwTZk8= Subject key identifier: BC:D3:94:A3:AB:1F:11:CB:E8:62:B3:9F:06:3B:82:64:51:96:B9:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E48EBE7A370B009BC42E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.7.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:8e:be:7a:37:0b:00:9b:c4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=6ec86672-3a1c-4753-80f8-a96c9cc32c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:f6:61:91:d6:bd:5f:41:6e:51:cc:21:3e: f0:96:b4:2e:a3:46:0e:07:61:74:b3:6a:8f:b9:9e: 53:fb:e7:ca:36:27:8b:13:82:9c:6a:90:6e:f5:ef: 39:4c:8a:2b:e4:34:93:a5:94:4f:b7:c2:cc:4b:93: 42:be:19:d5:f5:e7:21:2e:9b:bb:3d:2e:e6:e1:60: 34:82:9e:bc:a2:d1:53:c1:0d:11:5a:23:74:cb:a1: 8b:fd:74:45:47:5e:7e:d8:1f:13:61:64:a6:0d:88: 61:27:72:5e:81:5b:fb:c1:c5:34:e2:28:c9:51:34: 64:8b:ec:5f:0c:2e:31:13:cf:10:f1:68:15:ff:6e: 17:62:d0:3f:03:eb:3c:7e:d6:85:f7:5b:b9:06:de: 47:63:81:e0:49:eb:7e:cf:19:63:04:68:2f:40:be: 67:58:b2:5c:36:e8:b2:52:03:a5:69:33:6f:2f:f5: 9a:f2:51:f0:5a:ea:aa:4a:e3:4e:65:a6:0c:73:c4: 42:57:f4:28:f2:45:e3:cb:84:9c:d9:9a:aa:0f:58: 1d:bc:b9:92:78:7b:7a:1c:9e:a4:9b:e1:76:14:4e: 72:e0:02:d0:3a:0c:eb:66:c7:01:3f:b4:80:53:65: 4b:0f:68:00:0d:9b:a5:88:99:5e:3f:14:f0:e6:19: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D3:94:A3:AB:1F:11:CB:E8:62:B3:9F:06:3B:82:64:51:96:B9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0a:4f:d5:62:44:22:4d:8d:04:88:45:33:ea:b0:10:ea:6c: ad:29:14:0b:3d:dd:dc:20:53:d2:49:22:e2:44:9a:e0:67:23: 07:0e:94:12:0c:51:8f:81:cf:ff:f0:af:f5:5c:eb:0d:d8:ca: 26:5c:32:f6:56:86:53:7c:9b:ab:b7:8f:00:da:7e:16:f7:0e: 47:e5:26:6a:fd:6a:23:14:f4:a2:05:93:b6:7c:44:85:0f:d4: 3c:46:09:08:3f:4c:f6:2b:f1:1c:bc:73:b3:50:7f:d9:b4:93: 20:eb:96:63:7c:28:49:db:c5:1a:e6:aa:c3:66:ef:c7:65:19: 36:96:1b:31:76:5e:26:85:57:89:ca:a1:a6:11:a3:87:d2:80: d1:56:e0:13:ee:2c:0c:fa:dd:9f:52:8a:1a:33:5f:a2:b5:fc: d3:07:25:0e:04:94:8c:ec:cc:e6:47:e2:2f:2a:f5:ba:33:91: 03:6c:12:0e:a6:4a:6b:cd:29:83:f1:c8:c8:73:41:6f:41:d9: f0:b0:07:41:1e:7e:79:11:d0:a2:cb:ff:c3:01:6d:f2:ec:6d: d4:27:20:a8:cf:a6:85:62:12:b2:9c:d3:41:65:e9:ce:51:39: 49:60:bc:25:98:d7:04:3c:05:0c:dc:c6:6b:2b:cd:c3:ae:3b: 91:8b:93:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5I6+ejcLAJvELoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NmVjODY2NzItM2ExYy00NzUzLTgwZjgtYTk2YzljYzMyYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4r2YZHWvV9BblHMIT7wlrQuo0YOB2F0s2qP uZ5T++fKNieLE4KcapBu9e85TIor5DSTpZRPt8LMS5NCvhnV9echLpu7PS7m4WA0 gp68otFTwQ0RWiN0y6GL/XRFR15+2B8TYWSmDYhhJ3JegVv7wcU04ijJUTRki+xf DC4xE88Q8WgV/24XYtA/A+s8ftaF91u5Bt5HY4HgSet+zxljBGgvQL5nWLJcNuiy UgOlaTNvL/Wa8lHwWuqqSuNOZaYMc8RCV/Qo8kXjy4Sc2ZqqD1gdvLmSeHt6HJ6k m+F2FE5y4ALQOgzrZscBP7SAU2VLD2gADZuliJlePxTw5hk6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzTlKOrHxHL6GKznwY7gmRRlrldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNlMDFiZmQtOWY5Ny0z YWQwLWFiMjQtYmM2MDEwMGQzYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4KT9ViRCJNjQSIRTPqsBDqbK0pFAs93dwgU9JJIuJEmuBnIwcOlBIM UY+Bz//wr/Vc6w3YyiZcMvZWhlN8m6u3jwDafhb3DkflJmr9aiMU9KIFk7Z8RIUP 1DxGCQg/TPYr8Ry8c7NQf9m0kyDrlmN8KEnbxRrmqsNm78dlGTaWGzF2XiaFV4nK oaYRo4fSgNFW4BPuLAz63Z9SihozX6K1/NMHJQ4ElIzszOZH4i8q9bozkQNsEg6m SmvNKYPxyMhzQW9B2fCwB0EefnkR0KLL/8MBbfLsbdQnIKjPpoViErKc00Fl6c5R OUlgvCWY1wQ8BQzcxmsrzcOuO5GLk60= -----END CERTIFICATE-----Generated at Sat Jun 13 14:52:13 2026 by rpki-client