$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3930adbc-8c7b-31db-b274-add7d1a5ee56.roa File: 3930adbc-8c7b-31db-b274-add7d1a5ee56.roa (raw, json) Hash identifier: NsTC3FLPH7hDascKt0HJ5v23qEnWd006Ls7gF/XItSY= Subject key identifier: 23:F7:E3:6B:A7:A7:58:BA:3A:5A:59:06:B0:92:92:93:04:29:58:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E438DB5EA7B9D83D4649C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3930adbc-8c7b-31db-b274-add7d1a5ee56.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.8.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:38:db:5e:a7:b9:d8:3d:46:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=43475ca6-5b95-45fd-9a61-e0dd04cae7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:ea:4c:8e:ff:96:b3:61:e4:dc:c2:e9:ee: 2e:a1:f0:9f:5c:c6:5f:61:3e:9e:89:51:90:0d:35: 58:51:b5:5e:4f:35:8a:df:9a:d8:60:5e:c0:0b:c8: ae:7a:1c:af:10:22:a5:b7:e4:b3:a4:16:21:d4:d7: 7c:f8:3d:8b:74:46:90:43:5c:37:79:9a:9a:c0:6a: 49:b6:a1:3e:9c:a6:91:7c:dd:26:d9:6c:18:eb:f3: 01:eb:15:01:87:f1:04:d2:b2:4e:18:1e:8d:0a:8d: cb:98:ff:d8:2a:a1:fd:42:ac:7a:f8:d4:82:a2:95: c7:b9:23:42:a3:83:4a:bd:0e:5f:61:48:19:36:2e: 3a:39:a0:df:5c:2c:2c:98:67:93:1f:d1:03:6a:86: f0:39:6f:b2:6a:d9:17:4b:55:b0:dd:4f:7b:26:95: aa:cf:90:ad:ec:79:06:59:40:81:50:6c:55:54:8b: 8c:4e:80:ca:cd:0d:71:f7:b1:0a:89:3f:d4:7c:ee: 5b:11:78:65:20:e9:b1:a8:8d:cb:35:d3:bb:ed:68: c9:13:82:97:de:70:ef:06:c0:0e:84:4a:b1:01:28: 3d:3a:64:57:0a:ea:3d:dc:02:69:1e:d2:bf:4a:1f: c0:aa:a7:e2:e1:68:25:bf:7e:d6:ee:f7:17:b7:1f: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:E3:6B:A7:A7:58:BA:3A:5A:59:06:B0:92:92:93:04:29:58:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3930adbc-8c7b-31db-b274-add7d1a5ee56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:19:91:6f:22:ba:1b:b6:b3:be:92:62:59:9e:55:34:ca:82: cb:0b:de:99:66:d2:85:99:95:f8:68:cf:9a:03:97:6e:90:c2: ce:ea:38:46:9c:56:28:3d:38:a5:00:28:76:26:62:cd:5f:ed: a1:b1:8b:ac:05:38:fc:9e:a1:37:5c:32:f0:0e:66:09:fc:ee: 70:15:8c:ca:a6:5e:e7:ce:c5:37:73:9a:1f:17:28:9a:a7:ef: 97:1d:7f:ac:0a:81:04:3b:d0:61:71:0b:9d:d9:be:7e:5e:b3: ab:e8:35:82:14:1b:97:d4:16:80:c3:a9:90:ed:0b:67:af:b8: 15:38:fc:50:bd:be:b0:d3:8e:37:2d:d1:72:55:d3:44:e9:37: 16:f3:d0:23:f9:05:ed:60:2a:3a:86:fd:92:94:aa:0a:95:71: eb:be:a6:75:16:64:25:f7:97:c4:f7:80:7f:f3:0e:24:b5:6f: 8f:18:c2:1f:cf:3a:16:b3:bd:19:9d:f0:bd:7a:4f:2e:e8:31: 17:2d:d8:4d:d1:5a:6d:5b:54:7c:a3:dc:35:4e:0c:79:29:27: e8:28:1e:f8:78:0a:fc:d8:85:ce:cb:9e:60:5c:ea:fb:27:6e: 68:84:40:44:e3:1c:2b:52:3c:7b:eb:a8:94:48:93:44:86:6e: 5d:9f:7c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5DjbXqe52D1GScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NDM0NzVjYTYtNWI5NS00NWZkLTlhNjEtZTBkZDA0Y2FlN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXTqTI7/lrNh5NzC6e4uofCfXMZfYT6eiVGQ DTVYUbVeTzWK35rYYF7AC8iuehyvECKlt+SzpBYh1Nd8+D2LdEaQQ1w3eZqawGpJ tqE+nKaRfN0m2WwY6/MB6xUBh/EE0rJOGB6NCo3LmP/YKqH9Qqx6+NSCopXHuSNC o4NKvQ5fYUgZNi46OaDfXCwsmGeTH9EDaobwOW+yatkXS1Ww3U97JpWqz5Ct7HkG WUCBUGxVVIuMToDKzQ1x97EKiT/UfO5bEXhlIOmxqI3LNdO77WjJE4KX3nDvBsAO hEqxASg9OmRXCuo93AJpHtK/Sh/Aqqfi4Wglv37W7vcXtx8mQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP342unp1i6OlpZBrCSkpMEKVhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzkzMGFkYmMtOGM3Yi0z MWRiLWIyNzQtYWRkN2QxYTVlZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0ZkW8iuhu2s76SYlmeVTTKgssL3plm0oWZlfhoz5oDl26Qws7qOEac Vig9OKUAKHYmYs1f7aGxi6wFOPyeoTdcMvAOZgn87nAVjMqmXufOxTdzmh8XKJqn 75cdf6wKgQQ70GFxC53Zvn5es6voNYIUG5fUFoDDqZDtC2evuBU4/FC9vrDTjjct 0XJV00TpNxbz0CP5Be1gKjqG/ZKUqgqVceu+pnUWZCX3l8T3gH/zDiS1b48Ywh/P OhazvRmd8L16Ty7oMRct2E3RWm1bVHyj3DVODHkpJ+goHvh4CvzYhc7LnmBc6vsn bmiEQETjHCtSPHvrqJRIk0SGbl2ffOs= -----END CERTIFICATE-----Generated at Sat Jun 13 18:23:38 2026 by rpki-client