$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40e6259c-3daa-3562-8a47-965ddf6b40da.roa File: 40e6259c-3daa-3562-8a47-965ddf6b40da.roa (raw, json) Hash identifier: irNp6smud8PpssYpapKueMmfllqEg+n84L7wl9moN4U= Subject key identifier: 81:A6:22:46:DE:78:D1:28:4A:73:09:99:D2:4C:8D:D7:DD:96:0F:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E49AC5074A2B4D7C95B540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40e6259c-3daa-3562-8a47-965ddf6b40da.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.6.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:9a:c5:07:4a:2b:4d:7c:95:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=d42554fa-9aab-4eb6-a686-843881d37e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:5c:0d:30:33:3d:d4:d7:4e:7f:d0:7c:9f: 15:a3:67:32:92:a1:9f:42:bb:c1:4e:4b:a9:3d:17: 51:a7:28:1a:78:54:a0:40:47:53:46:fc:b2:0b:8f: 4d:5a:76:13:3f:dc:3b:7b:49:05:5b:df:1e:2f:bd: 3a:a6:9a:d1:6d:f2:cc:35:77:0e:b4:6a:c3:bb:4a: 62:84:d9:72:65:78:8d:ec:4a:a3:6a:0f:7d:52:10: 4d:70:02:43:10:36:e1:d8:d6:53:24:e7:37:eb:f5: a1:11:60:50:6b:21:45:23:1d:5a:6a:d6:19:19:48: 69:b6:18:4a:12:df:bd:04:8c:5e:85:f5:33:f3:c2: 46:9e:46:b2:aa:0d:91:4b:e8:28:f2:9a:10:42:8e: 9b:cf:61:6d:93:ab:9f:b8:fa:5b:6b:69:8e:13:bf: 40:13:99:6b:fb:89:b4:d7:da:de:a7:f5:fa:71:8d: 40:26:38:26:b4:c9:b7:cf:4e:97:19:c4:d8:d2:71: 89:ea:7d:b6:37:72:d2:ca:1e:24:95:96:79:3d:bf: 77:ab:8c:e6:1c:85:18:7a:d8:05:ea:02:13:86:87: 00:55:74:d3:37:dd:24:17:61:5b:34:01:32:d4:b6: ba:e9:5b:1a:69:80:ea:d0:78:31:be:97:66:ae:9c: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A6:22:46:DE:78:D1:28:4A:73:09:99:D2:4C:8D:D7:DD:96:0F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40e6259c-3daa-3562-8a47-965ddf6b40da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e2:9b:7f:e9:cd:82:6d:23:7c:23:b4:c0:03:ed:d0:cb:b9: 90:28:47:fb:74:7f:13:13:ba:3e:58:43:cc:80:63:a0:03:b0: 02:66:d1:2e:03:1b:39:b4:56:98:9f:d4:19:7b:4a:66:e8:a7: 63:d8:1a:cf:7e:13:57:da:c1:5a:0d:8e:ad:a3:a2:40:88:8f: a5:93:0e:ed:66:e5:2f:2f:32:6d:8e:cd:07:c6:90:61:6c:f7: f9:7a:5e:91:a1:5c:4e:5d:62:49:3c:4d:64:e7:93:69:ca:bc: 49:3e:79:ed:a2:a0:a2:59:6d:f2:0c:ad:12:2b:f0:45:b6:76: 72:5e:84:80:57:08:a3:2b:33:dd:0e:e3:7a:32:b3:74:e9:dd: ae:46:86:8e:ff:7f:83:31:74:f7:04:8b:77:47:72:f9:59:f2: 65:f7:ed:90:aa:a3:cb:14:9a:ae:b5:2b:40:d1:c7:bc:37:7c: bc:79:02:fa:58:32:37:0b:8a:17:a9:f3:95:a9:93:6f:e0:cc: 0e:54:cd:f4:97:bc:6a:25:ca:7d:ac:a2:51:7c:25:e2:90:27: 22:a5:5b:54:38:f6:e8:ad:66:72:a4:a2:c4:1a:8d:93:18:49: 86:0e:59:10:d1:a7:21:22:1a:f3:a4:37:84:5d:d7:f1:a5:9f: 33:53:fc:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5JrFB0orTXyVtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk ZDQyNTU0ZmEtOWFhYi00ZWI2LWE2ODYtODQzODgxZDM3ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRBcDTAzPdTXTn/QfJ8Vo2cykqGfQrvBTkup PRdRpygaeFSgQEdTRvyyC49NWnYTP9w7e0kFW98eL706pprRbfLMNXcOtGrDu0pi hNlyZXiN7Eqjag99UhBNcAJDEDbh2NZTJOc36/WhEWBQayFFIx1aatYZGUhpthhK Et+9BIxehfUz88JGnkayqg2RS+go8poQQo6bz2Ftk6ufuPpba2mOE79AE5lr+4m0 19rep/X6cY1AJjgmtMm3z06XGcTY0nGJ6n22N3LSyh4klZZ5Pb93q4zmHIUYetgF 6gIThocAVXTTN90kF2FbNAEy1La66VsaaYDq0Hgxvpdmrpz7zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGmIkbeeNEoSnMJmdJMjdfdlg/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDBlNjI1OWMtM2RhYS0z NTYyLThhNDctOTY1ZGRmNmI0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/im3/pzYJtI3wjtMAD7dDLuZAoR/t0fxMTuj5YQ8yAY6ADsAJm0S4D Gzm0Vpif1Bl7Smbop2PYGs9+E1fawVoNjq2jokCIj6WTDu1m5S8vMm2OzQfGkGFs 9/l6XpGhXE5dYkk8TWTnk2nKvEk+ee2ioKJZbfIMrRIr8EW2dnJehIBXCKMrM90O 43oys3Tp3a5Gho7/f4MxdPcEi3dHcvlZ8mX37ZCqo8sUmq61K0DRx7w3fLx5AvpY MjcLihep85Wpk2/gzA5UzfSXvGolyn2solF8JeKQJyKlW1Q49uitZnKkosQajZMY SYYOWRDRpyEiGvOkN4Rd1/GlnzNT/Fw= -----END CERTIFICATE-----Generated at Sat Jun 13 08:47:02 2026 by rpki-client