$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a52b324-d139-3a96-afe6-e52441763260.roa File: 4a52b324-d139-3a96-afe6-e52441763260.roa (raw, json) Hash identifier: gSDDQn4urW63WDq2bZL5pJ5uM1J8EA4TQgqrJ3hJxb8= Subject key identifier: A4:E5:30:47:A4:B1:81:9E:B0:11:C4:5B:90:4E:E3:12:1E:E4:1B:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E477676E8EB34884EBB280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a52b324-d139-3a96-afe6-e52441763260.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.7.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:77:67:6e:8e:b3:48:84:eb:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=6e1b687b-1fd1-4d24-b673-5f5bfb8c0275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:e1:3a:e2:27:76:dd:48:56:09:e1:b1:7c: fb:88:51:e8:43:af:83:2f:37:44:8b:84:ed:16:65: 64:15:66:80:4e:9d:00:10:dc:23:87:ee:0f:85:3b: 14:22:86:8e:a6:59:a1:1c:7e:27:66:03:7d:d6:a1: ef:10:da:e2:f4:c7:4a:2e:ec:43:b2:86:d5:dc:cd: e9:35:ad:89:6d:5d:ca:94:5a:20:8b:35:1c:94:35: ae:3a:b2:35:68:a9:88:21:72:e9:84:18:07:d1:7d: 83:67:b1:55:ff:f8:68:11:9f:9d:93:55:a1:ac:c8: d0:b8:28:2b:ab:09:ac:d7:30:fc:2c:ed:8f:d9:78: 62:ad:97:71:66:d3:d8:50:69:e4:14:85:d9:52:73: e2:96:72:04:93:47:e2:57:64:6b:c2:a0:46:0c:d3: 77:b7:ea:f0:ba:c2:0b:cf:1f:66:1b:41:98:88:51: 3e:b2:f3:d8:15:fe:cf:0b:ce:fa:f2:46:73:f3:14: 7e:5b:fd:40:d1:d6:44:4d:45:f1:e0:0c:b2:ae:ad: 26:3e:69:47:d0:e5:05:33:96:e5:8b:aa:6b:1b:9d: ab:9c:e2:41:f1:75:f3:c7:5b:b2:b0:7f:19:76:11: ff:43:99:c5:de:1c:a4:2b:ef:b9:7c:24:50:59:0b: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E5:30:47:A4:B1:81:9E:B0:11:C4:5B:90:4E:E3:12:1E:E4:1B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a52b324-d139-3a96-afe6-e52441763260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7a:6a:b3:00:e0:a3:55:42:3e:e6:f9:86:c3:f5:17:93:05: 8d:6e:f8:a9:ee:67:3d:36:03:ae:d6:a9:ad:68:c9:14:a9:47: 42:e4:56:ee:ef:c5:1c:a1:e3:63:dc:1e:77:71:45:4b:b9:66: 1c:0c:6b:8c:4b:23:b4:cf:8c:a5:41:c9:56:4c:0a:59:99:8c: d9:2a:7a:e4:69:8e:e7:e3:22:85:03:bf:14:12:b4:23:38:d4: f6:ed:91:48:a7:80:b0:2f:f9:51:a4:83:70:5b:79:91:09:82: bc:44:6c:3e:ae:2e:8a:e8:03:85:86:7a:08:80:a0:3a:e4:8d: 92:15:d2:f5:1b:25:f7:db:bb:63:f3:a7:84:c8:ae:c0:d0:bc: 21:9e:f4:8a:6e:dd:08:cb:9f:f9:6f:19:65:12:67:17:ca:84: f4:25:23:28:9f:a9:5c:40:ea:28:6a:77:74:4a:74:33:ae:ce: 17:27:55:f5:58:56:91:68:e6:83:8e:c9:49:cc:fb:c3:17:be: 28:98:cb:da:36:e1:fd:01:e4:1e:c7:45:23:6d:b0:61:1a:2e: c2:fd:64:80:bc:96:57:a8:85:f5:e5:5a:78:74:2e:03:57:74: 82:6f:fb:ef:0c:12:8a:38:23:3f:61:07:fe:57:6b:ff:9e:b3: 65:75:22:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5Hdnbo6zSITrsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NmUxYjY4N2ItMWZkMS00ZDI0LWI2NzMtNWY1YmZiOGMwMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgvhOuIndt1IVgnhsXz7iFHoQ6+DLzdEi4Tt FmVkFWaATp0AENwjh+4PhTsUIoaOplmhHH4nZgN91qHvENri9MdKLuxDsobV3M3p Na2JbV3KlFogizUclDWuOrI1aKmIIXLphBgH0X2DZ7FV//hoEZ+dk1WhrMjQuCgr qwms1zD8LO2P2XhirZdxZtPYUGnkFIXZUnPilnIEk0fiV2RrwqBGDNN3t+rwusIL zx9mG0GYiFE+svPYFf7PC8768kZz8xR+W/1A0dZETUXx4Ayyrq0mPmlH0OUFM5bl i6prG52rnOJB8XXzx1uysH8ZdhH/Q5nF3hykK++5fCRQWQulFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTlMEeksYGesBHEW5BO4xIe5BtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGE1MmIzMjQtZDEzOS0z YTk2LWFmZTYtZTUyNDQxNzYzMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB6arMA4KNVQj7m+YbD9ReTBY1u+KnuZz02A67Wqa1oyRSpR0LkVu7v xRyh42PcHndxRUu5ZhwMa4xLI7TPjKVByVZMClmZjNkqeuRpjufjIoUDvxQStCM4 1PbtkUingLAv+VGkg3BbeZEJgrxEbD6uLoroA4WGegiAoDrkjZIV0vUbJffbu2Pz p4TIrsDQvCGe9Ipu3QjLn/lvGWUSZxfKhPQlIyifqVxA6ihqd3RKdDOuzhcnVfVY VpFo5oOOyUnM+8MXviiYy9o24f0B5B7HRSNtsGEaLsL9ZIC8lleohfXlWnh0LgNX dIJv++8MEoo4Iz9hB/5Xa/+es2V1Ivs= -----END CERTIFICATE-----Generated at Sat Jun 13 10:11:01 2026 by rpki-client