$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fb17a60-cb64-3953-bc1d-f12340efd979.roa File: 7fb17a60-cb64-3953-bc1d-f12340efd979.roa (raw, json) Hash identifier: bBqZg70H47tRxtMAcbtZbbjrfbe0lZaw7k0HY8jZ/ho= Subject key identifier: 2C:DE:B3:90:89:E2:F5:4C:ED:63:5E:17:E8:2E:14:08:83:97:07:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E469ABDE8356BDF78CF6B8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fb17a60-cb64-3953-bc1d-f12340efd979.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.1.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:69:ab:de:83:56:bd:f7:8c:f6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=1afb289a-6d76-4003-ae58-448f7444bf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:0f:2b:35:f7:24:c5:76:c5:86:12:32:64: 28:b1:8f:24:5f:fb:39:f9:64:0f:8f:67:5c:41:66: 94:2d:4a:7f:2c:30:d9:6b:fc:04:7a:4e:fa:51:e1: 64:d4:36:fd:d6:84:9a:ef:7c:b6:88:f6:c4:3f:ee: 0b:1c:3f:7c:77:a5:d3:e2:de:c8:82:24:ce:2c:1b: d9:0c:6c:af:56:ca:26:77:39:02:54:c5:54:db:5f: 2f:1a:ac:4f:7e:f0:b5:22:82:70:f4:98:9d:cd:86: 31:de:4e:12:62:de:ff:a3:68:3a:60:11:ba:f3:ac: fd:ba:9d:61:49:e4:be:20:a6:bb:d9:7d:01:5d:52: 3e:8d:49:9e:2a:c3:a0:50:0c:e7:1e:9c:e7:f2:74: 8d:4d:5d:fa:3a:5b:17:c2:1f:7a:20:0d:0d:35:18: d4:7b:0c:53:7e:a5:fe:30:5c:27:ed:c8:65:aa:7a: 87:a9:4c:91:a5:0f:75:46:c3:0e:5d:5b:50:de:28: 8b:c7:e0:63:fd:2f:1a:58:3c:15:17:bb:f6:c0:71: 55:69:3e:28:81:aa:e0:f2:a7:e7:ba:99:26:39:9f: a2:ad:7c:a1:6c:b2:f6:59:73:3c:26:3e:16:f3:7d: 68:90:09:58:67:07:8c:e5:bf:12:79:dd:49:14:3a: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:B3:90:89:E2:F5:4C:ED:63:5E:17:E8:2E:14:08:83:97:07:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fb17a60-cb64-3953-bc1d-f12340efd979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6e:b0:11:c0:a7:94:64:bf:0f:44:b4:67:5f:9c:f0:0f:7b: d4:5d:0b:0a:61:d5:42:8b:4e:67:43:6d:b3:65:c8:a3:85:0f: cd:2e:11:fb:f9:d2:ba:c4:ee:25:d2:e3:3c:19:99:25:4c:54: 52:17:0a:74:46:ce:59:51:9d:0b:f1:90:09:e7:36:aa:bd:f6: c6:39:cb:ee:af:35:69:ce:71:58:4c:f4:e7:e2:e8:54:eb:d3: 52:ec:e6:1e:2b:5f:4d:ce:79:c3:8e:cc:1a:b8:2d:21:3b:3e: 1d:49:0b:96:d1:4d:f5:61:6f:2e:d7:23:5d:96:e3:85:1f:d1: 23:4b:68:69:da:93:55:d6:1e:de:b2:8d:47:12:66:72:fd:ec: 9d:ed:dc:fb:39:bf:99:66:24:e5:fe:51:18:df:a5:1b:d7:8b: fb:d4:4e:89:f4:3a:5c:24:ef:51:b4:cd:3b:8f:9f:a6:fb:73: b1:d7:65:75:c8:b7:3e:a7:95:cc:ab:0b:ab:14:21:25:3c:b9: 56:5a:d3:57:7b:b3:59:61:64:b7:db:77:b7:99:bc:34:86:75: 31:f5:e7:50:60:70:6f:37:2b:fe:5f:f2:3d:b8:eb:8f:b5:c8: 6e:83:49:91:00:73:a6:82:c9:fb:82:64:52:83:cd:43:63:bc: fd:b9:df:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5Gmr3oNWvfeM9rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MWFmYjI4OWEtNmQ3Ni00MDAzLWFlNTgtNDQ4Zjc0NDRiZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/gPKzX3JMV2xYYSMmQosY8kX/s5+WQPj2dc QWaULUp/LDDZa/wEek76UeFk1Db91oSa73y2iPbEP+4LHD98d6XT4t7IgiTOLBvZ DGyvVsomdzkCVMVU218vGqxPfvC1IoJw9JidzYYx3k4SYt7/o2g6YBG686z9up1h SeS+IKa72X0BXVI+jUmeKsOgUAznHpzn8nSNTV36OlsXwh96IA0NNRjUewxTfqX+ MFwn7chlqnqHqUyRpQ91RsMOXVtQ3iiLx+Bj/S8aWDwVF7v2wHFVaT4ogarg8qfn upkmOZ+irXyhbLL2WXM8Jj4W831okAlYZweM5b8Sed1JFDoaLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzes5CJ4vVM7WNeF+guFAiDlweLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2ZiMTdhNjAtY2I2NC0z OTUzLWJjMWQtZjEyMzQwZWZkOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVusBHAp5Rkvw9EtGdfnPAPe9RdCwph1UKLTmdDbbNlyKOFD80uEfv5 0rrE7iXS4zwZmSVMVFIXCnRGzllRnQvxkAnnNqq99sY5y+6vNWnOcVhM9Ofi6FTr 01Ls5h4rX03OecOOzBq4LSE7Ph1JC5bRTfVhby7XI12W44Uf0SNLaGnak1XWHt6y jUcSZnL97J3t3Ps5v5lmJOX+URjfpRvXi/vUTon0Olwk71G0zTuPn6b7c7HXZXXI tz6nlcyrC6sUISU8uVZa01d7s1lhZLfbd7eZvDSGdTH151BgcG83K/5f8j2464+1 yG6DSZEAc6aCyfuCZFKDzUNjvP253wM= -----END CERTIFICATE-----Generated at Sat Jul 4 23:58:35 2026 by rpki-client