$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68755e52-0bd1-3096-99a2-87725234bb0c.roa File: 68755e52-0bd1-3096-99a2-87725234bb0c.roa (raw, json) Hash identifier: 3E/Ju8lcrVM1YFtsSxHX9xUB6rmcglFt19HZigOG1ec= Subject key identifier: A5:AD:95:FA:F5:15:11:E1:9C:DC:4F:5D:ED:99:66:7E:33:9A:46:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E4532FDE60581A9AD273C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68755e52-0bd1-3096-99a2-87725234bb0c.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 68.14.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:53:2f:de:60:58:1a:9a:d2:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=52acfdb0-4795-4c69-94a8-ca4f82d4c9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:9b:68:24:48:8b:ac:68:8e:5b:e9:4c:12: a7:e5:b1:b1:57:3b:f8:5b:16:2d:70:7c:79:cf:f7: f9:35:86:b6:ff:b0:a6:68:95:4a:44:7b:97:64:c9: 15:b2:6e:39:3f:4d:c5:a3:14:57:29:83:8d:7d:46: 54:94:35:59:ad:c3:68:ca:00:3b:00:04:b2:c8:64: f9:12:b0:05:e8:58:86:eb:32:26:7b:d0:43:42:62: 73:3c:67:7d:be:8c:46:be:c0:6f:e4:ec:43:b8:37: d7:40:25:01:da:ae:83:64:fa:5c:23:e6:5d:c7:24: 26:57:74:ff:67:b2:d8:0c:dd:27:f4:6e:d5:7b:3e: d6:b5:5c:eb:d0:96:04:e2:2c:53:66:d4:9e:e9:fc: 43:40:5f:e8:a5:4b:1a:3b:0a:33:a5:33:ca:6f:37: 7c:bc:25:b4:f0:a2:77:25:5b:8a:11:0f:5b:40:92: 1c:c2:75:1d:8d:72:24:96:aa:26:5f:9c:b8:dc:62: 8e:69:1a:8c:c7:b3:4d:8c:10:cc:1f:5c:4e:fa:a3: 22:01:80:f9:fa:91:fa:d7:58:39:99:28:fd:a4:45: e9:ce:28:c2:68:44:d1:f2:66:5e:2e:57:74:a2:a5: 75:e1:a3:b7:20:b6:5e:82:a0:ee:70:71:03:0d:7c: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AD:95:FA:F5:15:11:E1:9C:DC:4F:5D:ED:99:66:7E:33:9A:46:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68755e52-0bd1-3096-99a2-87725234bb0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e2:45:b9:79:cf:7b:7c:0d:a8:e2:9e:f5:95:43:c1:d0:65: 74:45:82:0c:77:4a:b1:47:75:fd:b7:ba:d0:df:80:06:f5:c8: 5d:b6:9e:72:39:22:d2:61:7d:02:a2:c8:ba:e6:8a:e3:8f:60: 09:bc:1e:08:f7:ba:a9:f1:aa:70:f7:63:27:ce:11:0d:9d:3a: ad:4a:b3:64:5b:45:71:83:40:90:f8:f7:05:db:7c:7f:4a:a8: e5:e4:94:7a:ad:59:96:99:53:88:cb:f5:9a:e3:61:09:aa:37: 81:39:6e:27:33:7f:30:68:5e:95:a1:87:82:6f:7b:90:ff:46: fb:f7:da:1b:77:41:aa:45:ca:6c:89:b4:c0:4c:8b:ee:a2:1d: fd:c6:e9:8f:60:19:cc:e1:d6:74:44:d4:92:49:58:f6:42:05: 80:83:d0:31:7f:5f:ef:19:97:a7:47:8f:e2:12:9e:4b:15:48: a9:29:80:1e:e2:39:fd:b2:7d:63:9b:26:41:fb:c4:c1:8c:7b: 65:7a:a4:7e:7e:08:5d:96:da:0a:b7:c2:94:ba:53:d0:1a:80: 28:d4:0c:2b:af:95:0d:d0:eb:06:89:95:85:6e:54:33:13:6b: 05:00:2c:4e:9e:4f:f6:e2:d7:bc:77:89:83:0a:44:43:7f:90: b1:51:22:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5FMv3mBYGprSc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NTJhY2ZkYjAtNDc5NS00YzY5LTk0YTgtY2E0ZjgyZDRjOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO6baCRIi6xojlvpTBKn5bGxVzv4WxYtcHx5 z/f5NYa2/7CmaJVKRHuXZMkVsm45P03FoxRXKYONfUZUlDVZrcNoygA7AASyyGT5 ErAF6FiG6zIme9BDQmJzPGd9voxGvsBv5OxDuDfXQCUB2q6DZPpcI+ZdxyQmV3T/ Z7LYDN0n9G7Vez7WtVzr0JYE4ixTZtSe6fxDQF/opUsaOwozpTPKbzd8vCW08KJ3 JVuKEQ9bQJIcwnUdjXIklqomX5y43GKOaRqMx7NNjBDMH1xO+qMiAYD5+pH611g5 mSj9pEXpzijCaETR8mZeLld0oqV14aO3ILZegqDucHEDDXxyJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWtlfr1FRHhnNxPXe2ZZn4zmkZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjg3NTVlNTItMGJkMS0z MDk2LTk5YTItODc3MjUyMzRiYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfiRbl5z3t8DajinvWVQ8HQZXRFggx3SrFHdf23utDfgAb1yF22nnI5 ItJhfQKiyLrmiuOPYAm8Hgj3uqnxqnD3YyfOEQ2dOq1Ks2RbRXGDQJD49wXbfH9K qOXklHqtWZaZU4jL9ZrjYQmqN4E5biczfzBoXpWhh4Jve5D/Rvv32ht3QapFymyJ tMBMi+6iHf3G6Y9gGczh1nRE1JJJWPZCBYCD0DF/X+8Zl6dHj+ISnksVSKkpgB7i Of2yfWObJkH7xMGMe2V6pH5+CF2W2gq3wpS6U9AagCjUDCuvlQ3Q6waJlYVuVDMT awUALE6eT/bi17x3iYMKREN/kLFRIjg= -----END CERTIFICATE-----Generated at Fri Jul 24 15:55:19 2026 by rpki-client