$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0233031a-8d65-39c4-b602-408cbc8c2272.roa File: 0233031a-8d65-39c4-b602-408cbc8c2272.roa (raw, json) Hash identifier: o9BbHA/FnbrXH6ngZ+vuZg3BhPyLrxVfo0gjh5sUJX4= Subject key identifier: B9:9D:50:4C:EA:2B:CF:60:41:2F:6B:65:77:08:00:5A:B6:CA:7A:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A7B3A90C4E35D28AB6000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0233031a-8d65-39c4-b602-408cbc8c2272.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 174.68.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:7b:3a:90:c4:e3:5d:28:ab:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=4a44de09-1c42-4377-aafc-7cfbdd102a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:21:e1:6c:a3:52:7e:6e:71:af:5d:cd:96: 5b:82:f4:d5:8f:79:a1:ba:76:ac:3f:b9:74:55:9d: 77:cb:fb:76:48:5b:ae:aa:e6:e9:ce:40:f8:38:90: 2e:0d:2c:6f:3d:11:f8:bc:6f:50:e5:ed:b1:41:48: 7f:95:75:bb:a3:03:5d:41:31:47:76:7f:fb:de:a4: ce:17:b0:db:c6:78:23:a7:37:cb:35:a6:f2:40:f2: 0d:fd:13:18:46:c7:7d:65:ce:f4:8d:a0:bd:79:99: 82:84:08:24:cd:07:2a:dc:59:67:b5:95:4e:2f:94: 4d:55:a2:1a:4d:ec:2a:cb:ab:96:3a:49:04:fd:79: 2a:eb:ae:47:6b:95:09:1e:08:ed:27:5e:b9:d7:13: 48:65:46:71:1a:23:4a:ad:b3:db:02:ee:be:14:2c: 6e:55:60:ec:84:9c:c8:74:65:0a:c1:ee:92:f7:50: 07:0b:53:6a:0e:2e:f4:95:e2:46:36:75:fb:13:48: ce:63:e3:7b:fd:42:e7:33:10:1a:b7:74:31:71:0f: 32:78:7e:46:99:f5:ff:94:90:9c:b6:3b:2d:59:7a: c3:02:6d:2d:53:19:f3:41:21:4f:c2:cd:29:24:a3: da:cd:26:a0:6f:c6:05:be:a8:78:9d:b1:41:c1:13: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:50:4C:EA:2B:CF:60:41:2F:6B:65:77:08:00:5A:B6:CA:7A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0233031a-8d65-39c4-b602-408cbc8c2272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e3:44:4d:fe:33:8d:8c:94:72:1a:bc:e9:f9:a7:ab:f4:79: 04:20:96:1f:f0:ad:34:ff:2b:5f:b9:44:ce:9a:66:fd:8e:cf: d1:04:58:01:9d:87:91:bc:5e:07:89:f6:68:66:0c:77:22:24: 8c:78:6c:0f:d7:d6:bb:a5:18:01:da:b0:12:29:28:bc:da:82: 53:f3:09:fc:2f:75:05:3d:da:e8:eb:70:5e:9e:ae:7c:a5:dd: cf:b5:56:97:5e:a3:a0:e9:17:89:6f:df:c0:d9:f4:06:fa:43: 08:3b:bb:45:6f:07:12:ed:4d:2a:24:5b:28:30:7f:cd:6d:f0: 2a:e5:38:13:30:f2:cd:71:10:1d:c2:56:93:82:40:1c:53:45: c0:ce:0a:9f:5e:0b:92:61:14:49:0f:1e:fd:27:fc:5f:0d:84: a0:72:60:56:9f:00:e3:c4:19:24:6f:b8:5f:ad:9d:90:71:25: 5f:5a:18:37:b2:8f:e6:9a:fd:aa:35:c3:1d:d7:7f:40:39:76: ae:1f:d7:43:5c:20:e5:c2:54:dc:46:a2:10:31:f4:34:14:18: c6:85:33:d5:6f:10:eb:87:9d:86:59:b6:fd:83:d9:7e:a2:0b: 23:8f:3d:1a:49:c3:31:31:4e:6c:6a:db:e6:c7:35:41:29:b6: 13:51:98:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hens6kMTjXSirYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NGE0NGRlMDktMWM0Mi00Mzc3LWFhZmMtN2NmYmRkMTAyYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx58h4WyjUn5uca9dzZZbgvTVj3mhunasP7l0 VZ13y/t2SFuuqubpzkD4OJAuDSxvPRH4vG9Q5e2xQUh/lXW7owNdQTFHdn/73qTO F7DbxngjpzfLNabyQPIN/RMYRsd9Zc70jaC9eZmChAgkzQcq3FlntZVOL5RNVaIa Tewqy6uWOkkE/Xkq665Ha5UJHgjtJ1651xNIZUZxGiNKrbPbAu6+FCxuVWDshJzI dGUKwe6S91AHC1NqDi70leJGNnX7E0jOY+N7/ULnMxAat3QxcQ8yeH5GmfX/lJCc tjstWXrDAm0tUxnzQSFPws0pJKPazSagb8YFvqh4nbFBwROhuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmdUEzqK89gQS9rZXcIAFq2ynqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDIzMzAzMWEtOGQ2NS0z OWM0LWI2MDItNDA4Y2JjOGMyMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPjRE3+M42MlHIavOn5p6v0eQQglh/wrTT/K1+5RM6aZv2Oz9EEWAGd h5G8XgeJ9mhmDHciJIx4bA/X1rulGAHasBIpKLzaglPzCfwvdQU92ujrcF6ernyl 3c+1Vpdeo6DpF4lv38DZ9Ab6Qwg7u0VvBxLtTSokWygwf81t8CrlOBMw8s1xEB3C VpOCQBxTRcDOCp9eC5JhFEkPHv0n/F8NhKByYFafAOPEGSRvuF+tnZBxJV9aGDey j+aa/ao1wx3Xf0A5dq4f10NcIOXCVNxGohAx9DQUGMaFM9VvEOuHnYZZtv2D2X6i CyOPPRpJwzExTmxq2+bHNUEpthNRmJc= -----END CERTIFICATE-----Generated at Wed Jul 29 03:37:16 2026 by rpki-client