$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04572d52-b027-3b64-94bb-03d12d155a6b.roa File: 04572d52-b027-3b64-94bb-03d12d155a6b.roa (raw, json) Hash identifier: BxHPj/0rE0WEHkqS3Jts14J3OqiN3a9oI0rI9Kn8P7I= Subject key identifier: 18:EA:31:85:A8:77:E9:58:41:BC:3F:B0:81:CB:71:7C:53:05:5E:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A61056AF2852829E33700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04572d52-b027-3b64-94bb-03d12d155a6b.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.98.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:61:05:6a:f2:85:28:29:e3:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=5204884a-74cf-4003-8bdf-1ae879cdc895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ac:92:50:b9:fa:f9:bc:79:3e:59:0d:5a:9b: 0c:96:14:23:01:0a:92:a6:14:9d:94:4e:2e:ab:42: da:2b:f2:2b:08:cf:90:b0:af:2b:7a:94:05:4d:c2: 6e:dc:6e:6c:0b:9d:77:ff:c2:b4:99:0b:1a:b3:92: 69:fc:a9:f8:38:54:36:5e:c1:d3:7a:9d:7e:bf:df: 28:79:9c:63:bc:f9:c2:ba:e4:3f:ff:86:d0:c0:01: 65:b2:6b:37:18:cd:c4:bd:ae:58:87:e4:0f:03:da: 2a:a8:c7:46:30:aa:fe:d2:25:c6:6d:b9:ef:30:c5: 49:bd:16:6c:45:b8:4e:4d:84:d6:b3:09:04:6a:83: 02:58:de:de:29:75:bd:67:c6:20:ab:32:f8:bf:ce: b2:ff:58:ef:6e:b7:74:62:1f:32:06:62:1c:67:c0: 9b:c6:03:40:6d:aa:02:eb:4f:f4:79:62:37:20:1c: 11:4d:45:e5:95:db:da:09:a7:31:28:d6:9a:0b:a2: 09:e4:87:e6:6c:9f:3a:be:d8:8f:da:03:f2:57:14: 4e:42:cf:61:b2:de:f0:33:e3:8d:6a:3a:52:72:90: a9:fe:a4:39:f6:3d:ce:88:f1:de:5b:10:a8:8f:10: 74:dd:57:3e:40:ef:09:69:2a:ba:e1:ef:d0:db:e7: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EA:31:85:A8:77:E9:58:41:BC:3F:B0:81:CB:71:7C:53:05:5E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04572d52-b027-3b64-94bb-03d12d155a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2e:b6:c1:1f:6c:d8:33:dc:67:14:24:a7:48:86:bb:4b:00: 0f:b3:85:3c:5c:1f:e5:e1:a4:49:15:89:9e:98:36:3b:54:1c: 5a:67:75:a6:9d:a6:14:4c:8b:34:72:b2:e7:78:5e:fe:4b:9a: 63:3e:c6:bb:96:00:27:f1:38:96:55:66:20:01:9d:a8:37:5f: 33:89:2e:ad:94:bd:76:7a:39:be:d0:c6:b2:8f:97:69:c1:ce: 53:5d:e3:9a:f9:9b:c2:d2:76:12:2f:cc:99:b5:4e:24:f8:e9: ec:52:70:94:fd:00:4b:bb:ae:ff:cd:38:9b:b8:81:de:85:30: b2:17:e4:98:b0:bf:4a:4a:fc:52:6b:82:e6:d0:94:a1:4c:fd: 91:f8:15:a9:93:92:31:a1:1a:a4:82:af:f9:f2:e1:a2:d6:2e: c6:94:00:2e:dd:99:99:7a:c9:cf:03:0e:ef:68:46:61:b7:88: 8e:1d:0c:fc:fe:19:6c:62:9b:c4:21:f0:bc:38:03:f0:e5:36: 70:bd:c5:e2:0e:dd:c7:02:6e:98:d0:d2:c5:ed:60:51:c1:28: 0a:f9:2b:bd:3a:4f:6f:aa:36:1f:da:a1:c6:d0:9b:aa:e7:a8: ea:51:92:10:be:2f:4e:a1:c8:61:ab:b1:76:f6:70:91:9d:77: 9b:ab:ad:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmEFavKFKCnjNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NTIwNDg4NGEtNzRjZi00MDAzLThiZGYtMWFlODc5Y2RjODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqySULn6+bx5PlkNWpsMlhQjAQqSphSdlE4u q0LaK/IrCM+QsK8repQFTcJu3G5sC513/8K0mQsas5Jp/Kn4OFQ2XsHTep1+v98o eZxjvPnCuuQ//4bQwAFlsms3GM3Eva5Yh+QPA9oqqMdGMKr+0iXGbbnvMMVJvRZs RbhOTYTWswkEaoMCWN7eKXW9Z8YgqzL4v86y/1jvbrd0Yh8yBmIcZ8CbxgNAbaoC 60/0eWI3IBwRTUXlldvaCacxKNaaC6IJ5IfmbJ86vtiP2gPyVxROQs9hst7wM+ON ajpScpCp/qQ59j3OiPHeWxCojxB03Vc+QO8JaSq64e/Q2+cDmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjqMYWod+lYQbw/sIHLcXxTBV7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDQ1NzJkNTItYjAyNy0z YjY0LTk0YmItMDNkMTJkMTU1YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYutsEfbNgz3GcUJKdIhrtLAA+zhTxcH+XhpEkViZ6YNjtUHFpndaad phRMizRysud4Xv5LmmM+xruWACfxOJZVZiABnag3XzOJLq2UvXZ6Ob7QxrKPl2nB zlNd45r5m8LSdhIvzJm1TiT46exScJT9AEu7rv/NOJu4gd6FMLIX5Jiwv0pK/FJr gubQlKFM/ZH4FamTkjGhGqSCr/ny4aLWLsaUAC7dmZl6yc8DDu9oRmG3iI4dDPz+ GWxim8Qh8Lw4A/DlNnC9xeIO3ccCbpjQ0sXtYFHBKAr5K706T2+qNh/aocbQm6rn qOpRkhC+L06hyGGrsXb2cJGdd5urrQI= -----END CERTIFICATE-----Generated at Wed Jul 29 01:48:08 2026 by rpki-client