$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa File: 1089f3bf-c876-3291-aa63-7a948e2855ae.roa (raw, json) Hash identifier: fBqe952pAvBKw2kIFaiqfOiCL0gHJfVpAenm7pk8X9M= Subject key identifier: 17:AE:18:90:FA:64:3A:8C:9B:17:03:3F:94:24:AD:73:4F:11:A0:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A9C9A9B8655BD92670200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.96.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:9c:9a:9b:86:55:bd:92:67:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=e5f63ffb-f621-4e48-9ae1-18fa8ffb390c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:f0:bd:ab:d8:d7:e3:cd:4b:8f:05:31:ee: de:30:93:82:a9:b8:ef:63:0c:36:30:af:16:a1:db: a9:7c:8f:bc:91:86:27:1a:48:67:54:1e:9c:3a:e0: b8:01:a5:32:15:fe:36:a4:5f:6d:96:6a:fd:a6:be: f7:da:95:e7:c8:51:4f:81:de:0c:ec:58:2b:99:0d: 6f:5b:3e:31:57:d8:bc:25:46:71:5a:59:57:f6:72: 4e:87:1e:4b:c3:db:50:37:7b:88:b1:c2:c6:f2:64: 98:bf:9f:43:4d:4e:ed:d8:2b:97:10:34:42:a2:75: 3c:d5:0a:83:70:12:0b:2a:b8:26:7d:6d:de:35:06: 71:b8:f0:3d:d5:f2:21:5c:cc:24:2d:d4:cc:d8:9a: d0:6c:f0:28:b9:0f:53:11:11:72:71:de:a2:f0:6e: 40:d5:25:59:74:f7:cd:b3:2c:b2:b8:7b:1e:00:38: 82:af:0e:22:e9:86:13:43:4c:02:93:43:f2:02:a8: df:bd:42:85:4f:7b:97:21:b0:0e:4a:35:7a:d1:1a: 9e:94:82:aa:b8:f0:4b:64:8b:b5:5b:23:f6:80:2c: df:f2:2d:6b:c8:7c:e7:90:34:3d:4a:02:fd:a3:95: 64:d1:ae:5e:70:e2:20:c7:1f:11:f1:41:a6:f4:c9: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AE:18:90:FA:64:3A:8C:9B:17:03:3F:94:24:AD:73:4F:11:A0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ea:86:ab:16:80:c7:45:1b:d4:a5:fe:ed:61:d1:36:29:6c: 7f:e3:82:0f:70:2e:ae:92:ad:57:56:2d:d6:d3:24:6f:2a:04: b6:ab:97:92:ed:8e:f2:f1:29:63:5a:bb:e1:61:3b:68:c5:c6: ea:76:53:d7:50:72:16:49:dc:8c:b6:c7:2e:46:06:ec:f8:e7: 6d:89:7b:13:c0:9b:14:a6:b1:f9:ed:7d:c5:a3:08:e9:f4:e8: 20:d5:89:51:45:9d:55:e4:2a:4c:83:a2:e1:93:a0:ae:25:f4: 2f:ab:f9:fb:32:d7:bc:72:24:9b:f3:39:2c:8a:eb:31:68:77: 76:3e:13:c3:88:40:a4:f2:d9:96:30:b0:dd:1a:2f:8e:05:04: db:3a:16:7d:05:c8:83:20:35:ba:9a:3b:54:fe:f6:c3:ac:92: 8b:53:1f:37:62:4b:d8:e7:31:4d:99:12:c8:01:b4:37:87:8d: 20:22:1b:9c:b3:66:34:2c:1f:8e:45:c9:95:b0:ae:04:a3:4b: a2:23:8b:d9:9c:f5:11:4c:e4:45:9d:5f:7e:40:a9:4e:b8:83: 11:81:c2:bb:3c:85:a5:fb:ab:b5:6b:6e:a9:b5:ad:1f:03:1c: 60:29:44:15:3c:98:e1:33:13:d8:ef:39:29:d7:3e:8f:36:53: 16:6c:02:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hepyam4ZVvZJnAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZTVmNjNmZmItZjYyMS00ZTQ4LTlhZTEtMThmYThmZmIzOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1nwvavY1+PNS48FMe7eMJOCqbjvYww2MK8W odupfI+8kYYnGkhnVB6cOuC4AaUyFf42pF9tlmr9pr732pXnyFFPgd4M7FgrmQ1v Wz4xV9i8JUZxWllX9nJOhx5Lw9tQN3uIscLG8mSYv59DTU7t2CuXEDRConU81QqD cBILKrgmfW3eNQZxuPA91fIhXMwkLdTM2JrQbPAouQ9TERFycd6i8G5A1SVZdPfN syyyuHseADiCrw4i6YYTQ0wCk0PyAqjfvUKFT3uXIbAOSjV60RqelIKquPBLZIu1 WyP2gCzf8i1ryHznkDQ9SgL9o5Vk0a5ecOIgxx8R8UGm9MnR4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeuGJD6ZDqMmxcDP5QkrXNPEaCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTA4OWYzYmYtYzg3Ni0z MjkxLWFhNjMtN2E5NDhlMjg1NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrqhqsWgMdFG9Sl/u1h0TYpbH/jgg9wLq6SrVdWLdbTJG8qBLarl5Lt jvLxKWNau+FhO2jFxup2U9dQchZJ3Iy2xy5GBuz4522JexPAmxSmsfntfcWjCOn0 6CDViVFFnVXkKkyDouGToK4l9C+r+fsy17xyJJvzOSyK6zFod3Y+E8OIQKTy2ZYw sN0aL44FBNs6Fn0FyIMgNbqaO1T+9sOskotTHzdiS9jnMU2ZEsgBtDeHjSAiG5yz ZjQsH45FyZWwrgSjS6Iji9mc9RFM5EWdX35AqU64gxGBwrs8haX7q7Vrbqm1rR8D HGApRBU8mOEzE9jvOSnXPo82UxZsAis= -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:50 2026 by rpki-client