$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/117a85f9-0280-34b2-a2dc-792507f73ad7.roa File: 117a85f9-0280-34b2-a2dc-792507f73ad7.roa (raw, json) Hash identifier: IWVKpLBXLQ61EDguQc3b0fQTU2fReGPQhBelspzSAzE= Subject key identifier: 23:C1:E6:86:4C:76:D4:F3:38:10:2C:C6:4E:10:1E:CD:87:86:1E:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17AA6F8BCAA62A4D4A08E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/117a85f9-0280-34b2-a2dc-792507f73ad7.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.108.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:a6:f8:bc:aa:62:a4:d4:a0:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=c08c37d3-a1c5-47d3-a64c-faa296e4f6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:6a:b8:bc:26:63:95:b5:00:5f:87:4b:be: 6f:a2:81:95:f0:8b:9e:6c:04:76:41:bc:19:6a:8a: 52:57:ae:41:ae:09:c7:71:31:25:ba:7e:c1:33:d2: 34:ae:6a:f5:03:69:6a:1b:1d:eb:dc:ba:4f:a1:0f: 29:1e:ce:7a:e6:cb:b1:31:58:0e:41:03:d7:e5:b4: e7:d4:6a:36:90:68:24:59:f7:b6:67:4c:a3:15:cf: 82:63:92:14:33:aa:8f:72:b7:8f:56:c6:46:12:9b: 99:66:9f:89:7e:1a:f2:11:7c:f0:27:97:71:35:78: 3f:1d:e9:87:50:f6:66:6f:02:b0:a7:0f:23:11:c6: af:dc:cc:64:79:aa:df:4a:85:9b:62:d7:03:4f:20: 04:f5:33:14:21:a1:e2:fc:61:fe:7e:c3:3d:d9:d9: 00:85:19:f5:ce:45:3c:07:f3:4f:75:c8:82:17:15: cf:71:e2:1b:5d:96:20:ca:71:78:e5:21:a1:65:12: 91:48:c0:56:ce:02:24:33:02:55:a2:6c:93:f6:58: 69:d7:fe:3b:e0:9c:ab:aa:44:fa:05:7d:c3:75:81: 16:73:f1:fc:40:f2:9d:76:66:21:69:cc:c3:f9:10: 3f:cb:56:f7:c6:2d:f4:8e:47:6e:9a:81:14:c7:8c: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:E6:86:4C:76:D4:F3:38:10:2C:C6:4E:10:1E:CD:87:86:1E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/117a85f9-0280-34b2-a2dc-792507f73ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:13:02:71:07:1d:3c:92:9f:b1:0a:17:2e:1b:0d:89:3b:0d: 89:14:7f:c9:6f:03:32:67:08:64:b1:d3:70:f2:55:d8:a7:83: 10:73:e4:5a:48:46:70:66:68:62:10:36:dd:34:f6:0b:b2:43: 1a:a4:c1:24:14:44:9b:2e:64:12:b8:ac:69:fd:d8:67:b4:ae: 4f:51:0c:0f:1b:64:95:4f:3f:4f:11:91:7a:00:85:31:4c:e0: 56:cc:f3:32:71:66:d1:eb:57:78:ca:a4:1c:16:2a:96:e4:ad: e0:a1:61:c6:54:2a:33:d5:e7:4b:96:96:a9:d0:9c:13:28:9c: fa:82:10:c3:69:0a:29:95:00:4c:da:86:21:00:16:a0:18:62: 16:37:95:3e:ff:3f:a9:78:a2:67:fb:47:41:2d:00:4c:67:93: b8:27:6f:29:d6:4b:ed:a5:4d:d3:8e:94:fe:2a:54:0f:8d:79: fb:15:11:f9:8c:ed:a1:f9:b7:c3:ae:07:d4:39:d0:73:06:36: 80:d7:e1:c4:14:db:eb:a1:f7:da:ea:f4:af:6f:9d:1e:94:5c: 7f:73:b3:35:82:72:c6:35:59:88:db:c2:b4:38:2e:21:a7:14: 5c:fa:54:63:47:3a:36:ed:0b:9f:7c:73:78:48:72:dc:ab:a4: 5f:76:4a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heqb4vKpipNSgjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YzA4YzM3ZDMtYTFjNS00N2QzLWE2NGMtZmFhMjk2ZTRmNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJNquLwmY5W1AF+HS75vooGV8IuebAR2QbwZ aopSV65BrgnHcTElun7BM9I0rmr1A2lqGx3r3LpPoQ8pHs565suxMVgOQQPX5bTn 1Go2kGgkWfe2Z0yjFc+CY5IUM6qPcrePVsZGEpuZZp+JfhryEXzwJ5dxNXg/HemH UPZmbwKwpw8jEcav3MxkearfSoWbYtcDTyAE9TMUIaHi/GH+fsM92dkAhRn1zkU8 B/NPdciCFxXPceIbXZYgynF45SGhZRKRSMBWzgIkMwJVomyT9lhp1/474JyrqkT6 BX3DdYEWc/H8QPKddmYhaczD+RA/y1b3xi30jkdumoEUx4w0qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPB5oZMdtTzOBAsxk4QHs2Hhh7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTE3YTg1ZjktMDI4MC0z NGIyLWEyZGMtNzkyNTA3ZjczYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGx9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkTAnEHHTySn7EKFy4bDYk7DYkUf8lvAzJnCGSx03DyVdingxBz5FpI RnBmaGIQNt009guyQxqkwSQURJsuZBK4rGn92Ge0rk9RDA8bZJVPP08RkXoAhTFM 4FbM8zJxZtHrV3jKpBwWKpbkreChYcZUKjPV50uWlqnQnBMonPqCEMNpCimVAEza hiEAFqAYYhY3lT7/P6l4omf7R0EtAExnk7gnbynWS+2lTdOOlP4qVA+NefsVEfmM 7aH5t8OuB9Q50HMGNoDX4cQU2+uh99rq9K9vnR6UXH9zszWCcsY1WYjbwrQ4LiGn FFz6VGNHOjbtC598c3hIctyrpF92SlA= -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:26 2026 by rpki-client