$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/122d60a7-193d-346e-b46d-7d17b876f197.roa File: 122d60a7-193d-346e-b46d-7d17b876f197.roa (raw, json) Hash identifier: UpvOGoh7uPgNOZIYQzhXydxqHpGZWafBepMMJPu9nWw= Subject key identifier: 15:E1:B5:8C:C9:C5:55:80:57:79:36:5A:15:54:49:85:E8:D8:BC:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A607F03A7994A03531B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/122d60a7-193d-346e-b46d-7d17b876f197.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.3.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:60:7f:03:a7:99:4a:03:53:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=db5fa973-2dcf-4da9-8f33-5161f4c81278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:43:b4:8e:bd:0a:3a:1f:eb:66:a6:d3:7f: 29:40:1b:af:68:5f:33:1a:13:74:6a:cb:5f:d3:17: 8a:43:f2:62:bc:90:e5:bb:f0:a8:8a:84:d7:5e:63: 21:40:d3:73:de:d3:85:c4:63:11:0f:75:7a:9d:95: 58:ce:a5:1b:e7:d7:31:2d:f8:83:59:aa:61:35:6c: 88:28:14:59:14:d4:44:bc:00:ac:cd:b2:65:5e:90: 7b:e1:3b:1d:34:09:2d:64:62:11:b9:e4:2b:70:2e: bd:b8:6e:7d:86:23:5a:63:3b:5b:cc:ca:85:bf:e6: 7b:69:c9:1d:e1:5b:c6:a8:63:3a:a0:c8:db:d3:74: ea:75:25:bc:34:13:6a:85:8e:52:e2:e6:e0:de:28: 9b:e0:a7:33:70:2b:75:23:32:71:4e:fb:e8:e8:4b: 71:c8:f7:01:8b:fa:dd:07:2e:4e:89:f2:4b:ad:ae: 30:c6:ef:52:6d:63:31:0e:f9:35:87:8a:da:02:d8: df:c9:1c:27:d9:cc:68:15:e3:15:ee:9a:3a:0b:35: db:f5:64:53:49:9b:3c:b4:92:15:ea:79:a9:1e:fc: 2a:c9:39:7a:e4:30:00:99:6c:89:e4:f0:c3:bf:2b: a7:c3:0c:a5:96:37:b1:02:fc:7e:46:39:8f:6c:ff: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E1:B5:8C:C9:C5:55:80:57:79:36:5A:15:54:49:85:E8:D8:BC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/122d60a7-193d-346e-b46d-7d17b876f197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cb:c7:06:7b:da:9b:e0:94:19:64:e2:bd:50:1a:4e:3c:9c: 8a:7f:74:20:7e:c2:5b:2d:01:ad:41:59:36:f6:31:d8:7a:85: 2c:19:45:bb:0d:ef:aa:96:4a:4e:ab:eb:c5:d3:e3:6a:f4:e8: 29:f4:16:27:1e:70:0f:b8:31:94:4e:0a:2d:25:31:d1:c8:b9: f5:af:9a:c9:80:99:16:f0:eb:c5:62:c1:23:2f:33:4f:f2:51: 69:5d:89:0d:6e:52:fa:e6:4c:8c:dd:28:cf:2c:88:0b:8f:b3: cc:bc:d8:24:14:9b:e7:38:d6:7c:5a:c0:e7:3a:e4:bf:74:0a: f8:35:e4:d0:e5:02:ee:ed:dd:5f:60:a9:aa:5a:e2:a7:97:85: bb:93:df:88:82:93:a5:6e:9a:e7:2c:c7:02:9c:fb:39:ef:aa: bb:4c:ff:bf:16:ce:56:39:b9:e0:34:17:70:a5:b6:e6:79:c0: 5f:88:9f:7c:f6:cd:fc:f1:05:60:17:38:fa:0a:28:55:82:a1: 0a:eb:1a:76:a7:ad:20:75:cd:2e:ba:bc:c3:19:f5:e2:84:ca: 89:44:f4:17:f9:3c:86:e7:9c:60:09:89:76:2f:2b:a9:84:69: 42:a2:a5:9e:f5:7b:1c:1e:fb:25:d6:e5:fd:7a:33:16:4e:a9: e5:cf:c5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmB/A6eZSgNTG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZGI1ZmE5NzMtMmRjZi00ZGE5LThmMzMtNTE2MWY0YzgxMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD1DtI69Cjof62am038pQBuvaF8zGhN0astf 0xeKQ/JivJDlu/CoioTXXmMhQNNz3tOFxGMRD3V6nZVYzqUb59cxLfiDWaphNWyI KBRZFNREvACszbJlXpB74TsdNAktZGIRueQrcC69uG59hiNaYztbzMqFv+Z7ackd 4VvGqGM6oMjb03TqdSW8NBNqhY5S4ubg3iib4KczcCt1IzJxTvvo6EtxyPcBi/rd By5OifJLra4wxu9SbWMxDvk1h4raAtjfyRwn2cxoFeMV7po6CzXb9WRTSZs8tJIV 6nmpHvwqyTl65DAAmWyJ5PDDvyunwwylljexAvx+RjmPbP8Q6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXhtYzJxVWAV3k2WhVUSYXo2LzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIyZDYwYTctMTkzZC0z NDZlLWI0NmQtN2QxN2I4NzZmMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLLxwZ72pvglBlk4r1QGk48nIp/dCB+wlstAa1BWTb2Mdh6hSwZRbsN 76qWSk6r68XT42r06Cn0FicecA+4MZROCi0lMdHIufWvmsmAmRbw68ViwSMvM0/y UWldiQ1uUvrmTIzdKM8siAuPs8y82CQUm+c41nxawOc65L90Cvg15NDlAu7t3V9g qapa4qeXhbuT34iCk6VumucsxwKc+znvqrtM/78WzlY5ueA0F3CltuZ5wF+In3z2 zfzxBWAXOPoKKFWCoQrrGnanrSB1zS66vMMZ9eKEyolE9Bf5PIbnnGAJiXYvK6mE aUKipZ71exwe+yXW5f16MxZOqeXPxZY= -----END CERTIFICATE-----Generated at Wed Jul 29 01:49:01 2026 by rpki-client