$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/133e8afe-5d51-329a-8e64-18cfe52f3556.roa File: 133e8afe-5d51-329a-8e64-18cfe52f3556.roa (raw, json) Hash identifier: vGNCPwk6NL35ZQeREwjrIqsdfsZXbK9yDPEGrQ0eBxU= Subject key identifier: FB:C1:F3:39:9A:98:FB:C9:30:47:B9:83:69:5B:5B:C8:2B:73:F3:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A7E058FBC26FF74F7D4F4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/133e8afe-5d51-329a-8e64-18cfe52f3556.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.108.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:7e:05:8f:bc:26:ff:74:f7:d4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=8f48de1d-7040-4ac0-a3d7-251fbf3f9159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:dd:80:83:90:23:23:c4:ea:0a:56:c2:7c: 36:19:47:0a:f9:b7:74:36:33:95:16:86:df:5f:9d: 7b:43:af:cb:31:40:fc:12:14:f1:7d:4b:47:1b:73: 09:ad:15:b4:20:a1:14:c3:4d:59:ac:32:dc:17:55: a8:7b:2e:aa:f6:2a:19:5f:54:67:60:51:8d:65:b0: 54:f2:be:78:7b:c3:b8:2c:30:0d:7a:f0:e1:4c:0b: 2e:0b:3f:0d:7b:9e:76:f5:39:86:57:c5:6b:4c:73: 16:99:30:bb:c9:4b:68:59:73:d0:49:4f:a8:7e:ac: 04:5d:53:26:c1:be:4a:09:50:42:19:0d:4a:12:ce: 23:24:3d:95:e5:40:5a:4a:25:2c:06:fb:19:43:bb: 95:5d:42:d2:15:d2:23:24:69:d5:30:41:6d:e5:d7: cb:ac:df:ca:a3:e4:7e:0d:6d:4d:f6:67:3e:62:fa: 58:65:e6:9f:bb:c2:69:13:83:34:04:02:97:63:6a: 4e:be:f9:07:e4:b0:e9:46:b9:40:91:28:6f:45:12: ef:e0:a8:57:57:27:e3:ff:e8:10:b6:09:85:34:d9: f8:44:8e:a5:86:55:77:d1:fe:a2:3e:1b:46:8c:d5: 76:4a:fd:a5:88:43:fd:1c:a0:1e:f3:62:92:c4:5d: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C1:F3:39:9A:98:FB:C9:30:47:B9:83:69:5B:5B:C8:2B:73:F3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/133e8afe-5d51-329a-8e64-18cfe52f3556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b6:89:65:d6:96:5a:a1:c0:31:4b:2e:18:a8:f2:f9:0b:f8: 15:6e:dd:ed:88:7b:75:6b:4f:c6:d6:5e:f2:ba:25:ae:ec:a6: f7:b5:c6:9c:a8:39:e8:0d:d8:c0:4b:cd:88:d6:81:39:43:a0: 4a:2e:6c:54:fe:ab:2a:b0:4f:3a:87:40:7d:e6:00:82:ce:24: fb:23:ab:9f:bc:70:dd:92:ba:ad:58:ab:89:f8:04:4a:64:0f: 20:99:af:c8:5e:5d:f2:7c:80:46:09:e6:22:55:cd:52:46:7e: c8:92:e9:95:f6:1b:25:3f:3d:69:aa:c2:42:15:bf:42:4e:8f: 3b:c9:fa:d9:3b:6b:66:67:13:76:64:73:57:2f:ce:b9:ee:83: e3:77:b9:9a:cf:d2:e6:86:cd:31:79:66:db:39:ca:13:c5:9f: 86:1e:e8:bd:fc:22:e7:5b:4f:20:22:82:ee:01:76:67:a9:ba: 80:fe:4b:c7:2e:da:45:16:50:7b:e5:35:13:e3:29:b1:80:22: 02:23:6a:9e:d8:14:11:e2:19:b9:47:89:4d:36:49:ba:85:64: 9e:b9:4b:6d:a4:82:0f:44:47:97:cf:f0:8d:ab:7e:cb:2c:44: d8:3d:57:76:97:61:c3:53:d3:f1:a0:da:3b:bc:01:f9:9f:0c: 7d:a4:4a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hen4Fj7wm/3T31PQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk OGY0OGRlMWQtNzA0MC00YWMwLWEzZDctMjUxZmJmM2Y5MTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxfdgIOQIyPE6gpWwnw2GUcK+bd0NjOVFobf X517Q6/LMUD8EhTxfUtHG3MJrRW0IKEUw01ZrDLcF1Woey6q9ioZX1RnYFGNZbBU 8r54e8O4LDANevDhTAsuCz8Ne5529TmGV8VrTHMWmTC7yUtoWXPQSU+ofqwEXVMm wb5KCVBCGQ1KEs4jJD2V5UBaSiUsBvsZQ7uVXULSFdIjJGnVMEFt5dfLrN/Ko+R+ DW1N9mc+YvpYZeafu8JpE4M0BAKXY2pOvvkH5LDpRrlAkShvRRLv4KhXVyfj/+gQ tgmFNNn4RI6lhlV30f6iPhtGjNV2Sv2liEP9HKAe82KSxF2paQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvB8zmamPvJMEe5g2lbW8grc/M0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMzZThhZmUtNWQ1MS0z MjlhLThlNjQtMThjZmU1MmYzNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi2iWXWllqhwDFLLhio8vkL+BVu3e2Ie3VrT8bWXvK6Ja7spve1xpyo OegN2MBLzYjWgTlDoEoubFT+qyqwTzqHQH3mAILOJPsjq5+8cN2Suq1Yq4n4BEpk DyCZr8heXfJ8gEYJ5iJVzVJGfsiS6ZX2GyU/PWmqwkIVv0JOjzvJ+tk7a2ZnE3Zk c1cvzrnug+N3uZrP0uaGzTF5Zts5yhPFn4Ye6L38IudbTyAigu4BdmepuoD+S8cu 2kUWUHvlNRPjKbGAIgIjap7YFBHiGblHiU02SbqFZJ65S22kgg9ER5fP8I2rfsss RNg9V3aXYcNT0/Gg2ju8AfmfDH2kSvk= -----END CERTIFICATE-----Generated at Wed Jul 29 00:35:11 2026 by rpki-client