$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1604dcd1-e798-3d75-9ada-f39c52f908a8.roa File: 1604dcd1-e798-3d75-9ada-f39c52f908a8.roa (raw, json) Hash identifier: YS27SP3EHZQlMya3ae/kvmRa4Lm02X9EcuaJSKw7J3U= Subject key identifier: 08:3B:36:63:F7:D4:F6:DF:68:CF:54:C6:48:31:D6:7D:12:2D:06:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFF4E84C8E6E353ACB1C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1604dcd1-e798-3d75-9ada-f39c52f908a8.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.228.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:f4:e8:4c:8e:6e:35:3a:cb:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=6699c1ce-de6c-41f7-abdd-550432be2f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7e:ce:26:bb:7b:6d:b3:66:01:1d:62:37:1f: 5b:8a:17:17:bc:4d:f7:94:66:c4:5c:a2:0e:93:83: 35:ad:de:d5:40:ad:e1:b7:f5:f4:f7:38:76:46:83: dc:cc:23:9f:28:54:50:4b:12:6e:a9:3d:46:04:30: e1:f2:74:21:82:40:6d:30:ec:5c:b3:09:22:8f:5e: bc:2e:d4:4b:30:a2:af:a1:85:6e:33:3b:6d:84:1b: e9:e1:43:6d:7d:de:a6:b7:63:e4:4b:ea:b4:50:0c: ec:c5:4e:61:24:3b:96:df:38:5b:dc:9a:0e:dd:9e: a0:af:fb:3d:4e:39:9b:72:8e:85:5c:a9:c9:31:2f: 9a:e6:a5:c0:db:77:6a:be:a1:63:33:2b:57:56:2c: d3:28:45:e0:0d:83:03:de:4e:94:05:62:c4:e9:69: 1f:b3:00:0f:d0:64:1c:9c:1e:1f:de:34:1a:70:0a: 8c:10:09:0f:b4:dc:09:0c:24:5e:49:fc:24:e0:cd: 22:16:3b:f1:d4:15:08:9f:34:bd:ab:21:c6:fb:a7: 10:e1:bc:80:a7:78:d7:06:e1:52:b7:56:41:e6:4e: 3f:2d:46:d9:2f:d4:bf:ec:96:d8:f5:85:0b:5c:21: fe:a9:94:0b:45:81:92:40:3a:0d:c3:e6:f9:b5:96: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:36:63:F7:D4:F6:DF:68:CF:54:C6:48:31:D6:7D:12:2D:06:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1604dcd1-e798-3d75-9ada-f39c52f908a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:da:95:5e:a7:58:27:88:27:b1:9b:df:6b:1c:80:85:42:ca: 09:79:27:9d:46:ec:cc:e9:5b:80:e6:63:81:a6:6b:e4:62:57: 06:07:01:1c:b2:a5:8e:33:d4:00:66:dd:ef:d7:28:48:d4:9b: 6a:46:d1:8c:32:72:99:24:37:fa:60:81:ae:31:d3:30:a6:bf: a3:01:08:bd:21:0f:44:8f:07:e7:00:62:40:4b:e2:d3:b9:9e: 6b:da:1c:9b:56:aa:85:31:2b:bd:b7:97:cd:88:b7:78:f5:50: 3f:f8:ae:7a:2c:f7:99:65:01:8f:4d:04:1f:c7:67:1b:cd:c9: 62:12:89:87:f5:55:da:82:51:d4:2a:d5:b0:4b:36:99:b2:5a: 8a:71:7f:be:9e:5b:c2:79:f7:cc:d3:e0:c2:06:2f:4b:f1:5f: b7:0b:66:5d:0d:cb:2d:38:9b:1d:0d:70:3a:cd:47:28:c9:99: dc:ad:91:c7:59:9c:78:fa:0c:66:50:3b:16:6c:e2:0c:4f:ae: da:1c:05:a8:d1:af:34:9b:c9:a4:4c:9d:25:74:8f:fc:f6:3b: 4a:06:26:67:7f:26:79:c8:7e:b1:e3:73:b5:48:6a:a8:b0:7e: 0d:5d:70:3b:06:ad:82:5d:ca:e4:8f:be:29:b9:d4:90:15:25: 54:69:09:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er/ToTI5uNTrLHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk NjY5OWMxY2UtZGU2Yy00MWY3LWFiZGQtNTUwNDMyYmUyZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn7OJrt7bbNmAR1iNx9bihcXvE33lGbEXKIO k4M1rd7VQK3ht/X09zh2RoPczCOfKFRQSxJuqT1GBDDh8nQhgkBtMOxcswkij168 LtRLMKKvoYVuMztthBvp4UNtfd6mt2PkS+q0UAzsxU5hJDuW3zhb3JoO3Z6gr/s9 Tjmbco6FXKnJMS+a5qXA23dqvqFjMytXVizTKEXgDYMD3k6UBWLE6WkfswAP0GQc nB4f3jQacAqMEAkPtNwJDCReSfwk4M0iFjvx1BUInzS9qyHG+6cQ4byAp3jXBuFS t1ZB5k4/LUbZL9S/7JbY9YULXCH+qZQLRYGSQDoNw+b5tZZ7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg7NmP31PbfaM9Uxkgx1n0SLQbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTYwNGRjZDEtZTc5OC0z ZDc1LTlhZGEtZjM5YzUyZjkwOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfalV6nWCeIJ7Gb32scgIVCygl5J51G7MzpW4DmY4Gma+RiVwYHARyy pY4z1ABm3e/XKEjUm2pG0YwycpkkN/pgga4x0zCmv6MBCL0hD0SPB+cAYkBL4tO5 nmvaHJtWqoUxK723l82It3j1UD/4rnos95llAY9NBB/HZxvNyWISiYf1VdqCUdQq 1bBLNpmyWopxf76eW8J598zT4MIGL0vxX7cLZl0Nyy04mx0NcDrNRyjJmdytkcdZ nHj6DGZQOxZs4gxPrtocBajRrzSbyaRMnSV0j/z2O0oGJmd/JnnIfrHjc7VIaqiw fg1dcDsGrYJdyuSPvim51JAVJVRpCf0= -----END CERTIFICATE-----Generated at Wed Jul 29 01:47:07 2026 by rpki-client