$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e61fc50-92ae-32a5-87db-36232c40b5fc.roa File: 1e61fc50-92ae-32a5-87db-36232c40b5fc.roa (raw, json) Hash identifier: LnjAC3A6E7t5EHcF5sa4kL+mhDqJMEh53bymgs4oh38= Subject key identifier: CF:B7:95:C9:CB:D9:F8:BB:79:D2:A0:41:65:BA:A9:AB:FB:81:40:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17AA624C524DDFF70DAEB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e61fc50-92ae-32a5-87db-36232c40b5fc.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:a6:24:c5:24:dd:ff:70:da:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=7a8dfbb9-0f40-4046-8cd2-933f6ea1a60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:8c:4e:51:44:39:6e:78:15:5c:62:e8:2e: 47:41:e5:a0:c8:00:0a:07:79:0f:78:e2:ba:6e:ac: 92:1d:2f:4e:40:aa:50:e3:0b:29:60:14:98:de:63: 9c:b2:2a:c0:d6:12:3d:de:d2:bc:a3:b8:5c:92:95: f3:4c:c9:af:05:e7:9f:13:a6:a5:77:c5:bb:a1:a7: 4c:1e:04:5e:a3:f1:6d:9f:40:67:07:21:04:c1:f6: 99:b4:1e:51:43:e4:50:9a:62:b0:74:65:9d:c6:d2: ab:e1:62:13:33:b0:b2:d5:9f:a4:95:63:23:60:c4: b6:91:38:a3:4a:cc:ed:29:5a:2d:4e:57:0c:f7:ae: 3b:69:11:2d:31:8d:07:cd:e1:23:eb:36:34:b5:0b: 26:6d:47:84:df:b7:ab:49:c5:30:1a:cd:5c:78:09: e9:5c:f1:e2:45:ec:31:eb:dc:9c:74:90:5c:84:c2: 5f:b6:08:0a:a0:73:da:11:1f:08:4e:4f:30:9c:5d: 6b:4b:f1:2a:e6:0e:7f:d5:54:a9:a6:f3:83:47:c9: 21:0f:1e:dd:b0:e7:b1:58:44:c4:8e:f8:5c:7d:22: c4:40:55:07:57:9b:5c:a3:df:f3:21:da:ae:22:11: a4:0e:7b:89:4a:51:81:7f:75:25:92:9e:0c:01:0c: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:95:C9:CB:D9:F8:BB:79:D2:A0:41:65:BA:A9:AB:FB:81:40:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e61fc50-92ae-32a5-87db-36232c40b5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0a:39:08:9f:4e:63:ec:aa:2d:ad:fd:44:a5:fd:d9:c7:bc: 4d:99:77:c7:01:af:07:55:f9:17:c2:6e:83:f6:c6:be:8c:02: e4:33:53:01:0f:41:cb:17:8c:1e:90:d2:33:83:c5:29:78:2d: 24:b3:03:6f:fd:2f:ad:5f:39:03:f0:ac:3f:af:b3:23:4c:a0: c7:b1:51:ff:be:d6:24:72:14:ea:64:7f:45:3a:6e:d1:16:6f: 38:10:bf:3a:c2:22:3b:c1:b2:86:7a:aa:95:3c:57:64:77:e3: 70:6b:ac:cf:75:c9:d9:8f:b1:52:d2:60:09:5b:f9:12:50:a7: c9:f1:c6:5d:5b:9a:c2:ff:2d:f8:f2:80:8c:7c:06:9c:49:8b: 31:0d:d2:24:26:6e:8c:35:c4:3c:f8:ad:42:c1:47:8c:fa:12: c2:8e:e0:ce:cc:0b:b4:95:94:0c:4c:17:73:c2:75:ee:4c:03: bc:41:25:d6:30:41:23:8b:bc:37:7d:72:82:4f:f0:ea:2b:f9: 0b:32:2f:16:d1:c2:62:b9:24:f8:99:3a:31:84:99:3c:f2:38: 5f:96:0a:fe:34:3c:51:ab:55:ca:77:be:79:42:8c:f7:16:e3: 92:9f:8a:db:d7:eb:65:df:50:d4:54:3f:85:31:05:24:ad:46: 11:d2:5f:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heqYkxSTd/3Da6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk N2E4ZGZiYjktMGY0MC00MDQ2LThjZDItOTMzZjZlYTFhNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy2MTlFEOW54FVxi6C5HQeWgyAAKB3kPeOK6 bqySHS9OQKpQ4wspYBSY3mOcsirA1hI93tK8o7hckpXzTMmvBeefE6ald8W7oadM HgReo/Ftn0BnByEEwfaZtB5RQ+RQmmKwdGWdxtKr4WITM7Cy1Z+klWMjYMS2kTij SsztKVotTlcM9647aREtMY0HzeEj6zY0tQsmbUeE37erScUwGs1ceAnpXPHiRewx 69ycdJBchMJftggKoHPaER8ITk8wnF1rS/Eq5g5/1VSppvODR8khDx7dsOexWETE jvhcfSLEQFUHV5tco9/zIdquIhGkDnuJSlGBf3Ulkp4MAQyCSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+3lcnL2fi7edKgQWW6qav7gUDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWU2MWZjNTAtOTJhZS0z MmE1LTg3ZGItMzYyMzJjNDBiNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkKOQifTmPsqi2t/USl/dnHvE2Zd8cBrwdV+RfCboP2xr6MAuQzUwEP QcsXjB6Q0jODxSl4LSSzA2/9L61fOQPwrD+vsyNMoMexUf++1iRyFOpkf0U6btEW bzgQvzrCIjvBsoZ6qpU8V2R343BrrM91ydmPsVLSYAlb+RJQp8nxxl1bmsL/Lfjy gIx8BpxJizEN0iQmbow1xDz4rULBR4z6EsKO4M7MC7SVlAxMF3PCde5MA7xBJdYw QSOLvDd9coJP8Oor+QsyLxbRwmK5JPiZOjGEmTzyOF+WCv40PFGrVcp3vnlCjPcW 45KfitvX62XfUNRUP4UxBSStRhHSX1Q= -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:35 2026 by rpki-client