$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f7f2aad-f05f-3445-b07f-f31614efc06f.roa File: 1f7f2aad-f05f-3445-b07f-f31614efc06f.roa (raw, json) Hash identifier: I6m6wzQg9yaqfc0KkQhAk1/sRUYawc3D/0tW9rEfXCE= Subject key identifier: 32:A5:70:12:2F:78:F2:EE:FC:35:79:1E:78:D7:87:E4:F5:24:0A:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB00BC5E3BA0DA332E746C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f7f2aad-f05f-3445-b07f-f31614efc06f.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.228.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:0b:c5:e3:ba:0d:a3:32:e7:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=2c548bb6-cb0d-4c60-8933-ac3eea2870cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:38:54:92:2c:e1:a8:a6:fe:37:c1:6e:70: b0:cb:b6:be:1a:79:65:39:8b:50:d1:42:d7:bb:33: d4:65:9f:48:55:1a:4a:e4:23:62:5a:b8:e3:1a:7c: f3:27:ab:21:38:32:25:84:83:83:fe:16:5f:b5:bc: 2e:63:45:5c:c4:8f:39:7c:6b:0b:bb:b7:6a:d6:9d: 62:90:9f:0f:5a:99:f1:9c:f9:22:79:4e:48:59:ad: dc:28:01:58:bc:12:c5:27:b4:1f:3a:73:7d:d7:d7: 9d:6c:51:d6:48:a6:23:cd:8f:86:5e:47:47:a6:80: 40:c9:5e:40:23:e1:6b:35:29:fb:bb:75:00:a3:57: ea:9f:c8:a1:37:3f:94:4e:d8:20:5f:b6:8e:cf:72: 16:02:ac:21:fa:4f:71:33:b7:55:81:e4:ee:12:a7: ed:97:13:16:90:e8:88:5f:06:5b:7d:98:e1:4b:1b: b4:d9:b6:80:ec:b3:b3:b4:8f:35:62:0e:94:e6:1a: b1:93:26:a3:e1:64:e2:09:68:6c:46:3d:b3:24:bb: bc:94:61:47:02:21:41:86:ee:a3:eb:42:24:a6:d5: a6:7d:76:97:2d:1f:28:56:b3:10:ae:be:62:79:0f: 3d:96:c6:61:78:1f:de:3b:a7:18:c2:01:93:99:71: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A5:70:12:2F:78:F2:EE:FC:35:79:1E:78:D7:87:E4:F5:24:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f7f2aad-f05f-3445-b07f-f31614efc06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a9:43:58:6c:71:4f:eb:00:b4:0d:90:71:10:05:06:fd:af: 2b:8c:2e:f7:60:bd:1c:15:f0:c7:f0:b8:23:4d:8f:71:39:be: b4:68:0c:1d:45:12:40:cf:fa:29:a3:01:38:91:48:c9:b9:93: 84:98:f6:96:cf:e2:6b:a7:4b:3c:66:c8:36:fc:51:0f:24:d8: 49:dd:9d:e4:a0:fa:4d:bf:0e:bf:75:18:7b:b1:7b:ed:ce:c0: 45:95:0a:46:67:cb:d2:94:5c:22:0e:ea:18:07:71:bb:20:be: 15:10:81:23:58:6b:37:f5:b1:b6:6d:5e:76:d0:79:5d:dc:d2: ad:67:e1:7a:a6:f6:66:42:c4:1c:d2:40:6e:6b:f6:24:e9:1b: e2:6c:27:a2:fd:f5:6f:71:91:28:1c:7a:2a:4c:30:19:32:e8: cc:c3:e6:6f:3b:c3:47:7b:54:73:72:b6:b1:ab:d1:cc:f9:9a: 3c:c9:e0:9c:36:4e:dd:4e:ea:7c:de:1d:47:38:66:36:c4:3e: 2c:61:fb:6b:e5:22:54:c7:e8:d3:d0:9e:d1:30:69:9f:19:73: 8d:97:43:29:91:40:19:ad:a9:f3:7a:31:cb:85:bf:aa:87:ca: bb:e8:5a:e6:8d:41:4f:c8:72:f9:bf:67:e6:ea:2a:82:f1:95: 21:97:fa:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esAvF47oNozLnRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MmM1NDhiYjYtY2IwZC00YzYwLTg5MzMtYWMzZWVhMjg3MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkco4VJIs4aim/jfBbnCwy7a+GnllOYtQ0ULX uzPUZZ9IVRpK5CNiWrjjGnzzJ6shODIlhIOD/hZftbwuY0VcxI85fGsLu7dq1p1i kJ8PWpnxnPkieU5IWa3cKAFYvBLFJ7QfOnN919edbFHWSKYjzY+GXkdHpoBAyV5A I+FrNSn7u3UAo1fqn8ihNz+UTtggX7aOz3IWAqwh+k9xM7dVgeTuEqftlxMWkOiI XwZbfZjhSxu02baA7LOztI81Yg6U5hqxkyaj4WTiCWhsRj2zJLu8lGFHAiFBhu6j 60IkptWmfXaXLR8oVrMQrr5ieQ89lsZheB/eO6cYwgGTmXF3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKlcBIvePLu/DV5HnjXh+T1JArJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY3ZjJhYWQtZjA1Zi0z NDQ1LWIwN2YtZjMxNjE0ZWZjMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGapQ1hscU/rALQNkHEQBQb9ryuMLvdgvRwV8MfwuCNNj3E5vrRoDB1F EkDP+imjATiRSMm5k4SY9pbP4munSzxmyDb8UQ8k2EndneSg+k2/Dr91GHuxe+3O wEWVCkZny9KUXCIO6hgHcbsgvhUQgSNYazf1sbZtXnbQeV3c0q1n4Xqm9mZCxBzS QG5r9iTpG+JsJ6L99W9xkSgceipMMBky6MzD5m87w0d7VHNytrGr0cz5mjzJ4Jw2 Tt1O6nzeHUc4ZjbEPixh+2vlIlTH6NPQntEwaZ8Zc42XQymRQBmtqfN6McuFv6qH yrvoWuaNQU/Icvm/Z+bqKoLxlSGX+vk= -----END CERTIFICATE-----Generated at Wed Jul 29 06:15:10 2026 by rpki-client