$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068c603-5ef9-3feb-a13e-21b239a7beb4.roa File: 2068c603-5ef9-3feb-a13e-21b239a7beb4.roa (raw, json) Hash identifier: YLd47HwVkVsv+zq3jCmummdZvkODZzRAosQHe9VdcGc= Subject key identifier: D2:49:C7:67:85:68:0B:2A:E4:C8:4B:34:6F:53:2F:E7:A4:C0:E8:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A6E079751DEB515B6E900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068c603-5ef9-3feb-a13e-21b239a7beb4.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 24.251.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:6e:07:97:51:de:b5:15:b6:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=16704cbb-ae9e-48d0-adc9-49eeba2533ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:a4:f1:e7:ab:c1:0c:86:b6:41:30:a7:bc: e2:dd:d0:22:2d:71:b8:50:c6:c7:29:d0:d1:83:d3: 3a:63:fe:c9:a7:db:b5:63:f5:77:95:7f:c2:73:e6: 8c:ec:89:42:38:4d:4d:71:b4:03:10:cc:e9:2c:ef: dc:0d:ca:ce:bd:20:b1:13:ef:2f:c7:8b:43:08:79: ee:b6:5e:6e:99:1d:c2:dd:65:dd:e5:ac:91:c7:ca: 4c:8f:bb:84:3d:ba:2e:40:87:ac:67:77:f8:5e:4f: a4:82:6c:20:60:3d:fc:73:06:2f:56:e5:3c:f6:e6: be:1e:61:cf:68:4f:f0:7b:cc:6b:fe:e6:e3:e9:a5: 51:fb:c3:af:ac:8e:d3:0f:0b:73:e8:9b:d4:fb:c1: ab:9a:e9:5f:d7:44:f6:50:cc:b2:89:bb:05:ce:31: 52:42:7d:62:50:ec:c9:de:83:26:af:b0:2e:33:d5: ec:d2:2a:c6:a5:27:10:7d:ea:46:d5:37:37:1c:c0: 0a:b5:94:c0:58:58:e6:7d:78:bd:47:b5:ca:94:64: 5c:23:e7:31:a2:71:74:37:79:15:76:d7:a1:e0:7e: a6:25:70:ac:70:7f:5d:43:b6:1d:67:15:43:39:e0: 83:ed:71:e3:49:e1:e9:0d:00:9a:a5:5e:40:2a:15: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:49:C7:67:85:68:0B:2A:E4:C8:4B:34:6F:53:2F:E7:A4:C0:E8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068c603-5ef9-3feb-a13e-21b239a7beb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:73:40:9c:57:3f:07:4e:6c:3e:63:87:11:70:ae:b1:e2:72: a1:6f:62:fe:71:75:b8:6f:24:56:fa:0f:8e:c3:33:6b:27:ff: 7a:b1:bb:4e:38:58:27:29:a6:a9:f2:ab:da:89:4e:ad:48:63: 63:03:44:27:19:6a:97:db:99:66:c1:3a:73:0b:f2:09:dc:f6: 86:b9:ad:bc:f2:4f:f6:9b:42:4a:3b:11:81:61:0f:ae:ec:94: f1:12:98:92:10:30:fb:0c:b0:96:1a:76:62:5b:fe:9d:36:e6: 70:92:05:cb:c5:3c:b6:3a:62:97:b5:d4:e4:db:6e:72:98:f6: 58:e9:e2:2f:7d:0b:f1:55:76:8b:7d:79:a3:b0:04:2d:03:1e: a7:65:89:71:26:1c:36:31:9c:b5:86:76:47:53:d5:ad:b5:b9: ce:27:cc:6b:89:6f:78:1a:db:a0:71:89:f5:6f:89:90:09:c4: 7e:09:e6:68:4f:e3:c4:a0:42:e7:85:e3:78:20:e3:11:ed:32: 1c:a5:92:28:25:48:84:7e:15:6a:13:00:30:0d:4d:61:fd:2e: 3e:ae:c9:48:05:cf:79:e9:39:04:38:ff:db:39:a6:3f:6c:2e: 74:9f:a2:42:7a:29:a3:9c:db:8a:c4:86:3b:8a:79:3c:dc:b8: 9c:06:be:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSm4Hl1HetRW26QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MTY3MDRjYmItYWU5ZS00OGQwLWFkYzktNDllZWJhMjUzM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1ek8eerwQyGtkEwp7zi3dAiLXG4UMbHKdDR g9M6Y/7Jp9u1Y/V3lX/Cc+aM7IlCOE1NcbQDEMzpLO/cDcrOvSCxE+8vx4tDCHnu tl5umR3C3WXd5ayRx8pMj7uEPbouQIesZ3f4Xk+kgmwgYD38cwYvVuU89ua+HmHP aE/we8xr/ubj6aVR+8OvrI7TDwtz6JvU+8Grmulf10T2UMyyibsFzjFSQn1iUOzJ 3oMmr7AuM9Xs0irGpScQfepG1Tc3HMAKtZTAWFjmfXi9R7XKlGRcI+cxonF0N3kV dteh4H6mJXCscH9dQ7YdZxVDOeCD7XHjSeHpDQCapV5AKhUwHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJJx2eFaAsq5MhLNG9TL+ekwOipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2OGM2MDMtNWVmOS0z ZmViLWExM2UtMjFiMjM5YTdiZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5zQJxXPwdObD5jhxFwrrHicqFvYv5xdbhvJFb6D47DM2sn/3qxu044 WCcppqnyq9qJTq1IY2MDRCcZapfbmWbBOnML8gnc9oa5rbzyT/abQko7EYFhD67s lPESmJIQMPsMsJYadmJb/p025nCSBcvFPLY6Ype11OTbbnKY9ljp4i99C/FVdot9 eaOwBC0DHqdliXEmHDYxnLWGdkdT1a21uc4nzGuJb3ga26BxifVviZAJxH4J5mhP 48SgQueF43gg4xHtMhylkiglSIR+FWoTADANTWH9Lj6uyUgFz3npOQQ4/9s5pj9s LnSfokJ6KaOc24rEhjuKeTzcuJwGvkA= -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:05 2026 by rpki-client