$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa File: 2068fb4a-98b3-3410-9859-e3769e0dd577.roa (raw, json) Hash identifier: b1PiUrKjibqmWKN6XbeC1trTkI5vBQdx1clt2lmcfQo= Subject key identifier: 8C:7A:27:13:7A:E5:67:74:CB:1F:45:1B:85:D6:F7:F7:7D:A8:E4:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01584568CB92EFD88040B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.223.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:84:56:8c:b9:2e:fd:88:04:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=07198c06-9bb0-4b5e-9633-b7615e1dbf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:68:22:a4:a5:1a:23:0f:26:8c:e2:eb:ad: 7a:d3:86:c2:1f:91:3a:43:08:29:75:d4:ef:92:a3: a3:5c:8b:17:f5:fb:f8:df:72:46:32:17:dc:88:cd: c7:58:a4:e8:62:ca:3e:21:bf:de:a2:84:4c:41:2c: f6:fd:3e:96:aa:75:67:c6:9c:44:40:b5:2e:69:1d: c5:bd:c6:b8:2b:7e:39:33:2d:ba:3c:6e:b6:6c:82: c0:b7:98:f8:fe:8b:8f:bd:fe:dd:e3:a9:99:35:c2: 87:63:3d:1a:1f:c6:fd:4e:a8:db:c6:73:41:5b:c3: 2a:d5:c5:e3:2e:77:fa:2a:17:4c:ee:ed:8a:10:22: 75:ad:6c:84:95:db:0d:d8:81:5a:68:05:ed:7a:d8: b6:84:fb:67:e0:d5:db:87:b2:05:14:b3:f4:4f:1a: 86:cc:37:e1:cd:e5:13:e8:ae:8f:f5:07:63:ca:0c: b8:f1:35:29:49:77:ec:68:76:b3:07:3d:5d:5c:69: 93:9a:9d:00:fd:db:89:8c:95:12:54:7c:2b:70:57: 3c:61:91:e2:7b:b6:32:89:1f:a4:9a:70:a0:8a:47: f7:12:b3:0f:66:6d:b2:85:00:9b:c7:e6:da:e9:f4: 23:a1:ed:f2:94:eb:80:3e:f0:aa:3a:d4:58:ea:ee: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:27:13:7A:E5:67:74:CB:1F:45:1B:85:D6:F7:F7:7D:A8:E4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2068fb4a-98b3-3410-9859-e3769e0dd577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:44:31:c5:0a:f9:97:bb:39:91:46:54:76:5b:be:53:7d:cf: 16:f2:56:64:32:98:df:49:d5:bd:25:81:76:a3:fa:e5:06:7f: 24:40:0a:37:fc:b1:4b:e4:8c:20:c3:c2:6a:61:0a:0c:01:9c: ff:f9:ff:8b:34:e5:d2:e1:82:bd:1e:9e:07:7d:8b:ac:34:17: e8:da:f8:4f:2c:e5:95:21:26:e0:78:14:db:6c:70:67:46:c8: 0e:6a:cf:48:41:85:e9:fd:b0:13:56:e2:05:76:c5:13:c9:89: 5c:6d:85:2d:87:98:0a:e8:6a:9d:7d:82:7b:fe:13:0c:ae:d5: 81:22:ec:e6:d5:50:ac:00:9b:b4:d9:c5:bf:5c:52:69:9a:37: 24:65:3f:85:fe:a0:f0:a3:04:ab:89:bf:9c:b2:fd:8a:2c:1d: 07:fb:2d:49:42:c6:b9:39:71:10:65:30:67:a6:c7:5e:9b:7e: 60:3a:77:66:36:42:af:fd:a8:a0:08:72:7d:f5:57:7c:90:33: dd:08:04:b2:37:15:9d:49:68:04:c6:d3:80:4e:7f:f9:9e:9e: c7:1a:6b:e5:aa:6a:43:8c:07:77:aa:94:d3:4c:6d:a5:d3:b1: 54:3e:0d:60:5a:e0:f5:4a:7c:ba:bc:79:b9:cf:b4:a9:91:b9: 8c:1b:5b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFYRWjLku/YgEC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDcxOThjMDYtOWJiMC00YjVlLTk2MzMtYjc2MTVlMWRiZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIdoIqSlGiMPJozi661604bCH5E6QwgpddTv kqOjXIsX9fv433JGMhfciM3HWKToYso+Ib/eooRMQSz2/T6WqnVnxpxEQLUuaR3F vca4K345My26PG62bILAt5j4/ouPvf7d46mZNcKHYz0aH8b9TqjbxnNBW8Mq1cXj Lnf6KhdM7u2KECJ1rWyEldsN2IFaaAXteti2hPtn4NXbh7IFFLP0TxqGzDfhzeUT 6K6P9Qdjygy48TUpSXfsaHazBz1dXGmTmp0A/duJjJUSVHwrcFc8YZHie7YyiR+k mnCgikf3ErMPZm2yhQCbx+ba6fQjoe3ylOuAPvCqOtRY6u7q8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx6JxN65Wd0yx9FG4XW9/d9qOSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2OGZiNGEtOThiMy0z NDEwLTk4NTktZTM3NjllMGRkNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN9cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxEMcUK+Ze7OZFGVHZbvlN9zxbyVmQymN9J1b0lgXaj+uUGfyRACjf8 sUvkjCDDwmphCgwBnP/5/4s05dLhgr0engd9i6w0F+ja+E8s5ZUhJuB4FNtscGdG yA5qz0hBhen9sBNW4gV2xRPJiVxthS2HmAroap19gnv+Ewyu1YEi7ObVUKwAm7TZ xb9cUmmaNyRlP4X+oPCjBKuJv5yy/YosHQf7LUlCxrk5cRBlMGemx16bfmA6d2Y2 Qq/9qKAIcn31V3yQM90IBLI3FZ1JaATG04BOf/menscaa+WqakOMB3eqlNNMbaXT sVQ+DWBa4PVKfLq8ebnPtKmRuYwbW6E= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:18 2026 by rpki-client