$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa File: 214cbfa4-dda2-3cf0-bd78-377280372513.roa (raw, json) Hash identifier: YEJr0hl0xB6af5CFZpbfBUBM1ZdXSDMVLszdB4h8ahI= Subject key identifier: 49:85:59:4D:7A:36:B0:27:74:6F:5F:29:AB:97:D1:8D:83:0A:25:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9A7FB239FAE692C0DE46CD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 68.2.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:b2:39:fa:e6:92:c0:de:46:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=21e2404b-8e61-445a-9e7e-3ae07e35d10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:72:81:51:35:b6:70:6c:0a:f7:a4:bf:f8: 98:cf:cb:da:5d:52:57:2e:9b:e3:64:e8:67:6f:a7: 00:db:ed:25:b5:eb:04:ec:40:72:75:30:67:ec:69: f8:1c:65:ab:fe:35:bf:51:c0:1a:83:0b:5e:b0:2a: 63:d2:a8:a3:23:6d:f6:8d:15:ba:bd:71:1b:8e:7a: c3:85:5d:84:39:01:a1:ce:9f:4f:af:22:73:e8:a5: bf:45:cd:c1:cf:fb:3e:48:c5:be:34:15:22:a3:6f: 7e:4b:cd:0f:de:66:39:6d:8e:11:5a:b5:0e:cc:d1: 2a:8f:00:cf:53:f1:12:9c:44:60:6b:96:03:d6:97: 41:12:e3:c3:4d:e9:d3:88:a1:31:56:03:3f:b0:c7: 31:a3:eb:70:52:2e:cd:29:5d:05:09:e2:54:c6:3c: 7f:0d:7d:88:65:27:ad:fa:ab:12:69:1f:d0:b5:98: 47:1e:aa:94:9d:79:92:e7:22:a7:22:54:0d:ac:94: c7:89:4a:6e:c4:2a:e9:3c:84:e1:51:41:8c:fe:c4: 26:58:16:22:bd:d7:c3:52:6e:3e:7f:e4:c1:1e:6a: 75:85:c4:28:7a:d0:04:29:b4:50:f9:33:9b:ce:17: dd:51:8f:36:ad:96:12:01:e6:27:45:8b:7f:a8:23: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:85:59:4D:7A:36:B0:27:74:6F:5F:29:AB:97:D1:8D:83:0A:25:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f7:c8:49:cd:bc:9b:2e:e5:4b:f4:35:5f:91:9c:31:c7:f7: 6d:80:78:95:70:f3:ef:34:72:ed:df:1a:75:51:62:35:0e:2f: d8:94:52:7c:24:f8:39:01:ea:6b:98:e9:ff:4e:78:f0:3b:aa: c7:68:91:0a:92:1f:73:d5:5d:f6:de:8a:77:67:63:42:8d:a5: f9:70:fb:e4:0c:7f:9c:f8:b3:ad:78:4b:d3:53:1a:4f:f5:cb: ec:b0:c6:3c:e5:ab:d6:01:99:84:ac:5b:f4:82:e8:c5:99:34: c0:7d:c3:df:d8:8a:ae:10:b9:0a:0f:4b:54:cb:08:bf:b1:86: 3e:5a:c0:ef:2a:11:c5:54:c0:95:e1:ae:58:a6:51:4b:86:27: bc:a6:c2:f9:98:6e:c0:69:57:10:8b:da:02:c2:6c:ed:6b:aa: 85:9a:b1:e4:42:a7:cc:36:1d:ca:d4:4b:a7:2c:08:97:6b:69: 89:4f:96:1d:5c:5e:e3:08:84:19:72:36:ec:2e:50:5b:b9:93: 85:d3:99:e1:b1:17:e0:7a:e5:c4:66:d2:5c:8b:33:a0:3a:93: 9f:ee:ad:ed:4c:8a:d0:32:f3:ca:37:67:0f:60:82:97:f9:e6: c7:30:d8:a4:7a:db:92:e0:48:23:8a:14:0d:b7:5e:d6:3a:bf: 1f:0a:37:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7I5+uaSwN5GzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MjFlMjQwNGItOGU2MS00NDVhLTllN2UtM2FlMDdlMzVkMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydZygVE1tnBsCvekv/iYz8vaXVJXLpvjZOhn b6cA2+0ltesE7EBydTBn7Gn4HGWr/jW/UcAagwtesCpj0qijI232jRW6vXEbjnrD hV2EOQGhzp9PryJz6KW/Rc3Bz/s+SMW+NBUio29+S80P3mY5bY4RWrUOzNEqjwDP U/ESnERga5YD1pdBEuPDTenTiKExVgM/sMcxo+twUi7NKV0FCeJUxjx/DX2IZSet +qsSaR/QtZhHHqqUnXmS5yKnIlQNrJTHiUpuxCrpPIThUUGM/sQmWBYivdfDUm4+ f+TBHmp1hcQoetAEKbRQ+TObzhfdUY82rZYSAeYnRYt/qCNFPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmFWU16NrAndG9fKauX0Y2DCiXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE0Y2JmYTQtZGRhMi0z Y2YwLWJkNzgtMzc3MjgwMzcyNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb3yEnNvJsu5Uv0NV+RnDHH922AeJVw8+80cu3fGnVRYjUOL9iUUnwk +DkB6muY6f9OePA7qsdokQqSH3PVXfbeindnY0KNpflw++QMf5z4s614S9NTGk/1 y+ywxjzlq9YBmYSsW/SC6MWZNMB9w9/Yiq4QuQoPS1TLCL+xhj5awO8qEcVUwJXh rlimUUuGJ7ymwvmYbsBpVxCL2gLCbO1rqoWaseRCp8w2HcrUS6csCJdraYlPlh1c XuMIhBlyNuwuUFu5k4XTmeGxF+B65cRm0lyLM6A6k5/ure1MitAy88o3Zw9ggpf5 5scw2KR625LgSCOKFA23XtY6vx8KN6o= -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:25 2026 by rpki-client