$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/228c3a7f-b86a-3970-a66b-8269c16c5963.roa File: 228c3a7f-b86a-3970-a66b-8269c16c5963.roa (raw, json) Hash identifier: ixQjEANwnv7LAuZmnagRzKgpnMnRX1YXizeq0QNv/uM= Subject key identifier: 61:BE:65:C6:FB:E9:24:98:CD:F5:31:68:88:3F:FE:4A:1E:E4:47:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A6D1E8DD4CD8CDF9B9080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/228c3a7f-b86a-3970-a66b-8269c16c5963.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.229.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:6d:1e:8d:d4:cd:8c:df:9b:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=9358f655-bbd9-4ef7-901c-ee2853056cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:a4:72:93:3c:fa:f7:84:9c:d6:d2:06:53: e7:87:16:d3:69:3c:2b:fa:42:e2:57:fd:cb:fe:83: f8:0d:87:c0:cc:63:3d:34:96:c4:40:b6:3f:98:84: 2f:ac:2d:d1:06:7f:95:b3:89:01:d3:4a:f7:83:89: 8d:58:b0:59:bf:ce:06:09:37:58:79:73:a4:48:5f: 60:60:c2:f3:c6:cb:89:99:81:ce:0d:f7:78:3a:35: 1d:7e:15:2b:4f:5a:d2:36:6c:65:67:93:61:ab:5c: 91:ab:8c:58:63:dd:65:82:71:e1:e5:ee:56:64:bd: a6:6e:2e:11:d7:5e:64:bd:0c:5a:51:8e:91:37:16: c5:c9:c5:07:6a:62:c0:91:fe:78:e9:71:40:4d:d9: d9:2f:70:f4:fb:bf:b8:cb:17:1d:c6:27:71:ee:00: 31:e8:fd:d0:bd:55:1a:35:8d:d7:15:78:27:ae:65: 4b:ba:65:0c:5b:94:8d:d4:ac:e1:c7:79:db:88:69: 97:06:ee:4c:29:6b:34:7b:b2:76:d8:dc:44:8b:57: 93:0d:c9:f6:fc:e7:0c:af:19:62:3c:54:35:ea:a9: 93:7b:9a:6a:34:fd:2f:ac:64:10:87:c9:ac:d5:f2: 32:c7:f3:81:5f:7a:78:02:64:f2:fe:6c:fa:8e:52: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BE:65:C6:FB:E9:24:98:CD:F5:31:68:88:3F:FE:4A:1E:E4:47:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/228c3a7f-b86a-3970-a66b-8269c16c5963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:11:f9:ba:c8:fc:99:e4:18:67:b7:16:f3:6e:d5:b7:e6:79: cf:7b:3d:e5:6c:ea:ac:32:05:02:f6:09:cd:78:64:2d:73:3b: d6:46:5e:2d:25:bf:98:44:86:d0:c9:a8:c4:f8:3d:60:12:e2: ac:44:05:79:fe:2b:95:e1:91:ac:f0:f0:13:51:bf:36:6c:84: d6:71:61:0c:8f:f5:cc:16:72:3a:76:1a:b6:dc:16:53:2b:9b: 3e:09:e4:89:2b:38:84:a6:22:29:6a:8a:4c:e1:1c:b8:89:9b: 8f:19:31:67:73:74:55:ce:81:f1:c9:90:d5:99:d5:1a:94:fe: e4:98:c4:d2:50:04:54:40:5c:08:2d:f8:43:92:80:3f:25:c7: 08:a7:05:38:53:b1:36:ee:3f:d7:24:f0:da:57:60:8b:bf:1e: fd:3b:1f:42:db:c0:c4:e6:96:a2:0a:99:1c:3f:a4:fc:1f:29: 3c:b4:a5:ef:46:f0:60:0d:2f:a2:b2:5c:b8:ac:b1:85:a6:d2: 18:c0:22:c6:06:55:92:0a:57:b2:ed:0c:90:f1:f5:e1:b5:70: 57:60:41:a5:43:fd:25:77:3c:c8:a4:34:7a:12:60:98:ec:bb: 7b:40:a0:c5:a0:42:77:73:cb:7a:2c:7a:9e:81:5c:c8:1e:5d: a4:1e:51:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hem0ejdTNjN+bkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk OTM1OGY2NTUtYmJkOS00ZWY3LTkwMWMtZWUyODUzMDU2Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqOkcpM8+veEnNbSBlPnhxbTaTwr+kLiV/3L /oP4DYfAzGM9NJbEQLY/mIQvrC3RBn+Vs4kB00r3g4mNWLBZv84GCTdYeXOkSF9g YMLzxsuJmYHODfd4OjUdfhUrT1rSNmxlZ5Nhq1yRq4xYY91lgnHh5e5WZL2mbi4R 115kvQxaUY6RNxbFycUHamLAkf546XFATdnZL3D0+7+4yxcdxidx7gAx6P3QvVUa NY3XFXgnrmVLumUMW5SN1Kzhx3nbiGmXBu5MKWs0e7J22NxEi1eTDcn2/OcMrxli PFQ16qmTe5pqNP0vrGQQh8ms1fIyx/OBX3p4AmTy/mz6jlJQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG+Zcb76SSYzfUxaIg//koe5EcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI4YzNhN2YtYjg2YS0z OTcwLWE2NmItODI2OWMxNmM1OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAR+brI/JnkGGe3FvNu1bfmec97PeVs6qwyBQL2Cc14ZC1zO9ZGXi0l v5hEhtDJqMT4PWAS4qxEBXn+K5Xhkazw8BNRvzZshNZxYQyP9cwWcjp2GrbcFlMr mz4J5IkrOISmIilqikzhHLiJm48ZMWdzdFXOgfHJkNWZ1RqU/uSYxNJQBFRAXAgt +EOSgD8lxwinBThTsTbuP9ck8NpXYIu/Hv07H0LbwMTmlqIKmRw/pPwfKTy0pe9G 8GANL6KyXLissYWm0hjAIsYGVZIKV7LtDJDx9eG1cFdgQaVD/SV3PMikNHoSYJjs u3tAoMWgQndzy3osep6BXMgeXaQeUa4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:56:53 2026 by rpki-client