$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22bbb9d0-7294-3045-b57a-6ba58ec2afd3.roa File: 22bbb9d0-7294-3045-b57a-6ba58ec2afd3.roa (raw, json) Hash identifier: vttRRx2L9WfKeYXTlA1OAfkLAiRBmYVhWdBXSX4SwMs= Subject key identifier: 35:B3:CD:38:3B:28:85:EA:23:44:4D:9F:E7:C2:20:36:FF:59:AE:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFD7A8C504605271141BA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22bbb9d0-7294-3045-b57a-6ba58ec2afd3.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.231.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:d7:a8:c5:04:60:52:71:14:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=fa89582a-e241-4784-aa20-c8b70758d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:35:e9:00:c9:7c:c4:ec:38:7c:82:d7:f3:f5: c5:21:4d:c5:d1:b1:7a:41:9b:ed:d5:dd:e8:7d:f2: 16:d7:3c:09:cd:12:c1:fe:db:ac:1e:1a:28:9b:ab: 0b:b4:77:90:9a:de:de:b7:be:b1:36:c0:cc:72:00: fc:fc:10:64:bd:82:0b:e4:52:a1:31:84:6b:6c:b7: 3c:76:ec:6f:ba:a5:a0:da:27:8e:07:2d:01:0a:72: 9d:fa:20:6e:80:6f:7b:6f:ef:8e:77:fc:50:68:57: 0d:99:10:b4:32:35:22:6f:eb:ea:c7:bd:67:69:93: c5:7e:8d:f5:24:b8:df:c5:ab:7b:1f:2c:11:0f:1d: a3:d3:34:94:a7:6f:d3:c5:db:e4:73:a2:67:6b:06: 76:05:a4:ed:7d:02:d4:d5:5a:d8:bd:da:44:84:57: 65:63:53:60:ac:72:f2:86:51:ee:ad:fe:bd:dc:bd: 89:ee:4c:4a:9f:f5:3c:82:b3:1c:87:86:c1:40:99: 48:18:6c:4b:7b:5a:6b:ff:68:3f:f1:73:5b:0e:8c: f3:41:ad:af:a4:c3:d8:5f:3b:b3:6e:da:33:56:73: 3d:72:5d:c4:9e:c8:b0:ae:49:21:2d:df:8c:d0:48: d4:e3:d2:cb:f4:e9:19:15:e0:1a:67:46:da:e5:0f: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:CD:38:3B:28:85:EA:23:44:4D:9F:E7:C2:20:36:FF:59:AE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22bbb9d0-7294-3045-b57a-6ba58ec2afd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:24:78:fb:d2:72:61:3b:9a:3e:e5:c4:49:6a:d2:8a:38:f1: 11:60:2c:45:ca:87:97:fd:2a:09:f7:2b:d5:58:5f:f8:26:15: 64:8f:e8:bb:69:33:8c:60:91:d0:a2:04:93:b4:54:13:68:36: 1a:1b:02:37:6b:bd:69:65:fd:0b:0c:1e:42:46:80:1d:b3:a9: 06:e7:df:e9:c3:6d:97:c0:0d:07:21:ad:10:b3:a0:51:3a:32: c6:f1:29:05:7c:00:48:19:c8:55:9f:4a:d0:e4:c9:bb:c8:b0: 09:68:22:95:9b:00:6f:0b:8f:5a:e1:b1:bd:fd:ba:38:c7:7f: 58:3a:73:36:a7:06:05:55:41:23:04:e4:8b:99:18:5b:76:67: c9:27:ec:73:45:4a:8b:94:4e:66:ca:95:f9:bd:b8:10:35:05: 67:4b:a6:a9:e7:c0:63:ee:6b:75:c8:9f:9e:3d:f3:1a:1d:15: 4f:52:0f:5c:f5:02:57:eb:f0:de:ef:31:08:74:b5:c6:92:06: 08:0e:f0:59:9e:cf:bc:97:33:fd:55:fa:e0:dc:e8:ac:0a:01: 7a:0b:5b:09:c4:0c:cf:d1:b5:9f:07:74:b9:73:87:c0:cc:8c: 1e:ca:6e:eb:58:ab:9e:74:83:03:d9:2b:f4:7c:e3:2c:d2:04: b5:8b:7b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er9eoxQRgUnEUG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZmE4OTU4MmEtZTI0MS00Nzg0LWFhMjAtYzhiNzA3NThkMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDXpAMl8xOw4fILX8/XFIU3F0bF6QZvt1d3o ffIW1zwJzRLB/tusHhoom6sLtHeQmt7et76xNsDMcgD8/BBkvYIL5FKhMYRrbLc8 duxvuqWg2ieOBy0BCnKd+iBugG97b++Od/xQaFcNmRC0MjUib+vqx71naZPFfo31 JLjfxat7HywRDx2j0zSUp2/Txdvkc6JnawZ2BaTtfQLU1VrYvdpEhFdlY1NgrHLy hlHurf693L2J7kxKn/U8grMch4bBQJlIGGxLe1pr/2g/8XNbDozzQa2vpMPYXzuz btozVnM9cl3EnsiwrkkhLd+M0EjU49LL9OkZFeAaZ0ba5Q9bUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWzzTg7KIXqI0RNn+fCIDb/Wa7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjJiYmI5ZDAtNzI5NC0z MDQ1LWI1N2EtNmJhNThlYzJhZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMkePvScmE7mj7lxElq0oo48RFgLEXKh5f9Kgn3K9VYX/gmFWSP6Ltp M4xgkdCiBJO0VBNoNhobAjdrvWll/QsMHkJGgB2zqQbn3+nDbZfADQchrRCzoFE6 MsbxKQV8AEgZyFWfStDkybvIsAloIpWbAG8Lj1rhsb39ujjHf1g6czanBgVVQSME 5IuZGFt2Z8kn7HNFSouUTmbKlfm9uBA1BWdLpqnnwGPua3XIn5498xodFU9SD1z1 Alfr8N7vMQh0tcaSBggO8Fmez7yXM/1V+uDc6KwKAXoLWwnEDM/RtZ8HdLlzh8DM jB7KbutYq550gwPZK/R84yzSBLWLe6E= -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:48 2026 by rpki-client