$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa File: 23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa (raw, json) Hash identifier: 4JFAGbLhkK2ihkzlvyuV6SGlern0PaHeYZBuIUKvwK4= Subject key identifier: DD:AC:73:4A:B7:F2:CA:E3:63:EF:F7:06:FD:77:7B:DC:81:EF:51:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9A7FB6AA4072827D021C2100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 68.2.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:b6:aa:40:72:82:7d:02:1c:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=8eccf862-a13a-4dc0-a41f-d487c1ff37f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:6d:ed:82:df:7a:a7:52:9d:9f:32:e0:c3: ba:e9:66:e4:0d:93:cd:a4:b9:0a:1d:a5:8d:25:9b: e6:2d:35:e8:92:51:f8:f7:e5:31:fa:66:09:11:8c: 18:0b:2f:0c:3d:39:57:a0:6c:bd:cf:fa:54:0c:7b: 59:2a:f6:cd:a1:7e:95:e9:43:60:34:44:df:25:6e: f4:7a:42:61:88:45:d6:06:9c:88:fc:d9:c3:d5:04: 0c:7f:5e:54:28:7e:ef:7a:88:21:67:26:fa:94:ed: 7d:a9:7d:74:f5:50:7b:a2:fb:d6:d8:75:3b:05:f5: 4c:64:19:a4:46:4a:ae:db:c4:32:9d:46:42:c2:1f: 31:5e:83:8c:e6:98:df:2e:92:00:f5:5a:5b:a3:68: 64:49:8e:7c:48:60:0b:de:c6:55:45:cf:49:46:f0: ef:21:97:c7:44:1a:88:94:34:6d:5d:db:2e:bd:d5: 6c:9b:93:09:e8:49:f5:5e:23:1f:17:e1:b6:1a:92: 67:c0:3d:00:89:07:de:f2:33:c7:bf:10:2f:bd:34: f6:de:22:00:d3:29:16:77:98:24:b5:75:bd:85:2a: c3:ea:53:cf:66:d1:b7:8c:72:d4:53:68:c0:cd:12: 36:47:58:9f:9b:a4:89:db:3a:26:8b:11:0a:71:ca: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AC:73:4A:B7:F2:CA:E3:63:EF:F7:06:FD:77:7B:DC:81:EF:51:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6b:3b:59:09:21:93:1d:a3:f2:e2:d2:b7:0c:14:56:05:57: 48:aa:0e:ef:cd:a5:79:ed:64:6d:6c:93:d7:f9:d3:ae:87:e6: 2c:66:da:2f:c6:f7:96:a1:27:be:e3:d1:03:2c:2e:06:13:2f: 03:9d:66:99:55:cd:22:9b:5d:93:f6:8c:37:d6:9d:3e:a8:10: 50:4e:57:82:38:0c:ca:42:bb:37:16:9d:d8:d6:ab:50:ea:3f: 8c:98:64:6c:97:02:9c:22:16:5b:2a:6d:c3:d4:72:f8:5a:75: af:06:c1:29:0b:ac:b2:b2:41:15:b3:1c:dc:a4:d8:13:0f:7a: 0c:21:82:d6:b4:36:48:8c:d0:be:6f:21:f1:91:0c:24:a1:05: 70:20:12:37:3e:05:53:1b:4a:ea:12:2f:f2:e3:c4:3d:26:c7: c1:1e:fc:61:9b:dd:d1:cb:49:0c:da:cc:b9:bd:31:08:b7:e0: c6:c6:02:b8:e6:8a:52:05:6d:7a:df:d7:7f:30:88:69:dc:5a: eb:c2:02:8f:83:25:fe:b7:9f:fb:c8:d1:b4:45:75:a7:38:ef: de:32:77:f6:d1:97:72:59:fa:8a:56:f1:40:ac:03:12:ca:2a: ec:fb:dd:74:30:43:58:95:e2:c4:4a:8f:11:fd:ae:64:d4:59: d3:af:1d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7aqQHKCfQIcIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk OGVjY2Y4NjItYTEzYS00ZGMwLWE0MWYtZDQ4N2MxZmYzN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZNt7YLfeqdSnZ8y4MO66WbkDZPNpLkKHaWN JZvmLTXoklH49+Ux+mYJEYwYCy8MPTlXoGy9z/pUDHtZKvbNoX6V6UNgNETfJW70 ekJhiEXWBpyI/NnD1QQMf15UKH7veoghZyb6lO19qX109VB7ovvW2HU7BfVMZBmk Rkqu28QynUZCwh8xXoOM5pjfLpIA9Vpbo2hkSY58SGAL3sZVRc9JRvDvIZfHRBqI lDRtXdsuvdVsm5MJ6En1XiMfF+G2GpJnwD0AiQfe8jPHvxAvvTT23iIA0ykWd5gk tXW9hSrD6lPPZtG3jHLUU2jAzRI2R1ifm6SJ2zomixEKccq2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2sc0q38srjY+/3Bv13e9yB71EhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNiNjM2YTYtZTNhMS0z NWVhLWE2Y2EtYjNmNzllOTdkMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAprO1kJIZMdo/Li0rcMFFYFV0iqDu/NpXntZG1sk9f5066H5ixm2i/G 95ahJ77j0QMsLgYTLwOdZplVzSKbXZP2jDfWnT6oEFBOV4I4DMpCuzcWndjWq1Dq P4yYZGyXApwiFlsqbcPUcvhada8GwSkLrLKyQRWzHNyk2BMPegwhgta0NkiM0L5v IfGRDCShBXAgEjc+BVMbSuoSL/LjxD0mx8Ee/GGb3dHLSQzazLm9MQi34MbGArjm ilIFbXrf138wiGncWuvCAo+DJf63n/vI0bRFdac4794yd/bRl3JZ+opW8UCsAxLK Kuz73XQwQ1iV4sRKjxH9rmTUWdOvHQ4= -----END CERTIFICATE-----Generated at Wed Jul 29 00:11:03 2026 by rpki-client