$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/276fc77c-1f79-35a7-87d6-61d4dcfc8c1e.roa File: 276fc77c-1f79-35a7-87d6-61d4dcfc8c1e.roa (raw, json) Hash identifier: xB/OLMWJyWB8C0gfk/UWEOf5EZlRX+bVdRp13sNok4g= Subject key identifier: 45:97:7A:88:97:37:AD:3C:E5:7D:C9:59:AC:9B:67:0B:57:7B:1F:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFC65A37B0BBF11ABC0300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/276fc77c-1f79-35a7-87d6-61d4dcfc8c1e.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.231.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:c6:5a:37:b0:bb:f1:1a:bc:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=c5dc87ba-fdf0-4e6a-b0a6-ca1c75cc6645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:e1:45:de:a4:20:3f:6c:44:2c:34:55:35: 48:04:23:c2:e1:13:23:3a:80:40:bd:89:df:e8:77: 35:83:85:3b:4e:8f:90:ac:91:cf:e8:17:d9:f0:f5: eb:da:16:ad:fc:59:db:17:44:c8:4e:78:05:d2:d0: 84:2e:c3:f0:6f:27:14:a9:11:a7:ed:7d:52:8b:31: 2d:59:45:c2:61:1d:2c:97:72:ed:3a:ae:5d:6a:73: e0:0f:28:ce:6b:1c:14:37:73:f7:fa:bc:8e:5e:a5: f5:a5:4c:0a:b0:9b:de:35:33:07:48:24:a3:25:c7: ab:a9:1b:65:26:5f:34:e3:55:6a:33:e8:79:69:a1: b2:bd:38:32:12:24:5d:94:66:d6:a3:4a:f8:89:06: 24:be:44:a3:20:1c:0b:55:ff:18:91:4b:c0:d4:35: df:11:92:0e:99:bf:51:44:ed:57:ca:a9:aa:e4:a9: c7:7d:34:d3:01:cd:22:bc:de:3f:2c:d9:5d:df:89: ff:8b:e6:38:40:b4:55:25:0b:00:8e:7d:20:3c:27: 00:79:88:e9:80:62:49:91:f3:21:2d:dd:f9:20:f2: 28:e2:e2:be:d6:55:18:ee:ab:a1:67:ee:7a:3b:9a: ea:73:e0:cf:12:97:5f:5a:a7:57:df:56:8a:d7:31: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:97:7A:88:97:37:AD:3C:E5:7D:C9:59:AC:9B:67:0B:57:7B:1F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/276fc77c-1f79-35a7-87d6-61d4dcfc8c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e4:02:1d:e0:d6:2a:78:77:2e:5d:21:16:80:05:33:55:70: df:07:10:25:03:12:11:1a:06:f8:13:d7:43:b0:19:81:cb:69: 20:5e:73:74:ee:8f:32:f2:1a:0e:b0:cd:de:15:04:c5:9e:21: aa:af:c2:e0:6b:ec:e2:12:77:29:56:78:56:7a:1d:1a:72:5b: b4:b8:28:67:44:7e:00:98:73:7d:08:6c:a7:82:d4:58:8a:a0: e9:e5:01:c3:fa:d2:46:37:8f:cf:71:77:b1:34:49:9e:42:77: 24:d1:96:77:03:08:5a:0a:29:69:d5:56:eb:ea:73:6d:9f:d1: a4:dc:1d:7d:1e:7a:3b:ea:2c:35:61:7c:ac:b6:36:b5:2b:8b: d3:95:42:b6:81:7d:07:50:17:c9:75:b4:5e:87:5d:27:dc:63: f5:98:ca:ef:3e:8c:5e:f0:81:d1:78:be:e5:aa:d9:ab:ef:09: 6b:e4:70:85:f1:61:f0:e6:8d:c0:28:a4:b7:e8:0e:b7:d8:ab: 75:9f:6d:d3:f6:f9:18:ff:70:17:64:fd:66:f9:76:ea:43:4e: b5:ad:38:f9:d3:58:2a:a8:c0:33:68:3a:c3:df:89:43:55:ec: 85:ef:47:dc:ee:cf:a1:14:9a:39:12:56:b7:05:e6:9f:53:80: 07:e4:9b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er8ZaN7C78Rq8AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk YzVkYzg3YmEtZmRmMC00ZTZhLWIwYTYtY2ExYzc1Y2M2NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjrhRd6kID9sRCw0VTVIBCPC4RMjOoBAvYnf 6Hc1g4U7To+QrJHP6BfZ8PXr2hat/FnbF0TITngF0tCELsPwbycUqRGn7X1SizEt WUXCYR0sl3LtOq5danPgDyjOaxwUN3P3+ryOXqX1pUwKsJveNTMHSCSjJcerqRtl Jl8041VqM+h5aaGyvTgyEiRdlGbWo0r4iQYkvkSjIBwLVf8YkUvA1DXfEZIOmb9R RO1Xyqmq5KnHfTTTAc0ivN4/LNld34n/i+Y4QLRVJQsAjn0gPCcAeYjpgGJJkfMh Ld35IPIo4uK+1lUY7quhZ+56O5rqc+DPEpdfWqdX31aK1zEVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWXeoiXN6085X3JWaybZwtXex8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjc2ZmM3N2MtMWY3OS0z NWE3LTg3ZDYtNjFkNGRjZmM4YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjkAh3g1ip4dy5dIRaABTNVcN8HECUDEhEaBvgT10OwGYHLaSBec3Tu jzLyGg6wzd4VBMWeIaqvwuBr7OISdylWeFZ6HRpyW7S4KGdEfgCYc30IbKeC1FiK oOnlAcP60kY3j89xd7E0SZ5CdyTRlncDCFoKKWnVVuvqc22f0aTcHX0eejvqLDVh fKy2NrUri9OVQraBfQdQF8l1tF6HXSfcY/WYyu8+jF7wgdF4vuWq2avvCWvkcIXx YfDmjcAopLfoDrfYq3WfbdP2+Rj/cBdk/Wb5dupDTrWtOPnTWCqowDNoOsPfiUNV 7IXvR9zuz6EUmjkSVrcF5p9TgAfkmwc= -----END CERTIFICATE-----Generated at Tue Jul 28 21:37:30 2026 by rpki-client