$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/287f2d88-109f-3698-960c-ed5d632b822d.roa File: 287f2d88-109f-3698-960c-ed5d632b822d.roa (raw, json) Hash identifier: ilemCJmP7ctHy+UrjyO7c5wDyIfitp7XvRPv4nAkcxw= Subject key identifier: 18:90:6C:F6:E1:20:A3:9B:B3:07:69:B9:B1:28:C5:63:34:36:D9:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB7346F4B1C6685187080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/287f2d88-109f-3698-960c-ed5d632b822d.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.3.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b7:34:6f:4b:1c:66:85:18:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=497b73a2-5502-4ce0-8f02-82e474e26d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:30:6b:6c:1b:dc:1f:0c:fb:55:fe:29:3a: b6:1b:ee:7d:0a:05:d6:d3:ae:f6:56:31:e5:2c:15: 49:ae:ee:39:1a:79:7b:38:1e:62:f5:b0:b3:60:f7: c5:e9:d8:5b:24:ff:25:50:de:cd:35:fd:69:00:d1: 8a:33:8c:6b:1e:4c:d6:7b:b9:4e:46:9c:39:f0:f4: 93:f3:ab:24:46:47:d1:ac:13:99:f0:5f:11:14:12: ce:33:e8:60:ae:0d:af:cd:81:a1:97:ca:5a:c8:5d: 62:4c:c1:89:73:22:37:cf:22:2d:e5:c0:65:81:b8: b6:63:cb:cd:a1:00:f3:79:36:7e:79:2c:12:5f:00: 2e:98:b8:af:c1:05:81:a4:b7:5b:c4:26:22:39:6a: f5:77:b8:bc:ce:da:ad:6e:32:cd:9c:3a:43:fa:d6: 49:0a:e1:c2:11:35:0e:e4:59:5f:76:66:af:64:31: 93:32:76:5c:ec:e5:34:2a:b5:34:45:0d:22:2a:f2: ed:72:b1:1e:4b:da:ed:a3:89:e4:b3:1c:46:a0:91: 4d:3e:5f:d8:37:d5:b4:f3:aa:7c:4c:6d:c3:d2:d1: fe:2c:c1:7b:1e:67:15:ac:eb:f2:fd:96:fb:1f:d9: fb:40:57:09:b6:98:69:4a:77:59:35:83:02:5a:2e: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:90:6C:F6:E1:20:A3:9B:B3:07:69:B9:B1:28:C5:63:34:36:D9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/287f2d88-109f-3698-960c-ed5d632b822d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ad:43:18:56:90:39:b2:8d:dd:e3:40:cf:06:ea:92:39:9f: f0:f2:f4:4e:65:0a:9e:b8:3f:65:99:9c:93:33:bd:60:8c:89: 70:f8:bb:ea:de:a5:53:6b:77:d3:3c:8c:10:90:3c:46:37:ff: 72:71:b9:2e:8d:98:88:15:ca:9a:78:80:6a:ef:e2:12:fe:6c: 25:e0:83:fb:3c:03:e0:60:5d:62:d0:a4:8c:48:55:ab:8f:21: 66:84:60:6b:d2:98:e2:f8:94:59:34:5f:33:28:90:4b:8e:aa: c7:ae:ce:a7:1e:41:1a:8b:98:5d:6f:26:c6:f4:e4:58:a3:75: db:86:e7:9d:b6:58:cd:03:52:24:b3:e2:02:58:b7:b5:4a:0e: 63:42:87:5a:2f:9a:2a:02:10:5c:63:c4:e0:aa:7b:d1:4f:3e: e1:ad:30:cb:c7:b0:27:a5:c3:d2:52:35:5e:bf:a0:45:37:e1: 22:0e:2d:c3:3e:80:63:da:57:ed:4a:7a:47:60:20:fc:0f:1f: ee:7c:41:ee:89:95:91:8d:8e:e2:e1:64:96:4a:31:6d:8f:14: 68:77:fc:2b:f6:ff:58:7a:8e:af:e4:c7:12:90:a1:e2:05:1f: 1d:f8:f9:62:86:bb:ec:35:3a:75:37:59:f2:28:fb:f8:aa:28: c9:84:3c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrc0b0scZoUYcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NDk3YjczYTItNTUwMi00Y2UwLThmMDItODJlNDc0ZTI2ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB8wa2wb3B8M+1X+KTq2G+59CgXW0672VjHl LBVJru45Gnl7OB5i9bCzYPfF6dhbJP8lUN7NNf1pANGKM4xrHkzWe7lORpw58PST 86skRkfRrBOZ8F8RFBLOM+hgrg2vzYGhl8payF1iTMGJcyI3zyIt5cBlgbi2Y8vN oQDzeTZ+eSwSXwAumLivwQWBpLdbxCYiOWr1d7i8ztqtbjLNnDpD+tZJCuHCETUO 5FlfdmavZDGTMnZc7OU0KrU0RQ0iKvLtcrEeS9rto4nksxxGoJFNPl/YN9W086p8 TG3D0tH+LMF7HmcVrOvy/Zb7H9n7QFcJtphpSndZNYMCWi6eIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiQbPbhIKObswdpubEoxWM0Ntn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjg3ZjJkODgtMTA5Zi0z Njk4LTk2MGMtZWQ1ZDYzMmI4MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmtQxhWkDmyjd3jQM8G6pI5n/Dy9E5lCp64P2WZnJMzvWCMiXD4u+re pVNrd9M8jBCQPEY3/3JxuS6NmIgVypp4gGrv4hL+bCXgg/s8A+BgXWLQpIxIVauP IWaEYGvSmOL4lFk0XzMokEuOqseuzqceQRqLmF1vJsb05FijdduG5522WM0DUiSz 4gJYt7VKDmNCh1ovmioCEFxjxOCqe9FPPuGtMMvHsCelw9JSNV6/oEU34SIOLcM+ gGPaV+1KekdgIPwPH+58Qe6JlZGNjuLhZJZKMW2PFGh3/Cv2/1h6jq/kxxKQoeIF Hx34+WKGu+w1OnU3WfIo+/iqKMmEPLo= -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:57 2026 by rpki-client