$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c1240b-9559-3247-8a1b-4ad127a6bf94.roa File: 28c1240b-9559-3247-8a1b-4ad127a6bf94.roa (raw, json) Hash identifier: pi1miUMxLsE/tMFF03tkDo6kyJEvUgkZyY6iVJ5Be/Y= Subject key identifier: 8B:78:CE:2D:C9:87:A1:8C:04:F5:8D:EA:30:AB:6C:14:EF:CE:50:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFCBAF2D1582F9EA40DC90 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c1240b-9559-3247-8a1b-4ad127a6bf94.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.106.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:cb:af:2d:15:82:f9:ea:40:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=cf7d3344-0ad0-4a81-ae60-95e6d285447a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:2f:8d:fc:cb:9e:3d:5f:6f:3c:3d:e4:0b: e6:e3:00:a5:ac:2b:b8:cf:68:94:70:2d:e7:e7:ab: 54:8e:c6:2a:23:20:a0:4c:5d:a9:c5:9a:0d:86:a2: 02:16:5e:1a:05:6a:08:96:0d:b9:d7:a7:f8:39:7d: ae:b4:61:5f:00:7a:60:19:c1:f6:5f:6d:a8:6b:2a: 14:19:2c:b2:d1:77:59:9b:39:6a:84:6e:a7:45:3d: c4:25:68:75:6f:ed:26:fb:b6:6b:60:1e:39:ef:08: 68:c3:d0:74:96:c7:c9:59:b0:d9:ad:4a:be:0f:84: 61:4c:26:e3:ca:6e:91:cf:df:83:72:f4:1f:78:77: 4b:ce:a9:d1:dd:22:76:be:3b:5a:eb:ad:a8:a6:98: 43:52:8d:fb:92:9c:75:c1:7b:49:d5:e9:f2:b9:58: 11:3c:17:99:ac:96:27:45:77:3c:83:e9:42:57:c6: eb:31:1e:1a:04:41:4c:b4:14:a4:93:a4:c0:37:be: 64:46:d6:43:47:b3:0a:6a:40:bc:19:c9:bd:aa:28: 6b:85:a8:7c:b8:94:98:f3:89:17:62:e1:ed:b5:ec: fd:b7:18:36:92:94:0a:ed:33:57:a9:5a:6c:83:a8: 90:a6:4d:84:69:84:cb:d3:91:0f:68:3a:d1:5d:89: e4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:78:CE:2D:C9:87:A1:8C:04:F5:8D:EA:30:AB:6C:14:EF:CE:50:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c1240b-9559-3247-8a1b-4ad127a6bf94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:91:fc:ac:0c:93:d9:63:57:e8:4e:b9:34:e6:f3:72:d6: c7:b0:ea:04:15:d2:02:2f:ea:0f:3c:96:7b:b1:f4:32:9c:e4: cd:0c:f4:e6:be:11:56:dd:6c:f1:93:ca:a7:7d:88:79:5f:6c: ce:7e:5b:7f:28:2d:88:a8:86:48:47:14:8b:96:37:d0:b9:ed: a0:cb:48:a0:69:fb:06:f2:af:4a:91:2b:3a:ad:db:c7:da:f1: 07:67:eb:e7:31:e8:12:a8:f9:6e:14:3e:3b:36:bb:96:0c:7b: fb:84:a6:f9:b9:dd:3d:97:a5:1b:88:d3:83:b4:0a:ac:9c:69: df:47:05:50:16:8d:f6:b1:f0:6a:da:3c:cf:66:d6:69:65:1d: 24:c9:ef:64:1b:05:61:2b:56:53:a0:10:03:b3:bf:fa:6e:fc: 13:85:ca:bf:e4:5b:9c:cb:e0:9c:25:5e:4e:3d:1c:56:94:1e: d5:b8:bd:f3:0b:4e:47:b9:b2:aa:cd:a1:07:64:ab:e7:1b:51: d9:59:30:00:f9:91:5d:ec:b7:3c:4a:db:73:ed:db:4a:0e:d4: 11:a3:8d:05:63:b0:3f:8f:59:28:a6:86:ff:9d:b1:04:22:a5: 0c:8f:14:e9:db:9f:a4:6c:d5:04:8d:e5:af:9a:b5:f0:87:5a: 2d:fc:39:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er8uvLRWC+epA3JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk Y2Y3ZDMzNDQtMGFkMC00YTgxLWFlNjAtOTVlNmQyODU0NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrsvjfzLnj1fbzw95Avm4wClrCu4z2iUcC3n 56tUjsYqIyCgTF2pxZoNhqICFl4aBWoIlg2516f4OX2utGFfAHpgGcH2X22oayoU GSyy0XdZmzlqhG6nRT3EJWh1b+0m+7ZrYB457whow9B0lsfJWbDZrUq+D4RhTCbj ym6Rz9+DcvQfeHdLzqnR3SJ2vjta662opphDUo37kpx1wXtJ1enyuVgRPBeZrJYn RXc8g+lCV8brMR4aBEFMtBSkk6TAN75kRtZDR7MKakC8Gcm9qihrhah8uJSY84kX YuHttez9txg2kpQK7TNXqVpsg6iQpk2EaYTL05EPaDrRXYnk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt4zi3Jh6GMBPWN6jCrbBTvzlDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhjMTI0MGItOTU1OS0z MjQ3LThhMWItNGFkMTI3YTZiZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpwkfysDJPZY1foTrk05vNy1sew6gQV0gIv6g88lnux9DKc5M0M9Oa+ EVbdbPGTyqd9iHlfbM5+W38oLYiohkhHFIuWN9C57aDLSKBp+wbyr0qRKzqt28fa 8Qdn6+cx6BKo+W4UPjs2u5YMe/uEpvm53T2XpRuI04O0Cqycad9HBVAWjfax8Gra PM9m1mllHSTJ72QbBWErVlOgEAOzv/pu/BOFyr/kW5zL4JwlXk49HFaUHtW4vfML Tke5sqrNoQdkq+cbUdlZMAD5kV3stzxK23Pt20oO1BGjjQVjsD+PWSimhv+dsQQi pQyPFOnbn6Rs1QSN5a+atfCHWi38Oak= -----END CERTIFICATE-----Generated at Wed Jul 29 00:34:55 2026 by rpki-client