$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d8870b-b24e-30a4-9946-1070868208ac.roa File: 29d8870b-b24e-30a4-9946-1070868208ac.roa (raw, json) Hash identifier: 4Fouo0+7IjgBOIFjMzOE4o3RbFbmFjXkdk27rIC59+8= Subject key identifier: B9:32:7E:16:14:3B:1A:8F:F5:95:2C:8C:CA:DF:28:BD:35:56:78:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB001F5CC8FF7976E05EA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d8870b-b24e-30a4-9946-1070868208ac.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.104.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:01:f5:cc:8f:f7:97:6e:05:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=436780cb-318e-419b-a9d9-93f2dac33c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:75:1e:bb:42:24:62:ab:23:2f:a4:3e:49: 01:40:7a:8a:a3:7d:31:c4:20:4c:16:b8:cd:99:7a: 5c:24:b4:c1:ab:d0:f1:2a:cb:28:50:30:04:14:da: 5d:09:db:26:fd:f9:20:27:19:9a:63:03:47:76:80: 1b:b8:b9:93:2e:d3:84:a5:2e:6f:a4:09:49:91:18: bd:98:84:16:e1:0b:74:90:f9:9b:85:a9:76:a4:5f: c5:15:cb:ce:55:be:b2:42:b0:b4:f2:e0:48:7c:a8: 71:a0:15:a0:29:ea:b5:75:06:c8:ce:55:be:04:c7: a4:78:86:04:d1:0b:59:22:95:fe:9f:90:a8:bb:84: 87:ce:ca:df:44:86:d8:a2:b5:9d:32:b4:aa:75:bb: 1f:2c:cb:bd:b3:3f:6e:10:0c:1a:a3:50:10:0c:4d: 7e:09:80:1c:b3:8e:2c:ee:27:87:85:a2:23:46:32: 48:47:0a:4f:11:9a:0f:50:b4:57:0c:da:41:17:17: 50:9f:c7:02:67:be:8b:c3:70:87:49:71:f4:b9:31: 4a:4f:8c:54:93:b8:d2:a5:b8:21:fb:a6:a5:7c:9c: ab:d6:4a:d3:e5:f3:e4:b2:ef:29:bf:24:d6:03:83: 45:67:13:99:20:9e:1a:92:44:1a:7e:26:a7:4f:0a: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:32:7E:16:14:3B:1A:8F:F5:95:2C:8C:CA:DF:28:BD:35:56:78:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d8870b-b24e-30a4-9946-1070868208ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b4:f2:e9:b3:0c:50:0e:f1:30:d4:e5:a2:17:88:47:bd:f7: af:a0:dd:7d:78:36:19:cb:28:d8:74:31:ec:24:9f:7e:46:07: 73:bb:3b:68:a4:67:7a:d9:1c:5d:02:12:9e:79:c9:75:e5:c9: d2:66:cf:41:95:f2:8c:5c:52:79:6f:87:87:c4:f9:4a:60:e6: 11:e1:7d:45:ec:68:6e:37:5e:91:ad:68:03:5a:83:66:e0:11: be:e8:49:78:e6:0b:9c:84:8b:8f:c6:01:68:f5:3f:5b:4a:45: 3d:2c:18:3a:4c:ff:99:80:11:81:4e:b5:37:39:d7:e8:fd:96: 3b:a7:f2:6a:c8:f0:dc:fa:f7:5b:bb:c6:c1:ee:8b:9c:0e:86: 80:4b:89:84:7e:ee:ed:45:d1:94:75:ac:c0:71:29:d5:49:82: 7d:9b:c1:44:e1:06:96:4a:5a:c2:35:23:47:fd:58:7d:63:51: a8:7f:fb:af:61:a9:83:b0:06:22:f2:1a:3f:ac:03:0d:20:15: 90:0b:90:b6:5f:11:65:cb:0b:04:72:9a:9f:d5:24:b6:bb:01: 6a:77:b4:f4:40:7e:2b:db:64:a8:e2:3d:3b:98:a8:3d:c6:b2: 2d:d1:36:c3:3a:0f:44:0e:f7:e6:6b:f5:dd:5d:a2:1b:09:b8: 46:7f:25:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esAH1zI/3l24F6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk NDM2NzgwY2ItMzE4ZS00MTliLWE5ZDktOTNmMmRhYzMzYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/t1HrtCJGKrIy+kPkkBQHqKo30xxCBMFrjN mXpcJLTBq9DxKssoUDAEFNpdCdsm/fkgJxmaYwNHdoAbuLmTLtOEpS5vpAlJkRi9 mIQW4Qt0kPmbhal2pF/FFcvOVb6yQrC08uBIfKhxoBWgKeq1dQbIzlW+BMekeIYE 0QtZIpX+n5Cou4SHzsrfRIbYorWdMrSqdbsfLMu9sz9uEAwao1AQDE1+CYAcs44s 7ieHhaIjRjJIRwpPEZoPULRXDNpBFxdQn8cCZ76Lw3CHSXH0uTFKT4xUk7jSpbgh +6alfJyr1krT5fPksu8pvyTWA4NFZxOZIJ4akkQafianTwr4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkyfhYUOxqP9ZUsjMrfKL01VnjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjlkODg3MGItYjI0ZS0z MGE0LTk5NDYtMTA3MDg2ODIwOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW08umzDFAO8TDU5aIXiEe996+g3X14NhnLKNh0Mewkn35GB3O7O2ik Z3rZHF0CEp55yXXlydJmz0GV8oxcUnlvh4fE+Upg5hHhfUXsaG43XpGtaANag2bg Eb7oSXjmC5yEi4/GAWj1P1tKRT0sGDpM/5mAEYFOtTc51+j9ljun8mrI8Nz691u7 xsHui5wOhoBLiYR+7u1F0ZR1rMBxKdVJgn2bwUThBpZKWsI1I0f9WH1jUah/+69h qYOwBiLyGj+sAw0gFZALkLZfEWXLCwRymp/VJLa7AWp3tPRAfivbZKjiPTuYqD3G si3RNsM6D0QO9+Zr9d1dohsJuEZ/JSY= -----END CERTIFICATE-----Generated at Wed Jul 29 08:18:18 2026 by rpki-client