$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa File: 2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa (raw, json) Hash identifier: yE0/2LlLSL7YHVNO2Tbi7wMpH94P7lO+HtumsjKp1GU= Subject key identifier: 7E:3B:DD:3C:DA:8E:4C:AE:46:E1:70:B5:C4:01:FE:A8:F1:1B:28:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFB596EAB9A7C1C3171940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.230.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:b5:96:ea:b9:a7:c1:c3:17:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=1d57588d-e7b0-4a85-bf45-9ff1835b410d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:7d:43:20:de:ef:94:0b:e8:73:6f:b3:b4: a1:1c:d5:95:2c:8d:09:d4:aa:03:8c:80:54:ee:ee: d5:50:f7:e0:f7:45:10:6f:dc:fb:4a:cd:5d:da:99: c4:0f:28:90:14:93:60:ee:58:c4:d8:bd:03:d6:b6: 70:4c:89:75:1f:c9:89:bb:c2:f1:eb:2e:99:3f:fe: 0a:45:3a:80:77:1d:9d:98:4f:88:a3:44:bc:af:92: cc:7e:4b:17:33:a9:48:8c:fe:2e:f0:94:6d:36:53: 33:b4:ae:99:7e:88:5e:c0:26:71:0a:cb:7d:8e:64: 9d:f4:15:15:a0:e8:96:a8:a7:b5:28:12:18:66:65: 74:ec:4d:83:3e:c0:dd:3f:71:c8:7e:61:fe:04:54: 6a:2d:1a:82:2e:82:d5:a9:1d:49:e9:03:61:5c:1b: 5e:9f:6e:15:36:4d:43:1d:87:7c:fd:e4:4b:06:f8: ce:95:c6:f3:64:f6:34:4a:f5:b0:3d:c8:6d:e3:44: ad:4c:ca:02:5d:8d:21:fe:c7:83:29:be:6f:91:a6: 54:0e:2f:10:01:6d:41:5a:89:52:5e:71:a6:4f:29: 87:b5:54:26:bf:2d:b3:8c:a4:80:fb:7d:08:c5:0a: 6c:53:3c:1d:87:09:ea:5d:35:f3:8f:fe:e6:f4:d6: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3B:DD:3C:DA:8E:4C:AE:46:E1:70:B5:C4:01:FE:A8:F1:1B:28:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e5:3f:9f:81:15:9a:1d:0c:98:32:06:f5:c3:c0:7e:76:c5: 22:72:c1:4b:58:32:af:1a:ec:ee:ab:46:07:a5:c7:b5:fa:60: 7c:fe:c1:e2:db:a3:b3:fb:9c:cc:18:03:d5:24:8a:d1:d3:53: 03:45:aa:5b:2c:c9:dc:0f:e2:5b:23:ff:f9:76:b1:a7:1b:f0: 28:fa:89:b7:3c:74:c8:14:f5:4b:17:8b:5e:af:4e:75:3f:5f: ce:d4:31:17:bf:0a:38:e1:7f:b4:b4:7e:16:32:33:e1:75:2c: 02:89:e9:ef:dd:58:46:2c:61:d8:f5:a6:96:2d:54:4b:9d:49: 5a:7d:6f:a0:66:a2:dd:de:b1:c3:61:91:e3:5a:d8:4f:84:89: 1f:93:3f:68:8a:e7:37:ca:db:f1:87:78:76:07:1e:39:14:3a: ca:d1:05:d2:5a:60:69:bc:56:40:50:36:a2:23:46:84:52:9c: dd:3d:60:7d:6b:b3:c2:d4:f6:4a:3f:36:74:cf:a2:f8:c2:9e: 0f:48:2b:87:46:e1:c2:ce:50:b3:85:b2:41:b0:d6:fa:da:a0: a7:de:3a:2a:94:23:cc:f5:df:89:ae:94:cb:ad:1c:93:97:0e: 26:b6:7c:33:42:29:72:9d:1c:c9:20:28:a3:6f:0c:dd:f8:28: 7a:0d:77:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er7WW6rmnwcMXGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MWQ1NzU4OGQtZTdiMC00YTg1LWJmNDUtOWZmMTgzNWI0MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lp9QyDe75QL6HNvs7ShHNWVLI0J1KoDjIBU 7u7VUPfg90UQb9z7Ss1d2pnEDyiQFJNg7ljE2L0D1rZwTIl1H8mJu8Lx6y6ZP/4K RTqAdx2dmE+Io0S8r5LMfksXM6lIjP4u8JRtNlMztK6ZfohewCZxCst9jmSd9BUV oOiWqKe1KBIYZmV07E2DPsDdP3HIfmH+BFRqLRqCLoLVqR1J6QNhXBten24VNk1D HYd8/eRLBvjOlcbzZPY0SvWwPcht40StTMoCXY0h/seDKb5vkaZUDi8QAW1BWolS XnGmTymHtVQmvy2zjKSA+30IxQpsUzwdhwnqXTXzj/7m9NbWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH473TzajkyuRuFwtcQB/qjxGygqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJhMjllMmItOWY1My0z MjhlLThhYmMtYTJlZjJmMzcxODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELlP5+BFZodDJgyBvXDwH52xSJywUtYMq8a7O6rRgelx7X6YHz+weLb o7P7nMwYA9UkitHTUwNFqlssydwP4lsj//l2sacb8Cj6ibc8dMgU9UsXi16vTnU/ X87UMRe/Cjjhf7S0fhYyM+F1LAKJ6e/dWEYsYdj1ppYtVEudSVp9b6Bmot3escNh keNa2E+EiR+TP2iK5zfK2/GHeHYHHjkUOsrRBdJaYGm8VkBQNqIjRoRSnN09YH1r s8LU9ko/NnTPovjCng9IK4dG4cLOULOFskGw1vraoKfeOiqUI8z134mulMutHJOX Dia2fDNCKXKdHMkgKKNvDN34KHoNd/I= -----END CERTIFICATE-----Generated at Tue Jul 28 22:57:29 2026 by rpki-client