$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d4a967f-cc87-3163-a1dc-d72ece427cba.roa File: 2d4a967f-cc87-3163-a1dc-d72ece427cba.roa (raw, json) Hash identifier: H7aMTcZtWcLqMfxtu6NHcZ/5VXHzMpQuqRxYl37/TRQ= Subject key identifier: 12:F1:67:5E:3A:CE:2C:5D:B6:06:11:3E:45:9B:D1:0A:0C:B3:00:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A6BD2253E4256AF19D740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d4a967f-cc87-3163-a1dc-d72ece427cba.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.3.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:6b:d2:25:3e:42:56:af:19:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=3ac68f9d-294e-4cb1-8f75-081a2c5b15a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:7c:41:2a:51:3e:22:2f:bc:49:0a:56:f2: 69:2c:74:c6:61:33:03:c9:f6:df:56:48:bd:a0:36: 17:7d:d7:0b:e3:a2:ba:a8:4a:30:ae:ea:d2:fb:8c: 62:b2:2f:03:46:2a:da:43:09:6d:c3:6d:14:d2:2b: 99:08:0b:20:0a:ff:64:23:ff:5d:55:af:db:31:98: 8f:a5:0f:21:ba:47:56:c3:64:c1:ca:bb:f8:c2:88: 77:0a:e8:a0:f8:3d:f0:98:d9:b7:7c:92:41:f4:e5: 90:28:b3:7e:d6:d5:d1:7f:85:b4:c5:14:ac:ae:40: ce:ce:b1:81:95:d8:c1:9d:b2:6d:26:33:da:b2:86: 7e:f8:99:44:a5:73:68:79:da:ec:74:f1:ab:ba:84: e8:24:fa:e8:f7:be:a9:e0:5d:ea:d5:4b:ac:70:3d: 0a:28:f1:32:89:cf:0a:e3:51:bb:44:e1:f0:9d:4d: fd:95:09:5a:5d:04:3e:8c:81:f4:fc:4d:9c:31:3e: 02:15:ed:1d:60:33:70:98:6e:9d:7c:d5:ff:b9:65: c3:af:e7:ac:98:55:71:62:df:53:c3:bf:3c:0f:78: db:61:bb:9e:96:a4:67:2a:0e:72:e4:e5:31:51:b7: 07:cf:47:54:ff:97:05:6a:de:53:66:4e:5a:d7:66: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:67:5E:3A:CE:2C:5D:B6:06:11:3E:45:9B:D1:0A:0C:B3:00:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d4a967f-cc87-3163-a1dc-d72ece427cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bf:23:bc:b5:0b:5f:d7:a2:f1:63:ca:3c:dd:e2:10:b8:50: 3f:d0:9d:98:cf:36:d7:0e:82:77:84:1f:10:b6:73:29:d4:4a: 18:b6:33:5f:63:31:07:eb:c3:9c:84:4b:fb:53:04:2b:a3:94: 52:cc:0c:66:45:91:7f:d0:ee:d4:85:4c:82:71:ed:97:b4:00: 40:b7:2e:d7:2d:77:30:21:8a:97:0b:c5:57:ef:ac:74:d5:96: 95:c1:2c:d5:27:71:14:d6:95:53:cf:a5:5d:57:96:52:65:09: e9:6f:32:ff:59:df:0f:9d:c3:6e:20:e6:2c:96:61:8a:b1:40: cd:a9:1d:cb:2b:f5:10:6e:4c:0d:fa:ca:f9:15:8b:28:a1:5c: 86:97:fa:d5:97:81:3a:a7:9a:a3:7f:8d:73:d9:02:48:c8:23: 28:6d:1a:b3:ac:74:4c:c2:34:de:2f:82:28:a2:e7:47:01:61: 9d:b4:ee:99:91:06:ff:9f:00:2e:b8:35:9b:28:2c:72:60:6f: 04:4a:1f:92:a0:f7:e6:85:44:d7:01:81:89:79:0b:ee:90:3c: 2c:dd:a1:0b:4f:52:a7:07:5b:f3:ff:d4:f5:ca:6e:2c:d2:27: b5:3a:99:9f:9c:5a:1e:44:46:08:65:c7:b7:5f:5d:7f:4c:ed: ab:f3:0e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmvSJT5CVq8Z10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk M2FjNjhmOWQtMjk0ZS00Y2IxLThmNzUtMDgxYTJjNWIxNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGR8QSpRPiIvvEkKVvJpLHTGYTMDyfbfVki9 oDYXfdcL46K6qEowrurS+4xisi8DRiraQwltw20U0iuZCAsgCv9kI/9dVa/bMZiP pQ8hukdWw2TByrv4woh3Cuig+D3wmNm3fJJB9OWQKLN+1tXRf4W0xRSsrkDOzrGB ldjBnbJtJjPasoZ++JlEpXNoedrsdPGruoToJPro976p4F3q1UuscD0KKPEyic8K 41G7ROHwnU39lQlaXQQ+jIH0/E2cMT4CFe0dYDNwmG6dfNX/uWXDr+esmFVxYt9T w788D3jbYbuelqRnKg5y5OUxUbcHz0dU/5cFat5TZk5a12ZGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLxZ146zixdtgYRPkWb0QoMswBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ0YTk2N2YtY2M4Ny0z MTYzLWExZGMtZDcyZWNlNDI3Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+/I7y1C1/XovFjyjzd4hC4UD/QnZjPNtcOgneEHxC2cynUShi2M19j MQfrw5yES/tTBCujlFLMDGZFkX/Q7tSFTIJx7Ze0AEC3LtctdzAhipcLxVfvrHTV lpXBLNUncRTWlVPPpV1XllJlCelvMv9Z3w+dw24g5iyWYYqxQM2pHcsr9RBuTA36 yvkViyihXIaX+tWXgTqnmqN/jXPZAkjIIyhtGrOsdEzCNN4vgiii50cBYZ207pmR Bv+fAC64NZsoLHJgbwRKH5Kg9+aFRNcBgYl5C+6QPCzdoQtPUqcHW/P/1PXKbizS J7U6mZ+cWh5ERghlx7dfXX9M7avzDhQ= -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:16 2026 by rpki-client