$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa File: 2de2634b-2e04-3bac-8266-57a1e9be14d7.roa (raw, json) Hash identifier: NYV30M+e69jq/hOc1LxoYykVv6cUafIUaMUelHnJkpU= Subject key identifier: 3C:67:AF:22:9E:68:08:E9:72:3C:C5:39:C5:AF:67:B7:AC:A1:5A:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB3379E512F349F0D19A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.98.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b3:37:9e:51:2f:34:9f:0d:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=d2c2d3e4-302b-417f-b4fb-63e73ecd7ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:85:2c:64:39:e0:e2:8b:90:77:ea:b7:f1: 1c:33:73:41:cc:e7:20:63:40:5a:b0:4e:62:1a:21: 7b:3c:d1:ec:6a:dc:f6:8a:96:e4:22:b3:2e:e3:a8: 72:71:af:91:7f:c3:c5:9f:c0:d9:18:5c:c0:03:87: 10:45:a8:a4:11:9e:a3:6f:f7:0a:99:ba:1b:fa:f5: 30:67:92:eb:28:e8:ba:bd:aa:bf:6d:1d:a0:54:c4: f5:ab:08:f1:a8:17:0a:92:54:f9:f2:4e:73:ac:50: b2:cc:a5:4e:82:62:d4:b9:40:55:2b:21:64:4c:26: 0d:70:5b:68:b7:5c:b6:72:80:b1:49:ef:9b:6d:ea: 09:b3:9d:79:68:ba:22:cc:00:57:a2:d5:55:ee:3f: 07:15:7f:d0:11:e4:a3:54:37:8b:f8:d8:7e:b1:c4: 9c:19:1c:4b:d0:c0:0f:65:be:22:40:8e:da:06:8b: 8e:d9:bd:0f:08:cf:68:45:26:fd:31:57:3b:75:21: 2e:32:01:a8:7b:27:b3:40:08:10:27:98:11:b0:ba: a9:51:ec:7f:9a:c9:96:29:72:dc:d0:5d:7b:87:6a: b3:43:37:9d:b7:29:2e:f3:4c:47:bf:7b:2d:3f:56: 1c:30:6e:d9:af:8b:32:a2:76:80:84:31:87:bb:70: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:AF:22:9E:68:08:E9:72:3C:C5:39:C5:AF:67:B7:AC:A1:5A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:82:a2:3a:7e:76:91:80:0c:cd:08:64:37:9f:32:63:8e:f3: e0:4a:b6:67:28:e9:75:b3:6e:80:07:a5:04:3a:0d:60:3c:fd: 16:19:b5:7b:fe:14:b4:ea:9a:36:7f:12:84:78:71:49:cd:86: 77:d0:4b:b7:03:c2:4f:3d:90:bf:4b:b0:98:e7:02:e8:bb:57: 9a:54:43:c2:53:6a:38:8d:67:dc:85:5c:15:d1:e0:f8:3b:aa: f3:cb:70:22:73:e0:29:9c:c6:fb:37:b9:b7:4c:eb:f6:9a:ee: b4:6a:ca:91:3e:08:c3:0c:8e:1d:1d:53:b7:c8:4b:a1:45:4a: 8f:83:7d:16:ba:4b:d0:3a:60:15:6a:08:72:ea:23:b4:40:16: 5e:00:36:49:32:92:a6:d0:dd:52:31:ce:50:9e:ea:0c:3f:b7: e6:41:e3:77:8c:b1:22:40:b6:ca:cb:d6:e0:c7:52:d6:bb:4b: 41:c4:9c:b6:45:66:db:e6:d0:df:3e:e6:10:05:60:79:72:b1: 0b:fd:c4:07:c5:0d:63:88:dc:dc:77:88:d7:11:30:9a:08:53: 76:90:89:c9:24:1b:9f:8b:bf:3f:cb:69:77:db:29:c1:72:86: 72:de:88:44:36:0c:23:10:58:57:ec:d4:ed:0c:c2:c0:e6:bf: cf:d6:b9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrM3nlEvNJ8NGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZDJjMmQzZTQtMzAyYi00MTdmLWI0ZmItNjNlNzNlY2Q3YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNOFLGQ54OKLkHfqt/EcM3NBzOcgY0BasE5i GiF7PNHsatz2ipbkIrMu46hyca+Rf8PFn8DZGFzAA4cQRaikEZ6jb/cKmbob+vUw Z5LrKOi6vaq/bR2gVMT1qwjxqBcKklT58k5zrFCyzKVOgmLUuUBVKyFkTCYNcFto t1y2coCxSe+bbeoJs515aLoizABXotVV7j8HFX/QEeSjVDeL+Nh+scScGRxL0MAP Zb4iQI7aBouO2b0PCM9oRSb9MVc7dSEuMgGoeyezQAgQJ5gRsLqpUex/msmWKXLc 0F17h2qzQzedtyku80xHv3stP1YcMG7Zr4syonaAhDGHu3DRrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxnryKeaAjpcjzFOcWvZ7esoVqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRlMjYzNGItMmUwNC0z YmFjLTgyNjYtNTdhMWU5YmUxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCCojp+dpGADM0IZDefMmOO8+BKtmco6XWzboAHpQQ6DWA8/RYZtXv+ FLTqmjZ/EoR4cUnNhnfQS7cDwk89kL9LsJjnAui7V5pUQ8JTajiNZ9yFXBXR4Pg7 qvPLcCJz4Cmcxvs3ubdM6/aa7rRqypE+CMMMjh0dU7fIS6FFSo+DfRa6S9A6YBVq CHLqI7RAFl4ANkkykqbQ3VIxzlCe6gw/t+ZB43eMsSJAtsrL1uDHUta7S0HEnLZF Ztvm0N8+5hAFYHlysQv9xAfFDWOI3Nx3iNcRMJoIU3aQickkG5+Lvz/LaXfbKcFy hnLeiEQ2DCMQWFfs1O0MwsDmv8/WuZo= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:06 2026 by rpki-client