$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa File: 2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa (raw, json) Hash identifier: 20wWlOG5Mxov/VToEp+22sQMr5QJ6OsehJqTn22OMiU= Subject key identifier: FC:68:B8:E8:D6:3B:F0:5A:45:BA:7F:8C:64:F4:83:AB:B3:42:82:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB8BD745A85BA6DF9A300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.0.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b8:bd:74:5a:85:ba:6d:f9:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=f2b0122b-ca51-44d1-8fc4-043c9c726af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:9c:b3:3b:d1:28:8a:2f:45:ed:c0:19:4d: 79:2b:3c:4b:ac:43:c9:43:12:12:de:94:a5:e4:ab: a6:53:d9:77:46:bd:d9:81:e7:fa:9d:8e:91:b2:bf: f7:8e:0e:bf:15:ac:de:fe:33:56:2e:37:ad:2c:12: 5d:22:74:a4:fc:2c:2f:87:68:3b:56:f0:82:cd:86: 95:84:92:a0:6f:99:76:83:6a:f0:82:d5:d5:09:0c: 88:87:83:b4:dd:26:77:08:2f:d6:0f:23:a3:3b:52: c7:92:58:d2:91:f4:43:ae:e3:0a:a8:bd:aa:2b:bf: b0:12:2c:bd:51:2a:c8:16:28:60:39:36:96:7b:00: a2:d5:75:09:d6:48:ed:24:df:03:4e:4e:0f:2d:15: 53:29:95:d0:f5:96:f4:1b:9d:85:ff:5d:a2:21:db: b1:af:e4:e0:ea:5d:30:cc:9f:41:7d:cf:ac:bf:cc: a6:77:aa:0d:93:3d:2b:97:4b:08:4c:87:8f:eb:48: 7a:24:df:86:b0:e2:ff:f6:1f:81:83:71:62:37:db: 8b:d1:9c:09:5d:6f:bc:03:5d:a1:2e:ce:a3:3d:0d: 7c:97:2e:1f:33:8a:9d:b4:ad:24:75:f2:0a:6a:d6: 9c:03:66:e1:53:60:c3:2e:da:45:7c:e9:83:c7:35: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:68:B8:E8:D6:3B:F0:5A:45:BA:7F:8C:64:F4:83:AB:B3:42:82:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:81:c1:b7:74:0e:d6:97:66:e7:0a:64:78:01:e5:58:17:0d: 4a:1d:78:94:9f:f7:c9:74:0f:38:f6:44:ff:92:3a:de:ae:32: 59:6f:35:fd:67:ae:c2:fd:32:b8:e1:eb:7f:f3:64:8c:e4:4b: 72:1d:db:a6:25:2d:21:f9:9a:9f:ee:aa:af:4c:09:28:3e:ab: ad:34:fa:9f:0c:89:9d:5e:dc:e4:0b:2d:d8:49:d2:81:83:fa: 36:ef:66:15:26:82:4b:1b:22:f9:71:64:0f:cd:5b:e3:fd:c3: 24:3f:43:67:e9:16:a9:5e:94:53:0a:02:84:f6:be:fe:06:07: fa:52:0f:65:9c:9a:60:79:40:a0:4b:81:ff:7b:e0:0e:30:c3: 63:d0:94:6a:c9:29:65:36:93:e1:05:10:98:e8:4b:62:fc:fe: 18:a8:51:87:3c:8c:30:bf:13:ec:b7:79:c5:15:9a:2d:c4:81: 1d:c4:de:69:98:71:d9:1e:d0:3b:ba:42:c6:c4:31:59:74:a4: ba:2d:b8:84:c7:b6:9d:be:3f:99:11:0f:17:3e:2d:f1:b5:1c: 4b:65:e4:4f:50:8c:ea:2b:b3:5e:4b:3e:e6:89:c2:92:46:a7: e1:1f:64:2d:18:36:3d:f8:6e:74:ba:fe:ca:94:3d:0b:75:d5: 12:30:8e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSri9dFqFum35owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZjJiMDEyMmItY2E1MS00NGQxLThmYzQtMDQzYzljNzI2YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+acszvRKIovRe3AGU15KzxLrEPJQxIS3pSl 5KumU9l3Rr3Zgef6nY6Rsr/3jg6/Faze/jNWLjetLBJdInSk/Cwvh2g7VvCCzYaV hJKgb5l2g2rwgtXVCQyIh4O03SZ3CC/WDyOjO1LHkljSkfRDruMKqL2qK7+wEiy9 USrIFihgOTaWewCi1XUJ1kjtJN8DTk4PLRVTKZXQ9Zb0G52F/12iIduxr+Tg6l0w zJ9Bfc+sv8ymd6oNkz0rl0sITIeP60h6JN+GsOL/9h+Bg3FiN9uL0ZwJXW+8A12h Ls6jPQ18ly4fM4qdtK0kdfIKatacA2bhU2DDLtpFfOmDxzVLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxouOjWO/BaRbp/jGT0g6uzQoJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmU5YmNlYzEtY2RhMC0z ZWY0LThhNmUtNTllMTcxZjA0NzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKBwbd0DtaXZucKZHgB5VgXDUodeJSf98l0Dzj2RP+SOt6uMllvNf1n rsL9Mrjh63/zZIzkS3Id26YlLSH5mp/uqq9MCSg+q600+p8MiZ1e3OQLLdhJ0oGD +jbvZhUmgksbIvlxZA/NW+P9wyQ/Q2fpFqlelFMKAoT2vv4GB/pSD2WcmmB5QKBL gf974A4ww2PQlGrJKWU2k+EFEJjoS2L8/hioUYc8jDC/E+y3ecUVmi3EgR3E3mmY cdke0Du6QsbEMVl0pLotuITHtp2+P5kRDxc+LfG1HEtl5E9QjOors15LPuaJwpJG p+EfZC0YNj34bnS6/sqUPQt11RIwjjk= -----END CERTIFICATE-----Generated at Tue Jul 28 22:57:38 2026 by rpki-client