$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/324e3925-25a7-3385-bade-b0d134d62ebc.roa File: 324e3925-25a7-3385-bade-b0d134d62ebc.roa (raw, json) Hash identifier: BskGey1fVzIcm+KFMC7gQyRqWO/XYEZGy5hVSC3vPE0= Subject key identifier: BE:F0:E2:E7:F6:B8:6E:0D:D6:6C:17:70:9A:3B:81:F5:84:E9:60:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB00DAEE085E5A8E0319900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/324e3925-25a7-3385-bade-b0d134d62ebc.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 174.74.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:0d:ae:e0:85:e5:a8:e0:31:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=25577f22-edaf-47ed-8d29-945cb6b517d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:4c:23:3c:9c:ae:48:a2:9c:03:27:dc:62: 8b:38:07:e2:6d:69:cd:9b:d8:8c:59:7b:6d:35:24: 19:15:51:bb:f4:9c:70:86:bb:ea:f1:5b:c9:4e:9c: eb:0b:5a:42:9b:00:a9:41:65:9a:d2:96:b7:e4:0b: 61:11:cc:67:e9:76:e9:c8:5f:75:f2:85:57:7b:b2: 33:a9:ff:98:c8:e8:0c:d8:f9:13:05:99:42:e6:2f: 97:1a:5d:be:b0:59:61:6d:3f:7b:04:02:c9:e7:74: f8:f5:71:c8:2f:a4:6f:af:c6:7b:2b:c2:87:68:a3: 33:1e:7b:ca:31:b1:3a:d4:f2:6b:e9:8c:57:a0:70: b9:6e:3c:65:6f:16:b6:51:c0:5f:37:a3:23:10:be: 59:ff:01:78:b1:6b:74:5e:e3:be:28:91:e5:34:98: 12:c5:19:67:cc:d9:10:db:c9:c4:90:af:fd:db:a0: d6:46:27:d5:26:12:74:71:db:18:41:d8:70:f1:27: 75:4c:1b:26:8b:55:6a:f6:e0:d2:d0:fb:e7:84:31: a5:0b:d6:2e:85:09:62:ea:a3:f6:eb:1a:4a:0e:e0: 0d:23:8e:c4:e2:01:ec:4c:91:0b:9f:f2:78:b4:00: 84:33:56:a7:fe:ab:cf:75:8d:af:7c:6b:bc:63:51: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:E2:E7:F6:B8:6E:0D:D6:6C:17:70:9A:3B:81:F5:84:E9:60:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/324e3925-25a7-3385-bade-b0d134d62ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3a:31:58:07:35:fc:fc:c6:18:71:bb:0f:09:47:f8:11:eb: 63:c5:34:d3:71:e2:aa:70:74:0f:b4:e5:9c:9e:76:e3:68:4d: 8c:98:29:d1:06:08:44:33:c1:5d:c1:48:6d:c9:18:6c:f5:a2: 67:1d:76:21:ae:90:66:ec:ae:c9:30:ea:3f:12:5f:19:7f:95: 57:8e:44:e0:8d:d9:4a:09:ef:e3:af:c5:97:fd:a3:df:5c:27: 64:0e:3c:9f:f0:09:19:f7:f6:30:4a:48:a8:0d:92:e8:75:d1: c4:17:0f:77:e1:66:4b:54:70:08:f0:00:c2:fa:e3:08:ab:ff: 34:59:53:9f:a4:a8:77:66:3e:11:e6:ee:e4:33:62:36:a0:93: 2e:87:09:90:43:52:f7:ed:1d:5c:59:1b:34:e8:a3:eb:99:88: ec:d4:26:5a:09:a5:00:5e:52:30:89:be:c4:dd:90:66:5d:1b: d0:da:a5:b3:08:a4:16:79:d8:76:f7:5a:8d:59:82:ac:d2:00: 70:8b:cd:a6:9a:f7:7b:e8:7d:5c:94:c7:10:09:95:ee:49:c8: 04:b7:c4:ef:8d:60:9a:07:4f:d7:81:a4:06:86:5f:1f:17:e2: 58:cf:d5:7e:96:7c:f2:1c:15:d6:e7:86:97:b5:34:69:58:95: 11:7c:2e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esA2u4IXlqOAxmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MjU1NzdmMjItZWRhZi00N2VkLThkMjktOTQ1Y2I2YjUxN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2pMIzycrkiinAMn3GKLOAfibWnNm9iMWXtt NSQZFVG79Jxwhrvq8VvJTpzrC1pCmwCpQWWa0pa35AthEcxn6XbpyF918oVXe7Iz qf+YyOgM2PkTBZlC5i+XGl2+sFlhbT97BALJ53T49XHIL6Rvr8Z7K8KHaKMzHnvK MbE61PJr6YxXoHC5bjxlbxa2UcBfN6MjEL5Z/wF4sWt0XuO+KJHlNJgSxRlnzNkQ 28nEkK/926DWRifVJhJ0cdsYQdhw8Sd1TBsmi1Vq9uDS0PvnhDGlC9YuhQli6qP2 6xpKDuANI47E4gHsTJELn/J4tACEM1an/qvPdY2vfGu8Y1FKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7w4uf2uG4N1mwXcJo7gfWE6WCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzI0ZTM5MjUtMjVhNy0z Mzg1LWJhZGUtYjBkMTM0ZDYyZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg6MVgHNfz8xhhxuw8JR/gR62PFNNNx4qpwdA+05ZyeduNoTYyYKdEG CEQzwV3BSG3JGGz1omcddiGukGbsrskw6j8SXxl/lVeOROCN2UoJ7+OvxZf9o99c J2QOPJ/wCRn39jBKSKgNkuh10cQXD3fhZktUcAjwAML64wir/zRZU5+kqHdmPhHm 7uQzYjagky6HCZBDUvftHVxZGzToo+uZiOzUJloJpQBeUjCJvsTdkGZdG9DapbMI pBZ52Hb3Wo1ZgqzSAHCLzaaa93vofVyUxxAJle5JyAS3xO+NYJoHT9eBpAaGXx8X 4ljP1X6WfPIcFdbnhpe1NGlYlRF8Lj8= -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:26 2026 by rpki-client