$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ca86c9-22b2-3701-a945-35a051e74c44.roa File: 32ca86c9-22b2-3701-a945-35a051e74c44.roa (raw, json) Hash identifier: pPLRMkoIVHgA+LrDiQwMesz99rTYf3ZasyDdL0r3/7Y= Subject key identifier: 59:EA:A6:34:F1:EC:9A:3D:F2:08:F6:13:47:D2:C7:1D:2B:DD:B3:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A98FE57730EEF8D0D8500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ca86c9-22b2-3701-a945-35a051e74c44.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.229.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:98:fe:57:73:0e:ef:8d:0d:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=3f14e37e-2d8d-47be-a38e-b9ac76388f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:16:07:b2:b2:35:aa:ea:75:c3:22:da:a5: 0d:02:8f:8e:f5:5f:57:b3:0f:85:0d:f2:ac:33:98: 83:a0:7e:d6:25:af:78:9c:b7:37:85:93:3b:68:b7: cf:a7:67:f4:99:e3:66:8d:6d:69:25:e5:a4:55:e6: 2c:fa:f3:32:03:36:1e:f2:8b:0e:13:83:2f:71:75: 79:05:34:b9:d2:5e:b6:a6:a0:0c:48:73:d8:87:45: a2:95:e4:33:ed:0e:b2:f0:64:7c:d7:c7:2d:e4:40: 71:37:d4:62:0f:f4:dd:3c:f6:b0:48:d3:6a:04:1a: ae:49:3e:7b:7b:87:d7:03:c4:2a:ad:39:42:2a:48: 89:3d:40:17:03:d7:75:79:39:55:62:39:1b:7f:3e: 72:0e:45:69:fc:05:5a:6c:39:65:12:5a:0b:54:2f: b0:8b:86:d6:b9:0c:31:dc:0f:cc:5f:99:cf:32:de: 68:19:ed:1c:2c:6c:0a:da:67:3d:f0:2e:8f:29:e3: bf:77:fd:78:4d:38:05:83:2f:c2:f0:61:96:90:35: 35:e8:65:00:6b:64:1c:93:24:f7:38:c5:49:37:c4: ba:d3:25:0c:ce:2f:75:dd:4b:01:79:37:12:5b:6f: e3:d6:d1:6b:5c:9c:09:20:8f:02:86:eb:d6:86:6c: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EA:A6:34:F1:EC:9A:3D:F2:08:F6:13:47:D2:C7:1D:2B:DD:B3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ca86c9-22b2-3701-a945-35a051e74c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:53:2f:f2:06:e8:09:63:f8:c3:7d:fe:35:6c:5a:68:9d:5c: cf:a5:e7:69:48:c6:3d:35:40:57:82:1b:e1:5d:33:50:71:e0: 51:cc:e4:d7:9c:b4:13:a2:63:ac:5d:e3:08:a7:f0:84:af:00: de:0e:bd:24:d0:55:c2:31:73:33:c8:09:82:92:6e:54:48:33: 10:15:f9:bb:79:b6:42:a5:28:f5:31:a6:37:48:7e:ac:b9:29: 3a:13:18:fe:8e:22:31:c2:3c:8e:cf:10:aa:c9:21:df:81:8c: 4f:cb:42:2d:98:58:48:62:5d:67:29:67:18:56:89:bd:2d:55: 4d:81:fb:85:ad:5b:5d:76:49:62:5f:77:a8:61:b1:4b:31:c6: 98:a6:b5:81:91:a3:4d:32:83:99:e3:4f:23:6f:c8:1f:69:38: 2b:c2:dd:65:38:ab:58:52:46:72:86:83:f3:0e:07:61:da:56: a8:40:c4:e8:a2:bf:87:b8:2a:f5:4e:41:3a:3b:33:d9:81:9e: 2a:01:23:79:79:e4:91:54:6c:45:a4:23:cf:ac:77:7e:2b:10: a2:2a:4f:c3:7a:c9:c6:6c:e3:bd:70:90:aa:83:b2:94:a4:71: 77:1c:15:b7:a3:d9:c2:f1:4a:d6:4e:81:e9:de:cf:9c:d0:f3: 56:fc:83:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hepj+V3MO740NhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk M2YxNGUzN2UtMmQ4ZC00N2JlLWEzOGUtYjlhYzc2Mzg4ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAQWB7KyNarqdcMi2qUNAo+O9V9Xsw+FDfKs M5iDoH7WJa94nLc3hZM7aLfPp2f0meNmjW1pJeWkVeYs+vMyAzYe8osOE4MvcXV5 BTS50l62pqAMSHPYh0WileQz7Q6y8GR818ct5EBxN9RiD/TdPPawSNNqBBquST57 e4fXA8QqrTlCKkiJPUAXA9d1eTlVYjkbfz5yDkVp/AVabDllEloLVC+wi4bWuQwx 3A/MX5nPMt5oGe0cLGwK2mc98C6PKeO/d/14TTgFgy/C8GGWkDU16GUAa2QckyT3 OMVJN8S60yUMzi913UsBeTcSW2/j1tFrXJwJII8ChuvWhmykmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnqpjTx7Jo98gj2E0fSxx0r3bPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJjYTg2YzktMjJiMi0z NzAxLWE5NDUtMzVhMDUxZTc0YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERTL/IG6Alj+MN9/jVsWmidXM+l52lIxj01QFeCG+FdM1Bx4FHM5Nec tBOiY6xd4win8ISvAN4OvSTQVcIxczPICYKSblRIMxAV+bt5tkKlKPUxpjdIfqy5 KToTGP6OIjHCPI7PEKrJId+BjE/LQi2YWEhiXWcpZxhWib0tVU2B+4WtW112SWJf d6hhsUsxxpimtYGRo00yg5njTyNvyB9pOCvC3WU4q1hSRnKGg/MOB2HaVqhAxOii v4e4KvVOQTo7M9mBnioBI3l55JFUbEWkI8+sd34rEKIqT8N6ycZs471wkKqDspSk cXccFbej2cLxStZOgenez5zQ81b8g20= -----END CERTIFICATE-----Generated at Wed Jul 29 08:18:40 2026 by rpki-client