$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33319fb4-2080-3ad7-8205-2824a4b5cb01.roa File: 33319fb4-2080-3ad7-8205-2824a4b5cb01.roa (raw, json) Hash identifier: 11+dq5/OLx/4KistV3EEfa9xcngWWxMo6GsptIuuN6M= Subject key identifier: 59:6E:5E:25:52:63:3A:0A:C2:5E:77:D6:24:ED:60:83:6C:A7:71:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB4931D24CB9FDFCB3540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33319fb4-2080-3ad7-8205-2824a4b5cb01.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.3.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b4:93:1d:24:cb:9f:df:cb:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=5edb2eba-b153-4382-bf85-bcd00342506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:fd:9a:3d:bc:1c:ca:97:69:82:56:8d:d1: 29:bc:52:c6:3b:9d:f6:66:15:72:71:77:a0:a4:1b: b0:5b:68:91:04:c7:e1:35:25:85:5d:99:5f:c5:3b: 8b:fa:0d:17:95:46:46:ba:43:17:ea:10:6c:4a:13: 3e:2e:6d:b2:80:43:ba:58:0b:2b:81:e7:04:1b:19: ab:b0:41:42:a0:8f:30:22:b4:22:fa:69:3f:98:dd: 35:ae:60:01:b8:5d:db:d2:e5:4f:54:66:79:24:e3: e0:18:3e:08:31:74:05:2e:ba:ba:ec:85:1e:c6:01: 96:fa:c6:40:ca:dd:2a:23:de:0f:67:92:bb:1a:81: d3:1f:75:27:42:17:22:bf:97:45:9e:0a:38:77:ae: 23:93:be:6f:87:35:78:c3:6a:c0:ea:60:05:f4:30: ac:cb:9a:3e:8b:b7:d5:07:eb:40:56:86:bb:5c:b5: 22:64:8d:68:1b:b8:fe:f9:0b:2f:67:db:ff:2b:61: eb:3d:e4:43:5c:e9:be:c4:56:c1:95:d4:0a:5e:8f: 8b:e1:b8:4d:8e:91:93:7d:4d:ac:37:16:22:e7:25: f8:9c:e0:85:94:0a:03:01:90:de:72:a6:be:2a:1e: 98:1f:51:14:46:92:58:1c:2a:31:7e:b4:e4:f5:fb: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6E:5E:25:52:63:3A:0A:C2:5E:77:D6:24:ED:60:83:6C:A7:71:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33319fb4-2080-3ad7-8205-2824a4b5cb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:57:5f:a5:d6:c9:66:3b:fc:36:5e:ea:6d:de:be:0d:6b:b8: 64:2d:26:29:12:87:43:f0:e4:bd:2b:d3:12:03:7b:b8:91:41: 7c:2f:b6:b9:13:c4:bd:65:5b:41:bd:ce:56:63:f9:b4:68:e1: 07:85:ed:78:f0:6e:37:d0:cf:eb:5f:9a:39:6f:55:81:64:17: fe:b0:dc:51:fe:f4:16:86:9d:f3:ce:6f:34:5d:52:ee:bb:21: 8e:76:35:cf:85:28:1c:49:bf:d2:58:e5:e0:1c:e5:8b:4c:c1: 0c:29:37:f5:e9:ca:03:db:60:ec:cb:27:24:da:84:7a:99:e5: 30:6d:db:fd:e7:99:8c:84:1b:c6:f6:d1:71:f5:03:5f:e6:7b: 32:50:d0:5e:bc:c4:34:4a:5b:d1:00:94:fd:6a:3a:f5:68:0d: 1c:3f:52:e8:3f:25:59:92:47:0c:d0:f8:1b:a4:c2:bb:31:aa: 97:70:86:f5:af:68:c8:28:47:da:8d:a2:a5:74:7b:a1:ed:42: a1:af:2f:7f:69:1c:2c:4b:f2:24:ec:a2:2d:e3:33:35:38:da: 7e:8b:4d:e4:35:4c:7f:40:74:8a:72:51:d6:e7:aa:d5:36:f6: 9d:3e:b2:cf:a3:c5:e2:65:9e:71:97:f9:b2:29:ba:bf:c9:8e: 54:1a:14:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrSTHSTLn9/LNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NWVkYjJlYmEtYjE1My00MzgyLWJmODUtYmNkMDAzNDI1MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQb9mj28HMqXaYJWjdEpvFLGO532ZhVycXeg pBuwW2iRBMfhNSWFXZlfxTuL+g0XlUZGukMX6hBsShM+Lm2ygEO6WAsrgecEGxmr sEFCoI8wIrQi+mk/mN01rmABuF3b0uVPVGZ5JOPgGD4IMXQFLrq67IUexgGW+sZA yt0qI94PZ5K7GoHTH3UnQhciv5dFngo4d64jk75vhzV4w2rA6mAF9DCsy5o+i7fV B+tAVoa7XLUiZI1oG7j++QsvZ9v/K2HrPeRDXOm+xFbBldQKXo+L4bhNjpGTfU2s NxYi5yX4nOCFlAoDAZDecqa+Kh6YH1EURpJYHCoxfrTk9ftX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFluXiVSYzoKwl531iTtYINsp3FPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzMzMTlmYjQtMjA4MC0z YWQ3LTgyMDUtMjgyNGE0YjVjYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpXX6XWyWY7/DZe6m3evg1ruGQtJikSh0Pw5L0r0xIDe7iRQXwvtrkT xL1lW0G9zlZj+bRo4QeF7XjwbjfQz+tfmjlvVYFkF/6w3FH+9BaGnfPObzRdUu67 IY52Nc+FKBxJv9JY5eAc5YtMwQwpN/XpygPbYOzLJyTahHqZ5TBt2/3nmYyEG8b2 0XH1A1/mezJQ0F68xDRKW9EAlP1qOvVoDRw/Uug/JVmSRwzQ+BukwrsxqpdwhvWv aMgoR9qNoqV0e6HtQqGvL39pHCxL8iTsoi3jMzU42n6LTeQ1TH9AdIpyUdbnqtU2 9p0+ss+jxeJlnnGX+bIpur/JjlQaFPg= -----END CERTIFICATE-----Generated at Tue Jul 28 21:44:03 2026 by rpki-client