$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33321886-c672-38b9-9057-672086510a4c.roa File: 33321886-c672-38b9-9057-672086510a4c.roa (raw, json) Hash identifier: EwCrar3yXNiuFhlIiw3DNIeLnE4LG/42h6ge2cFGVho= Subject key identifier: 34:56:86:80:05:78:58:4B:18:61:B5:60:31:10:63:4F:90:74:87:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A634DE07426EA8E268E90 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33321886-c672-38b9-9057-672086510a4c.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.104.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:63:4d:e0:74:26:ea:8e:26:8e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=ba5ec0dc-4233-4e20-88be-b4890f093776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:8c:93:5d:84:86:da:c3:9d:70:d0:a9:25: 1d:c1:1b:b0:67:43:61:d6:39:4d:66:39:78:55:59: 4f:42:3e:6d:d8:45:3f:12:76:50:48:b7:61:4d:56: 87:5d:48:5e:ad:52:34:fb:46:27:cb:be:3d:51:f5: b6:e2:19:38:e5:12:25:98:85:c9:38:08:23:bd:1b: ed:89:10:36:2b:82:01:16:3d:22:ba:3c:d9:e2:48: 71:c7:17:44:90:f3:87:26:c6:27:9f:5a:46:6f:b9: 2b:e9:95:6a:87:04:ee:4b:c9:6a:77:64:de:15:89: a9:ab:f7:af:e4:bf:70:40:2b:d0:78:42:3d:24:9e: c1:31:3e:3a:d4:88:68:da:de:59:4e:f6:29:ed:04: a0:ae:52:cb:da:a3:7e:a6:cf:a9:58:e5:e4:d6:8e: 11:18:96:d6:74:1d:e3:d5:e3:cd:20:c7:4a:6b:71: 61:20:f2:db:cd:66:64:06:7e:0c:16:87:55:cf:0f: 31:ab:f3:cf:d6:fb:f1:20:11:bc:98:d8:ec:a4:9e: a2:49:d9:e1:17:b9:7d:7e:a1:61:1b:dd:d9:5c:c9: bb:95:9c:10:cc:93:4e:ed:52:bf:07:73:a3:7e:ac: dd:3e:ac:bc:c6:1b:f1:63:74:ad:6b:d1:4d:45:ab: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:56:86:80:05:78:58:4B:18:61:B5:60:31:10:63:4F:90:74:87:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33321886-c672-38b9-9057-672086510a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:21:69:cf:1e:ba:e0:26:9d:c1:fa:2b:1e:1d:56:7c:fd:08: 98:a9:2e:76:a7:8e:d2:7d:59:87:5c:b9:2f:01:82:b6:dc:17: 2a:d5:ba:4c:7e:82:c9:18:9a:ac:64:eb:5d:b6:5c:43:dc:57: 84:3d:f5:23:59:e2:5c:ab:6b:86:04:10:fb:42:dc:44:02:83: a0:01:60:da:59:16:c4:a0:bf:eb:df:9c:0f:eb:bc:1e:55:fd: ba:28:bc:52:7d:3b:94:74:15:88:15:ce:62:39:f2:23:36:e7: b0:28:c8:13:5d:d3:83:78:ab:78:cf:ba:a7:85:e1:06:29:3c: 93:6b:fc:e1:35:53:d3:31:4a:91:e3:6f:c7:c6:be:10:ce:a7: db:71:52:c6:eb:22:9b:5a:11:99:70:9c:a0:08:75:b7:13:fa: 4d:a8:29:2b:d6:ca:f5:62:66:6a:59:c5:6e:cc:ab:81:91:7f: 66:d9:82:47:b9:94:7d:36:2d:ce:5f:91:14:63:c9:8a:62:1a: 9a:3f:6d:84:64:97:01:58:4f:8f:31:bc:23:7d:54:34:5f:9c: 23:21:65:c8:ca:66:9e:63:ba:98:9a:26:2a:b9:76:1a:91:60: dc:58:0b:9a:6d:c9:ba:ef:a0:a3:08:74:cd:71:61:12:1a:14: 79:5d:1c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hemNN4HQm6o4mjpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YmE1ZWMwZGMtNDIzMy00ZTIwLTg4YmUtYjQ4OTBmMDkzNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux2Mk12EhtrDnXDQqSUdwRuwZ0Nh1jlNZjl4 VVlPQj5t2EU/EnZQSLdhTVaHXUherVI0+0Yny749UfW24hk45RIlmIXJOAgjvRvt iRA2K4IBFj0iujzZ4khxxxdEkPOHJsYnn1pGb7kr6ZVqhwTuS8lqd2TeFYmpq/ev 5L9wQCvQeEI9JJ7BMT461Iho2t5ZTvYp7QSgrlLL2qN+ps+pWOXk1o4RGJbWdB3j 1ePNIMdKa3FhIPLbzWZkBn4MFodVzw8xq/PP1vvxIBG8mNjspJ6iSdnhF7l9fqFh G93ZXMm7lZwQzJNO7VK/B3OjfqzdPqy8xhvxY3Sta9FNRavF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRWhoAFeFhLGGG1YDEQY0+QdIcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzMzMjE4ODYtYzY3Mi0z OGI5LTkwNTctNjcyMDg2NTEwYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAhac8euuAmncH6Kx4dVnz9CJipLnanjtJ9WYdcuS8BgrbcFyrVukx+ gskYmqxk6122XEPcV4Q99SNZ4lyra4YEEPtC3EQCg6ABYNpZFsSgv+vfnA/rvB5V /boovFJ9O5R0FYgVzmI58iM257AoyBNd04N4q3jPuqeF4QYpPJNr/OE1U9MxSpHj b8fGvhDOp9txUsbrIptaEZlwnKAIdbcT+k2oKSvWyvViZmpZxW7Mq4GRf2bZgke5 lH02Lc5fkRRjyYpiGpo/bYRklwFYT48xvCN9VDRfnCMhZcjKZp5jupiaJiq5dhqR YNxYC5ptybrvoKMIdM1xYRIaFHldHIs= -----END CERTIFICATE-----Generated at Wed Jul 29 06:13:56 2026 by rpki-client