$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa File: 35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa (raw, json) Hash identifier: IA/LZRrc033qusz41krk3+lh+ZZSrIZ+dvB3UE1d+Lo= Subject key identifier: 88:92:FA:88:E5:A7:34:1F:E8:A1:DB:74:2F:6B:BD:37:12:92:BF:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFDA3C85A4ECA2FB850B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.106.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:da:3c:85:a4:ec:a2:fb:85:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=1ee800b0-e2d5-4d46-b6df-961d3015f150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:24:c8:a8:68:16:b2:75:71:87:7b:9d:63:25: a6:86:47:d1:64:f7:6b:d4:3d:11:11:c0:7b:70:21: cb:d0:04:20:0f:d7:52:70:0a:ab:ef:21:86:45:f3: e5:ff:61:64:8f:5c:1a:db:30:f4:82:a6:36:05:62: ff:f8:04:ed:50:84:c0:ca:91:a5:3e:2b:24:fc:78: 1d:e3:80:70:31:61:ad:90:ef:30:01:a1:95:66:e3: c3:0c:91:0f:1e:59:eb:9b:63:94:34:e1:4a:48:3f: 54:f2:d7:8d:2a:ca:49:69:74:88:f3:42:9d:0f:ba: 85:fa:72:3d:9c:23:b9:22:14:69:3d:6a:0d:88:fa: f6:df:fe:87:cb:ed:d6:5c:49:e2:ba:c1:c9:2f:28: df:19:df:a2:72:a1:f3:f4:d2:62:af:f0:ae:f0:93: c1:92:f1:46:02:1b:5e:31:f0:da:b1:80:2e:36:32: 1b:2b:79:ce:2e:69:c6:78:ab:cc:d1:94:4e:86:31: 00:ca:59:8d:77:55:db:98:86:00:1c:53:43:21:49: 3a:a0:3a:33:a8:37:92:5f:74:41:34:c5:6f:dd:66: 89:9b:64:22:94:3f:2e:7b:f2:c5:9c:37:67:fa:7d: 68:c9:7e:df:f1:29:9d:f1:b0:f9:2b:56:c8:da:1d: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:FA:88:E5:A7:34:1F:E8:A1:DB:74:2F:6B:BD:37:12:92:BF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35e2df4a-2887-3cbb-8a71-a23b65e5765b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0c:9f:d0:6c:1b:90:eb:ad:eb:79:da:65:0c:4f:3b:94:63: dd:27:55:4d:a4:32:10:ac:c9:aa:73:1f:11:43:db:50:1e:2f: 27:e6:2e:6e:44:7f:bc:c2:d6:b5:12:e1:c2:89:35:43:7b:66: d3:07:bd:a9:d8:6d:1a:3f:4a:bc:45:d6:49:5c:0c:58:12:a8: a3:08:25:1b:ba:bd:3f:bd:dd:d4:fc:72:76:c4:45:46:e4:86: 36:bc:cf:59:1c:8a:41:0f:83:1c:1f:f6:9e:be:53:87:9f:47: 81:1e:ab:60:2a:e7:b1:c1:3b:81:aa:83:2b:35:11:7b:bb:77: f7:f2:bf:22:85:59:39:21:30:57:bd:6f:96:db:9f:fc:b9:24: 7e:82:9c:11:24:64:41:e7:fa:17:3a:af:27:6b:95:31:47:57: 51:bc:c3:36:2b:f0:df:6c:29:e7:04:8b:5b:e5:10:cf:64:16: 6e:13:d4:79:09:ac:00:80:24:7d:64:d5:4c:cf:1e:45:97:16: da:2b:c4:2b:ab:62:d0:02:ed:ac:26:5b:fa:5a:fd:96:20:b5: 6e:a8:65:97:42:d9:14:72:87:5c:56:11:b3:66:d3:96:95:93: 0d:0e:d7:e6:82:2a:1b:e6:bf:db:17:3a:9a:d4:ee:24:2b:89: a7:c3:16:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er9o8haTsovuFC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MWVlODAwYjAtZTJkNS00ZDQ2LWI2ZGYtOTYxZDMwMTVmMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/STIqGgWsnVxh3udYyWmhkfRZPdr1D0REcB7 cCHL0AQgD9dScAqr7yGGRfPl/2Fkj1wa2zD0gqY2BWL/+ATtUITAypGlPisk/Hgd 44BwMWGtkO8wAaGVZuPDDJEPHlnrm2OUNOFKSD9U8teNKspJaXSI80KdD7qF+nI9 nCO5IhRpPWoNiPr23/6Hy+3WXEniusHJLyjfGd+icqHz9NJir/Cu8JPBkvFGAhte MfDasYAuNjIbK3nOLmnGeKvM0ZROhjEAylmNd1XbmIYAHFNDIUk6oDozqDeSX3RB NMVv3WaJm2QilD8ue/LFnDdn+n1oyX7f8Smd8bD5K1bI2h0XQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiS+ojlpzQf6KHbdC9rvTcSkr+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVlMmRmNGEtMjg4Ny0z Y2JiLThhNzEtYTIzYjY1ZTU3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQMn9BsG5Drret52mUMTzuUY90nVU2kMhCsyapzHxFD21AeLyfmLm5E f7zC1rUS4cKJNUN7ZtMHvanYbRo/SrxF1klcDFgSqKMIJRu6vT+93dT8cnbERUbk hja8z1kcikEPgxwf9p6+U4efR4Eeq2Aq57HBO4Gqgys1EXu7d/fyvyKFWTkhMFe9 b5bbn/y5JH6CnBEkZEHn+hc6rydrlTFHV1G8wzYr8N9sKecEi1vlEM9kFm4T1HkJ rACAJH1k1UzPHkWXFtorxCurYtAC7awmW/pa/ZYgtW6oZZdC2RRyh1xWEbNm05aV kw0O1+aCKhvmv9sXOprU7iQriafDFss= -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:57 2026 by rpki-client