$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a119b07-7ce4-38cb-92de-c87805afa7a3.roa File: 3a119b07-7ce4-38cb-92de-c87805afa7a3.roa (raw, json) Hash identifier: rjjSSLJmMoZHwtKJziw75MfSewJwSCZRqX3idqK1R4Y= Subject key identifier: 10:9A:DD:70:B3:D3:05:26:E2:53:60:0F:D7:57:5C:87:BC:9F:37:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A58F9FA82042FA4B09F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a119b07-7ce4-38cb-92de-c87805afa7a3.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.0.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:58:f9:fa:82:04:2f:a4:b0:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=ce18d12e-374d-4f44-b3b4-4acbd5fc9e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:8b:30:27:65:19:91:0a:17:68:ac:53:68: 8e:29:1b:c8:bb:09:3f:1a:68:70:1c:ef:71:c5:98: 55:a3:3f:b6:a5:76:15:e6:b0:f2:3d:2d:bd:51:c2: 7f:de:ea:e6:83:df:5d:5f:d1:92:13:ca:5b:5b:3f: a4:0a:49:79:f1:8a:2c:8e:1b:70:90:f5:e8:45:7b: 88:38:1e:f5:7b:5f:77:87:23:4d:65:52:48:fb:eb: 3d:dd:ef:7f:9b:45:f1:1b:ac:43:e8:88:c1:21:90: 72:a2:83:37:2c:7f:d8:e3:88:9f:09:b8:ce:3b:88: 62:45:27:ba:b4:01:58:26:4c:3f:62:5b:23:4c:b4: f2:f3:cf:f3:d3:b2:90:12:c8:af:dd:79:75:07:fc: d7:29:94:d6:df:78:83:81:5a:7c:cd:40:c5:45:19: b1:0f:7f:a1:89:da:fb:e1:60:7d:94:3e:f2:88:cb: e2:85:6b:fa:8a:65:97:51:5c:4a:e9:76:f3:d0:97: 14:0b:94:b4:7d:78:fd:00:c2:cf:7b:c8:bb:85:35: fc:16:d5:85:8e:94:b5:b0:4e:99:e5:e9:5a:af:74: 88:f4:32:7c:fd:5f:35:f6:c5:e6:18:1c:bb:10:d0: c0:bf:86:a9:0d:94:79:02:a6:d6:25:8f:3e:6c:6a: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9A:DD:70:B3:D3:05:26:E2:53:60:0F:D7:57:5C:87:BC:9F:37:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a119b07-7ce4-38cb-92de-c87805afa7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:db:48:7e:03:b9:82:8a:0f:b6:f1:1c:a7:17:0a:f3:6e:1b: ff:7d:8f:03:84:18:77:75:65:7f:a4:fa:d8:83:e9:65:bf:c9: 7f:5c:f8:3e:7a:9c:da:10:3f:c8:0b:89:91:08:17:d0:06:02: 7f:86:00:44:cc:cc:c0:68:c3:b1:fb:6d:bf:f1:42:35:c6:d4: e3:ec:cf:e1:02:27:ac:ac:d4:a2:85:2f:46:7a:d5:b9:82:45: 41:8c:d6:88:42:3f:09:fd:59:64:af:22:e9:32:8b:8a:9b:f7: 04:70:6a:af:4b:72:d7:c3:e5:19:ad:c7:2e:6a:de:e2:ee:68: 6f:77:93:13:ac:dc:69:f3:ea:cd:a1:ea:98:8e:fa:a2:54:fa: 20:91:28:16:f0:aa:91:8f:1c:b1:f3:cb:de:fa:e8:f6:8a:59: 83:35:46:62:41:c6:6d:ce:e0:4d:45:2f:b4:86:55:5b:12:ea: 67:d4:ab:d1:df:dc:bb:b1:84:c1:f4:c5:19:9b:5c:db:aa:96: 32:d0:12:07:f1:c6:f0:4f:94:99:b6:f8:d3:ff:ef:83:64:21: 96:c2:bc:1f:ca:24:00:dc:03:55:85:61:31:0f:fd:8e:13:fd: bf:0f:96:bd:89:1a:ab:b5:32:fe:2b:76:3d:b7:8e:7a:df:91: 8c:57:a9:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSlj5+oIEL6Swn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk Y2UxOGQxMmUtMzc0ZC00ZjQ0LWIzYjQtNGFjYmQ1ZmM5ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvimLMCdlGZEKF2isU2iOKRvIuwk/GmhwHO9x xZhVoz+2pXYV5rDyPS29UcJ/3urmg99dX9GSE8pbWz+kCkl58YosjhtwkPXoRXuI OB71e193hyNNZVJI++s93e9/m0XxG6xD6IjBIZByooM3LH/Y44ifCbjOO4hiRSe6 tAFYJkw/YlsjTLTy88/z07KQEsiv3Xl1B/zXKZTW33iDgVp8zUDFRRmxD3+hidr7 4WB9lD7yiMvihWv6imWXUVxK6Xbz0JcUC5S0fXj9AMLPe8i7hTX8FtWFjpS1sE6Z 5elar3SI9DJ8/V819sXmGBy7ENDAv4apDZR5AqbWJY8+bGpukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCa3XCz0wUm4lNgD9dXXIe8nzeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ExMTliMDctN2NlNC0z OGNiLTkyZGUtYzg3ODA1YWZhN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXbSH4DuYKKD7bxHKcXCvNuG/99jwOEGHd1ZX+k+tiD6WW/yX9c+D56 nNoQP8gLiZEIF9AGAn+GAETMzMBow7H7bb/xQjXG1OPsz+ECJ6ys1KKFL0Z61bmC RUGM1ohCPwn9WWSvIukyi4qb9wRwaq9LctfD5Rmtxy5q3uLuaG93kxOs3Gnz6s2h 6piO+qJU+iCRKBbwqpGPHLHzy9766PaKWYM1RmJBxm3O4E1FL7SGVVsS6mfUq9Hf 3LuxhMH0xRmbXNuqljLQEgfxxvBPlJm2+NP/74NkIZbCvB/KJADcA1WFYTEP/Y4T /b8Plr2JGqu1Mv4rdj23jnrfkYxXqSc= -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:22 2026 by rpki-client