$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a1fd086-b038-33fc-8cff-fff629072a98.roa File: 3a1fd086-b038-33fc-8cff-fff629072a98.roa (raw, json) Hash identifier: rgI7CskS4hPTiqWQZmqdYSpbDrwQFEZ3jyjSwgiiC/M= Subject key identifier: 98:CD:4E:78:2B:64:25:23:A4:12:93:09:BF:2D:68:1F:29:F7:6E:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A962DDC193A1D8A45FE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a1fd086-b038-33fc-8cff-fff629072a98.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.224.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:96:2d:dc:19:3a:1d:8a:45:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=c91e89e7-1d56-4776-8f3a-0367747bc21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:30:5f:77:37:2b:dd:64:aa:1a:f2:77:55: 68:30:1f:58:d7:b4:77:20:02:85:5b:96:8f:64:be: a6:80:02:c1:a6:5d:4d:52:d0:64:9a:b0:ed:6c:83: da:a6:58:cc:fb:ed:af:f3:6d:1d:38:cb:90:7f:75: cf:69:fb:9b:99:81:7d:45:40:3b:b2:22:cd:4d:91: 73:cc:05:c2:a5:ee:5c:47:6e:17:c8:8a:b7:a8:20: dd:9b:45:c4:d3:82:0d:1f:62:f4:ea:1b:64:6d:d2: 76:b1:e7:09:28:7b:93:ee:7a:b1:42:ca:d3:82:81: c9:74:4d:e9:86:b2:37:7c:fe:5e:a7:ff:e7:e7:b9: b6:08:c9:0a:e8:23:db:ad:f6:bf:f3:77:52:a0:0d: 90:49:4c:a1:29:c9:ac:29:2b:19:73:44:79:79:f1: f5:2d:78:48:21:84:70:45:fe:72:29:67:92:47:a5: 77:19:25:4d:c5:64:40:cd:b1:a1:b0:47:f6:a9:98: 27:f0:42:15:33:93:9b:d9:8e:ca:da:39:c7:f3:38: 4a:32:c6:82:b3:a0:0d:06:9c:3c:7d:54:ee:dd:07: ce:ef:2e:3f:4d:bf:8a:63:37:ca:cc:75:89:14:74: d5:1b:92:7a:6b:2d:c9:dd:4b:b9:c9:fc:af:3e:97: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:4E:78:2B:64:25:23:A4:12:93:09:BF:2D:68:1F:29:F7:6E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a1fd086-b038-33fc-8cff-fff629072a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fc:1b:69:b4:d1:6e:5e:6e:c8:79:51:cc:93:e3:7f:e6:3e: 01:39:49:05:9a:fb:be:ec:07:03:fa:d1:bb:fc:d1:47:05:9c: 11:27:24:07:75:5c:90:e4:fb:e7:59:bb:d6:9e:73:2e:99:16: 29:68:34:ea:21:80:af:03:aa:f5:c9:e3:c9:d2:e2:cc:7a:d1: be:39:27:23:b4:2f:fc:8e:15:f6:2f:22:ff:bc:73:7f:cc:d4: 6f:6c:20:22:0e:f2:f2:35:c4:a8:5e:db:f1:79:56:a3:04:53: 97:dd:42:d1:4c:c6:de:c0:42:55:de:8d:7d:e6:a2:d3:9b:0f: 7e:06:4f:4c:ff:96:d9:a4:eb:e2:f3:6b:4a:bc:37:75:a5:82: a7:ed:64:0a:dc:3b:e0:40:e6:7a:39:d4:56:82:13:08:ea:db: 46:05:d2:20:8f:76:e4:ae:67:46:3b:1a:cc:68:87:2a:7d:b0: 61:4c:14:b5:53:e3:7b:d8:d4:87:a6:3c:ca:cd:37:aa:35:15: 29:8c:ad:a6:ae:41:60:7c:ed:15:db:c7:b4:33:f7:2a:ae:18: 37:79:73:a2:e2:13:ae:87:21:67:0a:fe:b6:4b:88:32:b7:80: 2f:3f:9d:4e:56:5a:3d:b4:58:52:99:9c:d8:46:72:54:8f:90: c1:e5:a0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hepYt3Bk6HYpF/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YzkxZTg5ZTctMWQ1Ni00Nzc2LThmM2EtMDM2Nzc0N2JjMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs0wX3c3K91kqhryd1VoMB9Y17R3IAKFW5aP ZL6mgALBpl1NUtBkmrDtbIPapljM++2v820dOMuQf3XPafubmYF9RUA7siLNTZFz zAXCpe5cR24XyIq3qCDdm0XE04INH2L06htkbdJ2secJKHuT7nqxQsrTgoHJdE3p hrI3fP5ep//n57m2CMkK6CPbrfa/83dSoA2QSUyhKcmsKSsZc0R5efH1LXhIIYRw Rf5yKWeSR6V3GSVNxWRAzbGhsEf2qZgn8EIVM5Ob2Y7K2jnH8zhKMsaCs6ANBpw8 fVTu3QfO7y4/Tb+KYzfKzHWJFHTVG5J6ay3J3Uu5yfyvPpdPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjNTngrZCUjpBKTCb8taB8p925IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ExZmQwODYtYjAzOC0z M2ZjLThjZmYtZmZmNjI5MDcyYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROD3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr8G2m00W5ebsh5UcyT43/mPgE5SQWa+77sBwP60bv80UcFnBEnJAd1 XJDk++dZu9aecy6ZFiloNOohgK8DqvXJ48nS4sx60b45JyO0L/yOFfYvIv+8c3/M 1G9sICIO8vI1xKhe2/F5VqMEU5fdQtFMxt7AQlXejX3motObD34GT0z/ltmk6+Lz a0q8N3WlgqftZArcO+BA5no51FaCEwjq20YF0iCPduSuZ0Y7Gsxohyp9sGFMFLVT 43vY1IemPMrNN6o1FSmMraauQWB87RXbx7Qz9yquGDd5c6LiE66HIWcK/rZLiDK3 gC8/nU5WWj20WFKZnNhGclSPkMHloAs= -----END CERTIFICATE-----Generated at Wed Jul 29 00:34:46 2026 by rpki-client