$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a411246-2b91-3f46-9667-8746421ce8d1.roa File: 3a411246-2b91-3f46-9667-8746421ce8d1.roa (raw, json) Hash identifier: F3zq7sD2mX67iKGGcO78bps/ZV16A8IDyyO1tqZRhEI= Subject key identifier: 2A:05:B5:36:CA:98:CB:F7:3E:5F:83:F1:B9:8B:2F:4C:A0:88:21:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A5884EAD1662EE80A8D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a411246-2b91-3f46-9667-8746421ce8d1.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.3.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:58:84:ea:d1:66:2e:e8:0a:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=46ab11cf-8536-4a5f-9935-d9dee76e68ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:29:d1:94:07:b0:69:16:22:a9:73:dd:dc: c8:ff:45:70:e1:e8:7a:47:18:34:4a:13:7e:27:d5: 57:42:45:c5:a8:70:80:a1:71:9f:09:dd:fc:9d:70: a5:cc:2c:08:7f:1d:41:25:ee:4e:92:0c:dd:b4:35: 85:a7:7e:7b:d5:77:ec:db:55:15:a0:2b:3f:ff:e1: 6c:8a:2d:b8:a4:08:fd:6a:b3:8a:6d:25:9d:64:91: 60:3c:ee:8c:9a:9b:07:7a:ef:b1:36:ef:1f:fb:d8: 75:d4:8b:8b:35:b0:67:20:62:7b:aa:f1:b1:03:c0: 8b:ad:11:54:30:ca:3d:11:03:2e:68:f5:03:43:ad: 15:c9:20:20:c9:80:5b:78:37:94:87:94:c4:3b:af: ad:19:43:60:26:be:1d:ae:25:b2:cf:ec:63:ed:a9: 72:b4:e9:0b:bb:08:91:8d:e8:ad:05:f5:cc:be:5c: 11:5c:c5:4a:55:d1:00:63:91:b8:d5:6c:b8:49:59: d2:dd:d8:88:53:8a:1c:57:5a:e4:5a:2d:6b:dd:5e: 40:29:14:d2:b3:09:d8:98:f5:69:29:eb:f4:78:bd: 54:ad:a6:ee:a1:35:8d:c3:0d:13:48:68:ab:9f:8f: 4b:c2:92:3d:a6:e7:a0:a2:ce:90:e5:1d:41:36:03: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:05:B5:36:CA:98:CB:F7:3E:5F:83:F1:B9:8B:2F:4C:A0:88:21:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a411246-2b91-3f46-9667-8746421ce8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:79:6d:33:a6:2c:b4:4f:32:3a:b0:c9:dc:0d:4b:50:1d:da: de:e8:37:d6:4c:7d:b4:d1:2c:6b:c2:f1:f6:a5:73:63:a3:1b: 76:76:d6:65:85:75:11:e5:87:df:40:14:44:76:1d:11:1c:f5: a2:d6:f8:18:77:91:e0:e8:0a:ce:11:8d:fd:4f:2f:43:3a:7e: 1c:e3:53:f8:e8:a8:9f:95:82:a9:28:37:be:b1:d4:03:df:6f: 11:49:53:25:09:05:13:89:e4:85:76:fb:f5:08:d3:bf:fd:4f: e4:c9:ee:08:b1:40:5a:c8:36:19:90:16:55:7e:d8:f8:9a:c0: 6a:ab:6c:d0:c6:76:89:81:40:87:a5:c2:38:80:01:e3:0e:d6: 4b:2c:46:34:46:2e:b1:39:84:9f:3b:ff:fc:cf:9c:bb:3f:49: 21:cf:b2:de:25:b4:bf:03:14:40:fa:a2:0f:c7:96:dd:38:1c: fd:6b:b5:97:75:8e:53:e7:9e:dd:3a:7f:82:eb:9f:68:5a:fd: 1c:24:7c:54:f7:db:cd:92:56:94:04:ca:7c:de:8e:6c:f4:65: 74:70:1d:60:ec:0c:46:f7:de:ee:17:1b:db:b4:d2:23:d1:9c: fe:62:f8:9c:f7:f9:1a:63:26:bb:23:45:94:81:88:a6:29:06: ee:22:94:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSliE6tFmLugKjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NDZhYjExY2YtODUzNi00YTVmLTk5MzUtZDlkZWU3NmU2OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Yp0ZQHsGkWIqlz3dzI/0Vw4eh6Rxg0ShN+ J9VXQkXFqHCAoXGfCd38nXClzCwIfx1BJe5OkgzdtDWFp3571Xfs21UVoCs//+Fs ii24pAj9arOKbSWdZJFgPO6MmpsHeu+xNu8f+9h11IuLNbBnIGJ7qvGxA8CLrRFU MMo9EQMuaPUDQ60VySAgyYBbeDeUh5TEO6+tGUNgJr4driWyz+xj7alytOkLuwiR jeitBfXMvlwRXMVKVdEAY5G41Wy4SVnS3diIU4ocV1rkWi1r3V5AKRTSswnYmPVp Kev0eL1UrabuoTWNww0TSGirn49LwpI9puegos6Q5R1BNgMXBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoFtTbKmMv3Pl+D8bmLL0ygiCFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E0MTEyNDYtMmI5MS0z ZjQ2LTk2NjctODc0NjQyMWNlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV5bTOmLLRPMjqwydwNS1Ad2t7oN9ZMfbTRLGvC8falc2OjG3Z21mWF dRHlh99AFER2HREc9aLW+Bh3keDoCs4Rjf1PL0M6fhzjU/joqJ+VgqkoN76x1APf bxFJUyUJBROJ5IV2+/UI07/9T+TJ7gixQFrINhmQFlV+2PiawGqrbNDGdomBQIel wjiAAeMO1kssRjRGLrE5hJ87//zPnLs/SSHPst4ltL8DFED6og/Hlt04HP1rtZd1 jlPnnt06f4Lrn2ha/RwkfFT3282SVpQEynzejmz0ZXRwHWDsDEb33u4XG9u00iPR nP5i+Jz3+RpjJrsjRZSBiKYpBu4ilI4= -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:16 2026 by rpki-client