$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ac4a242-8de3-349a-b6d1-1694732d6016.roa File: 3ac4a242-8de3-349a-b6d1-1694732d6016.roa (raw, json) Hash identifier: lcxqlxZxYhJ7azB6Pk8XXYRIk7tk5Vsem97d04xuuKM= Subject key identifier: DE:07:33:93:61:C9:22:1F:20:A6:36:57:60:0C:7C:97:B1:88:30:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB4F7F3D1FAE306E994C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ac4a242-8de3-349a-b6d1-1694732d6016.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.98.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b4:f7:f3:d1:fa:e3:06:e9:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=0bcf1b9b-46cd-45bf-847f-c1274607048f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:05:a1:ff:f2:7a:9c:55:79:ed:08:ee:5c: 82:6a:84:d7:c5:1d:e9:ad:b3:14:12:ed:f6:e4:81: ce:24:e2:2a:de:8d:e3:3f:47:2f:43:b5:09:57:ea: 1f:74:3d:0e:99:f6:0a:fb:ec:02:1f:f6:e9:84:41: a7:88:97:36:e5:45:07:9c:1a:36:d0:33:a5:f9:0d: 34:88:5f:22:46:70:e0:b0:3c:9e:01:db:6f:1e:f4: 59:af:37:f6:50:1a:d7:6d:89:de:56:05:0a:81:63: 37:72:c2:4c:a9:b9:04:10:f6:05:cc:16:1d:97:bf: 53:fa:4c:ee:69:20:c9:1a:fc:53:e7:f8:2c:84:fa: 92:04:9a:6b:30:db:10:97:4b:be:d4:69:1a:1b:5b: 39:c5:5c:04:16:a3:86:e5:c0:1f:35:45:e3:d1:eb: 12:81:07:98:34:f8:c6:bf:27:bd:51:5c:93:ed:fa: e7:94:0b:24:84:c7:2b:33:f4:b8:a5:55:fe:fc:6f: e4:d9:4c:e9:60:56:ea:3a:41:43:cf:3e:db:24:61: 24:f1:65:82:48:e2:00:70:da:29:94:aa:df:02:67: 7f:38:a1:a6:19:87:47:39:b5:9c:2b:75:70:8e:53: d7:05:3d:df:6b:4c:28:e6:57:61:e1:09:d2:3a:0d: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:07:33:93:61:C9:22:1F:20:A6:36:57:60:0C:7C:97:B1:88:30:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ac4a242-8de3-349a-b6d1-1694732d6016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:06:b5:dd:f1:a7:47:12:70:80:52:16:d4:85:bf:1a:3e:65: 3d:35:67:38:df:41:83:f6:8e:8d:cf:cd:d2:d3:e2:67:73:6f: 97:af:ef:17:27:89:96:8a:ba:67:9a:f0:ca:c6:de:a4:c7:f6: 0a:db:e3:94:f2:90:f8:bf:94:6d:92:e8:5c:72:c6:b9:83:2b: fe:6e:a9:7f:54:21:5a:ad:2e:d0:e3:e3:a7:2f:63:e0:1d:5d: db:0f:c0:05:1e:28:1c:31:ac:d7:c1:ba:48:d3:ed:4a:06:3f: 49:fe:6c:76:0c:2d:ab:b4:8d:a0:5d:4e:4c:f0:7c:a3:44:e0: 76:0d:e6:7f:ee:ca:d0:dc:29:f3:53:d4:a5:6a:7e:b6:8c:c7: 87:d7:fb:1c:cb:00:e1:4d:1c:5d:64:d7:2e:80:42:c9:7f:3d: 83:7d:c8:77:fe:d6:b8:53:4a:05:b6:7f:cf:b9:c1:2a:f9:fd: 8f:6f:df:c5:15:e3:af:f8:54:5f:8c:e7:51:ff:5c:68:85:b1: 36:ac:89:60:a4:43:ec:2e:70:5a:67:58:7a:b8:44:6f:c2:7b: a4:94:eb:d1:80:d7:85:97:49:a7:08:8a:97:f9:89:3d:ea:92: f0:d0:1f:b3:5c:85:02:d5:ff:a4:ab:eb:69:b1:ac:97:d9:14: e4:b0:af:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrT389H64wbplMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MGJjZjFiOWItNDZjZC00NWJmLTg0N2YtYzEyNzQ2MDcwNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2kFof/yepxVee0I7lyCaoTXxR3prbMUEu32 5IHOJOIq3o3jP0cvQ7UJV+ofdD0OmfYK++wCH/bphEGniJc25UUHnBo20DOl+Q00 iF8iRnDgsDyeAdtvHvRZrzf2UBrXbYneVgUKgWM3csJMqbkEEPYFzBYdl79T+kzu aSDJGvxT5/gshPqSBJprMNsQl0u+1GkaG1s5xVwEFqOG5cAfNUXj0esSgQeYNPjG vye9UVyT7frnlAskhMcrM/S4pVX+/G/k2UzpYFbqOkFDzz7bJGEk8WWCSOIAcNop lKrfAmd/OKGmGYdHObWcK3VwjlPXBT3fa0wo5ldh4QnSOg0t6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4HM5NhySIfIKY2V2AMfJexiDBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FjNGEyNDItOGRlMy0z NDlhLWI2ZDEtMTY5NDczMmQ2MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Gtd3xp0cScIBSFtSFvxo+ZT01ZzjfQYP2jo3PzdLT4mdzb5ev7xcn iZaKumea8MrG3qTH9grb45TykPi/lG2S6FxyxrmDK/5uqX9UIVqtLtDj46cvY+Ad XdsPwAUeKBwxrNfBukjT7UoGP0n+bHYMLau0jaBdTkzwfKNE4HYN5n/uytDcKfNT 1KVqfraMx4fX+xzLAOFNHF1k1y6AQsl/PYN9yHf+1rhTSgW2f8+5wSr5/Y9v38UV 46/4VF+M51H/XGiFsTasiWCkQ+wucFpnWHq4RG/Ce6SU69GA14WXSacIipf5iT3q kvDQH7NchQLV/6Sr62mxrJfZFOSwr4k= -----END CERTIFICATE-----Generated at Wed Jul 29 02:08:26 2026 by rpki-client