$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c9ed90f-e549-3b1a-9401-c4721a6a1734.roa File: 3c9ed90f-e549-3b1a-9401-c4721a6a1734.roa (raw, json) Hash identifier: irZEVbIXxxhMN5MU+jesxMCEFpKdOiclHcsq7kzZo+w= Subject key identifier: 1F:8C:38:47:54:C9:78:31:DF:4F:E8:C0:5C:43:94:96:D3:44:96:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A7D9AC9C48E2323F3D8C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c9ed90f-e549-3b1a-9401-c4721a6a1734.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.104.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:7d:9a:c9:c4:8e:23:23:f3:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=0a160785-e59c-44f7-ba45-5221f16ff0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f4:40:6a:8c:fc:4b:95:d3:b4:33:79:94:6a: e4:b3:40:ba:bd:1e:d6:cb:bf:ec:46:16:85:36:66: 5a:b2:6a:bb:45:8f:32:30:ef:cd:07:60:3c:a0:34: 61:9b:35:88:83:44:fa:9e:9b:4d:de:ae:23:33:eb: 8a:e5:12:78:b8:0a:bb:ef:fe:8b:47:96:61:23:23: 6e:a7:e8:7c:2e:80:1c:27:95:d1:76:11:50:72:1a: bd:12:b4:60:e8:ea:7c:a9:e8:96:d8:f9:5c:21:c2: e6:b2:fa:9d:22:73:40:59:cf:53:90:b1:5f:8a:55: 64:41:f7:41:6e:78:68:3d:63:e0:8c:81:f7:78:a2: 1f:bd:d0:f6:5b:fa:82:75:85:d6:f1:dd:51:69:8c: 02:7b:db:d6:4a:7e:c9:8f:f0:95:16:38:46:ef:5b: 86:32:b5:84:d3:b1:6b:1d:fe:2c:13:b3:70:7b:4a: c9:b0:74:8b:49:11:f8:7b:f8:cb:33:ac:38:56:b2: bb:ba:c7:6b:19:2e:cc:56:18:32:d3:08:f7:8a:02: 16:ef:e7:37:fd:2d:22:86:b4:b1:21:26:e9:f4:04: 9d:fc:6a:f4:19:d9:42:07:c9:4e:f4:5a:4b:07:26: 83:de:ee:cd:03:df:92:60:05:50:a8:e6:2c:ae:11: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8C:38:47:54:C9:78:31:DF:4F:E8:C0:5C:43:94:96:D3:44:96:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c9ed90f-e549-3b1a-9401-c4721a6a1734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:4e:1d:d3:a2:ad:f9:54:50:4a:99:b0:5f:e6:8a:18:43: fb:40:e0:88:97:48:76:fd:3e:eb:62:f5:42:52:f4:a1:93:b7: 54:a1:93:db:cf:94:00:9b:ad:34:b2:2c:88:02:7e:f2:fc:de: a6:1b:1a:e6:06:ba:5e:7c:b9:5a:65:26:65:d9:bb:ae:f8:2c: 34:0d:36:8c:4e:cb:af:f0:6d:6b:f0:26:29:96:7c:d6:3c:ae: e1:40:2b:d9:ab:fe:65:ab:57:78:4a:ea:25:66:89:0e:49:d8: 64:3d:46:7e:0d:03:8a:57:4c:5a:18:9b:7b:76:ad:14:31:fb: fb:30:00:8b:27:7a:ba:18:7c:b5:c9:9a:83:89:f2:20:81:95: b1:be:7b:cc:bd:5b:22:23:5f:33:07:c2:55:0c:7f:9b:78:44: 40:cd:1d:5f:4d:7f:73:3e:d9:7e:cb:19:24:fc:6d:5c:61:3b: aa:36:68:d8:9c:f1:3c:06:89:42:08:bc:c4:32:11:db:d9:05: 24:c7:76:30:ce:70:73:ab:a8:d2:c7:ad:a9:44:07:fd:53:dc: 9e:61:a8:a8:91:84:d0:f9:28:e8:b1:24:63:50:f7:02:58:ba: c9:94:8a:00:df:6b:c4:33:47:96:74:9a:ee:23:8e:0e:ff:4d: 22:b3:cf:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hen2aycSOIyPz2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk MGExNjA3ODUtZTU5Yy00NGY3LWJhNDUtNTIyMWYxNmZmMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfRAaoz8S5XTtDN5lGrks0C6vR7Wy7/sRhaF NmZasmq7RY8yMO/NB2A8oDRhmzWIg0T6nptN3q4jM+uK5RJ4uAq77/6LR5ZhIyNu p+h8LoAcJ5XRdhFQchq9ErRg6Op8qeiW2PlcIcLmsvqdInNAWc9TkLFfilVkQfdB bnhoPWPgjIH3eKIfvdD2W/qCdYXW8d1RaYwCe9vWSn7Jj/CVFjhG71uGMrWE07Fr Hf4sE7Nwe0rJsHSLSRH4e/jLM6w4VrK7usdrGS7MVhgy0wj3igIW7+c3/S0ihrSx ISbp9ASd/Gr0GdlCB8lO9FpLByaD3u7NA9+SYAVQqOYsrhHABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+MOEdUyXgx30/owFxDlJbTRJZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2M5ZWQ5MGYtZTU0OS0z YjFhLTk0MDEtYzQ3MjFhNmExNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVxTh3Toq35VFBKmbBf5ooYQ/tA4IiXSHb9Puti9UJS9KGTt1Shk9vP lACbrTSyLIgCfvL83qYbGuYGul58uVplJmXZu674LDQNNoxOy6/wbWvwJimWfNY8 ruFAK9mr/mWrV3hK6iVmiQ5J2GQ9Rn4NA4pXTFoYm3t2rRQx+/swAIsneroYfLXJ moOJ8iCBlbG+e8y9WyIjXzMHwlUMf5t4REDNHV9Nf3M+2X7LGST8bVxhO6o2aNic 8TwGiUIIvMQyEdvZBSTHdjDOcHOrqNLHralEB/1T3J5hqKiRhND5KOixJGNQ9wJY usmUigDfa8QzR5Z0mu4jjg7/TSKzz4o= -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:42 2026 by rpki-client