$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d30a9a1-b83d-3d7d-88db-6f5b9d27f0eb.roa File: 3d30a9a1-b83d-3d7d-88db-6f5b9d27f0eb.roa (raw, json) Hash identifier: CMD9pL3dZ3nR2x6V0RWj1DyxlwrCLMEJOeAs5sIvMBQ= Subject key identifier: DE:B1:D4:A1:B6:BD:83:0C:63:62:7C:81:08:2B:33:A2:9E:0B:AB:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB000DC6CA98515C0922C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d30a9a1-b83d-3d7d-88db-6f5b9d27f0eb.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.228.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:00:dc:6c:a9:85:15:c0:92:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=b3bdd9f5-6367-4cf1-9349-134a8436acf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:df:70:4e:87:1d:ed:b5:9f:d6:ee:5b:a0: dc:80:9c:10:2c:43:27:c4:5a:47:e5:9e:64:26:c7: c6:87:dd:3e:57:e6:98:23:cb:b7:25:df:02:a4:55: dd:e1:9d:79:dd:a8:53:a4:30:10:d0:bb:0e:bf:b5: fa:aa:d8:2e:61:22:a9:87:3b:54:7a:12:4b:ba:4f: 18:28:7b:45:31:ee:99:19:b0:ca:1e:ca:a2:6d:02: 6f:72:c2:48:91:b0:05:61:54:0b:79:89:24:bf:23: a3:29:a9:00:3d:18:a1:6b:b6:52:96:e1:6a:df:87: 87:d4:6d:3e:e1:fe:58:dc:d5:d4:aa:86:00:f8:6f: 01:30:9f:39:a0:32:3c:93:88:b2:be:60:14:84:eb: e1:81:f6:fc:60:7d:ed:fb:44:84:7d:d1:4d:9c:14: 54:05:7b:2f:76:35:2c:1f:ef:02:9d:06:22:98:9b: 61:07:7c:5d:4c:e5:9b:28:10:2d:30:27:44:76:79: 17:91:cd:a4:29:17:2e:76:a7:bf:4a:29:61:a2:6f: 6f:a8:e5:85:44:e6:3b:15:12:1b:67:b2:a4:c1:bb: 44:94:4b:bf:19:a7:07:07:7b:8b:7b:79:00:38:cc: 74:73:b9:03:45:e7:29:44:38:4b:91:34:78:83:63: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:D4:A1:B6:BD:83:0C:63:62:7C:81:08:2B:33:A2:9E:0B:AB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d30a9a1-b83d-3d7d-88db-6f5b9d27f0eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c8:bb:55:b8:9f:4b:3b:ac:b7:0f:68:46:e6:df:5e:ff:32: 9d:26:be:a3:5f:38:cf:ba:5b:93:fc:47:f5:4d:00:ff:dc:77: 85:ff:00:68:0c:d1:b0:8a:1f:e8:37:d3:28:a1:f3:dd:56:de: 03:ab:3e:cd:47:d0:eb:e9:d5:5e:58:df:0e:d9:79:98:db:b9: d1:ca:1b:99:60:64:8b:9a:07:e0:39:1e:f2:75:f4:d1:0a:82: d6:9b:af:e2:4d:3d:18:de:b3:80:ed:3b:53:a1:a9:66:33:ef: 12:11:8c:b7:47:28:33:0f:09:8b:22:86:7b:c0:10:cc:e1:0f: 32:92:8f:e1:5e:77:9e:92:1e:1b:96:e9:2a:c1:7e:10:4b:27: 42:83:c5:aa:66:04:fc:24:43:77:ff:fb:8d:a7:8f:a7:ef:07: 49:b4:a8:05:1c:f5:bb:cc:bc:7b:3d:34:22:84:2e:11:ac:55: ec:47:bf:51:25:50:4f:1e:9b:8b:e9:68:f6:86:18:0e:a6:4f: 1f:6d:dd:a8:44:23:4d:bc:8e:42:ca:80:5c:16:20:ef:2b:f4: f8:0a:80:ce:b8:9b:92:bb:dd:4c:13:32:4c:7b:2e:0b:73:db: 59:26:47:86:ae:0d:f2:d5:4e:4e:bb:bb:99:6b:22:a8:9a:5e: a3:48:48:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esADcbKmFFcCSLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk YjNiZGQ5ZjUtNjM2Ny00Y2YxLTkzNDktMTM0YTg0MzZhY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhePfcE6HHe21n9buW6DcgJwQLEMnxFpH5Z5k JsfGh90+V+aYI8u3Jd8CpFXd4Z153ahTpDAQ0LsOv7X6qtguYSKphztUehJLuk8Y KHtFMe6ZGbDKHsqibQJvcsJIkbAFYVQLeYkkvyOjKakAPRiha7ZSluFq34eH1G0+ 4f5Y3NXUqoYA+G8BMJ85oDI8k4iyvmAUhOvhgfb8YH3t+0SEfdFNnBRUBXsvdjUs H+8CnQYimJthB3xdTOWbKBAtMCdEdnkXkc2kKRcudqe/Silhom9vqOWFROY7FRIb Z7KkwbtElEu/GacHB3uLe3kAOMx0c7kDRecpRDhLkTR4g2NNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6x1KG2vYMMY2J8gQgrM6KeC6txMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QzMGE5YTEtYjgzZC0z ZDdkLTg4ZGItNmY1YjlkMjdmMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnIu1W4n0s7rLcPaEbm317/Mp0mvqNfOM+6W5P8R/VNAP/cd4X/AGgM 0bCKH+g30yih891W3gOrPs1H0Ovp1V5Y3w7ZeZjbudHKG5lgZIuaB+A5HvJ19NEK gtabr+JNPRjes4DtO1OhqWYz7xIRjLdHKDMPCYsihnvAEMzhDzKSj+Fed56SHhuW 6SrBfhBLJ0KDxapmBPwkQ3f/+42nj6fvB0m0qAUc9bvMvHs9NCKELhGsVexHv1El UE8em4vpaPaGGA6mTx9t3ahEI028jkLKgFwWIO8r9PgKgM64m5K73UwTMkx7Lgtz 21kmR4auDfLVTk67u5lrIqiaXqNISFU= -----END CERTIFICATE-----Generated at Tue Jul 28 22:57:54 2026 by rpki-client