$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/415680e9-0467-3544-800d-0ccb6f77c841.roa File: 415680e9-0467-3544-800d-0ccb6f77c841.roa (raw, json) Hash identifier: GbmPKKN9n7idD4vEtiMnUv7uScV/B7VD6Bp1hzbp2U0= Subject key identifier: AA:F9:49:7C:1E:83:5A:5D:F1:D7:1B:B1:6F:AE:B4:22:94:4B:5B:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A8BC3418B18A0A5EF34D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/415680e9-0467-3544-800d-0ccb6f77c841.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.96.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:8b:c3:41:8b:18:a0:a5:ef:34:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=7a037558-901c-42fb-876d-e4d7b5a89d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:96:db:0a:ef:61:69:6e:14:68:96:67:07: 57:89:f3:8a:84:12:80:0d:a3:ae:19:cd:26:1e:ac: 96:cc:fe:5f:47:41:b9:6e:99:a6:cb:0f:85:2f:47: 8c:6a:9c:62:54:f3:17:0e:94:1f:a1:0f:29:2b:39: a1:45:13:f6:05:0e:8a:e7:2a:95:d4:b7:09:e8:fb: 77:fb:82:da:84:08:2c:c1:29:f4:dc:6e:8c:ec:ee: 63:fe:6f:f7:d9:16:cb:97:f6:4a:0e:3b:bf:81:75: 8c:b6:72:5e:bb:04:05:9b:b5:9f:40:f5:66:a7:3c: 0f:18:fe:40:67:49:6b:0d:f3:22:ab:70:61:13:42: d9:ee:bc:d0:06:e4:bc:7a:6b:8c:a2:f1:d4:d4:ff: 0c:0c:eb:f1:3d:c9:9d:9f:79:70:81:4b:d5:3a:fd: e6:2f:09:44:80:33:41:25:07:2e:6f:ef:7d:e7:5f: 5f:68:01:45:ee:44:c6:e6:77:7a:b4:e6:b9:83:f4: 68:7b:ae:f5:c9:42:4f:9c:52:a7:de:63:dc:ff:44: 0b:42:1f:be:94:32:8e:aa:02:e5:e7:1d:93:21:b0: 58:f1:da:0a:bb:c8:0c:86:98:9b:be:96:4b:33:cf: b3:b3:b1:5b:35:8b:5b:7d:cf:ee:8e:e1:d8:01:6d: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F9:49:7C:1E:83:5A:5D:F1:D7:1B:B1:6F:AE:B4:22:94:4B:5B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/415680e9-0467-3544-800d-0ccb6f77c841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:77:04:ac:6a:26:0c:2f:5b:8d:ae:45:f5:02:44:72:eb:b1: 27:ae:bf:1c:26:c9:28:be:45:22:ce:e4:00:66:01:38:d6:a2: e9:3c:6e:89:03:74:04:0a:18:4f:25:e6:b5:f2:21:cf:82:62: ed:a5:bf:12:97:1d:21:29:27:44:d9:22:5c:cc:ad:2f:6a:90: 61:0e:2c:f9:14:09:d6:a3:65:9f:6a:5d:bc:3b:84:94:23:7a: 9a:58:b3:d3:a0:a9:ae:f4:8f:2e:53:82:c0:dd:9d:74:28:24: 5d:26:1b:80:fb:e4:06:44:0f:00:a9:7d:df:d7:7e:7f:96:cb: c0:3e:a6:2b:21:b0:aa:e9:73:75:94:03:7d:f0:10:0b:1c:f1: e6:3b:9a:99:4c:99:fc:54:18:d6:3e:2a:11:35:33:de:f1:82: 70:a0:45:33:28:56:a3:6f:b9:08:c2:1a:62:ff:81:95:88:cf: 5e:ec:6a:4c:7d:47:33:f3:ac:d2:a4:2f:90:c5:03:5b:4d:52: 62:87:9f:5c:5b:ba:f0:7c:bc:95:24:33:5d:01:e2:a2:d1:9f: fe:cb:e9:43:16:aa:3d:4d:70:4e:41:47:22:55:c6:ac:1c:87: d7:a6:64:04:c7:ef:75:6d:9f:96:cb:e3:71:8a:30:c8:8c:bf: 56:b5:06:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heovDQYsYoKXvNNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk N2EwMzc1NTgtOTAxYy00MmZiLTg3NmQtZTRkN2I1YTg5ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8+W2wrvYWluFGiWZwdXifOKhBKADaOuGc0m HqyWzP5fR0G5bpmmyw+FL0eMapxiVPMXDpQfoQ8pKzmhRRP2BQ6K5yqV1LcJ6Pt3 +4LahAgswSn03G6M7O5j/m/32RbLl/ZKDju/gXWMtnJeuwQFm7WfQPVmpzwPGP5A Z0lrDfMiq3BhE0LZ7rzQBuS8emuMovHU1P8MDOvxPcmdn3lwgUvVOv3mLwlEgDNB JQcub+99519faAFF7kTG5nd6tOa5g/Roe671yUJPnFKn3mPc/0QLQh++lDKOqgLl 5x2TIbBY8doKu8gMhpibvpZLM8+zs7FbNYtbfc/ujuHYAW0w0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr5SXweg1pd8dcbsW+utCKUS1v7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDE1NjgwZTktMDQ2Ny0z NTQ0LTgwMGQtMGNjYjZmNzdjODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR3BKxqJgwvW42uRfUCRHLrsSeuvxwmySi+RSLO5ABmATjWouk8bokD dAQKGE8l5rXyIc+CYu2lvxKXHSEpJ0TZIlzMrS9qkGEOLPkUCdajZZ9qXbw7hJQj eppYs9Ogqa70jy5TgsDdnXQoJF0mG4D75AZEDwCpfd/Xfn+Wy8A+pishsKrpc3WU A33wEAsc8eY7mplMmfxUGNY+KhE1M97xgnCgRTMoVqNvuQjCGmL/gZWIz17sakx9 RzPzrNKkL5DFA1tNUmKHn1xbuvB8vJUkM10B4qLRn/7L6UMWqj1NcE5BRyJVxqwc h9emZATH73Vtn5bL43GKMMiMv1a1Bnc= -----END CERTIFICATE-----Generated at Tue Jul 28 20:20:18 2026 by rpki-client