$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa File: 42560064-0659-32dc-a3b0-1a01cfca664e.roa (raw, json) Hash identifier: R4csFFdy6XURygr7CfOXQ7avZRqqqbiGw+A5rijwu0E= Subject key identifier: A3:9A:CB:3B:31:CD:11:12:73:BF:E4:B5:48:DA:DE:C3:71:3A:D0:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AAEF2BFD7AFA6429E0880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.0.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:ae:f2:bf:d7:af:a6:42:9e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=80948c47-41b5-4af4-b087-80a47060f058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:67:dd:86:86:52:bc:fa:fe:34:bc:38:76: 6a:31:a9:79:bb:7f:87:40:6f:9f:98:ee:5a:83:8b: b9:ac:e1:2f:a3:dc:94:0a:bb:bd:d8:6f:71:50:ae: c6:d4:e0:24:46:4a:c5:9d:b1:c9:ef:9a:3f:0b:c6: ba:e2:5f:c0:15:97:07:f7:e1:09:45:fe:74:88:23: 67:4d:c4:14:f9:7e:72:e7:a1:c0:96:14:1a:f3:a6: db:76:5a:a7:62:c5:1c:d7:b4:a6:b3:95:e5:50:94: d9:51:54:99:64:9c:f0:b1:01:1d:50:73:a3:39:40: b1:2f:a8:52:ef:5e:60:70:46:77:3b:bf:36:98:f9: d1:26:c7:3b:89:3e:16:3d:03:f9:e3:f5:2d:65:1c: 1b:50:8f:5e:ba:91:a3:30:be:6a:05:da:eb:87:0e: 07:67:29:5c:28:5c:6a:e8:f6:4c:d6:05:26:78:02: dd:a2:98:aa:82:02:c0:8e:56:74:09:08:2c:64:47: 9d:ec:ed:ad:de:b5:3b:a9:6a:0f:8c:e4:eb:1a:ad: e3:98:03:18:b8:f1:de:96:61:aa:e7:e4:4b:88:d3: 2b:16:cc:e3:86:10:e8:c0:da:55:3d:c8:3c:5c:09: ba:a5:79:ab:ab:89:69:7b:63:a4:65:de:81:8d:5e: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:CB:3B:31:CD:11:12:73:BF:E4:B5:48:DA:DE:C3:71:3A:D0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8f:09:50:60:fd:2e:df:c5:06:26:5d:76:29:f5:0c:4f:50: 2f:10:c1:1e:8d:f3:32:f6:e4:80:33:b3:ba:c4:e7:ba:25:7e: e0:b6:61:18:56:31:f1:37:6c:96:6e:f7:8c:1d:64:4f:19:21: 24:02:1a:50:ad:81:8b:4d:1e:f6:c5:63:27:cc:54:e1:57:68: be:3e:fe:40:e0:4a:7f:0a:85:f2:25:1b:d0:63:10:f3:4e:ef: 35:79:3a:81:4b:b3:ee:2d:06:d6:c3:c0:30:3a:f7:60:9f:6a: 1a:3d:68:2e:2c:6e:60:40:8c:62:e6:b4:56:23:ad:76:df:57: 75:ec:6d:82:79:2f:7d:7b:00:1b:de:a6:55:b4:9a:02:a0:94: f8:7c:40:1b:ce:12:18:bf:bb:ab:5b:d9:8d:65:4f:1a:0f:d2: ca:5a:6f:71:d6:e2:ae:c8:ad:2e:61:4c:45:2a:1b:9c:0f:42: ad:22:43:2b:b7:f3:2c:51:30:81:47:bb:8c:f8:32:b0:e7:6a: f5:83:55:39:3f:73:46:47:8b:52:30:d0:5f:e7:3f:50:4c:b2: f8:e2:05:69:0b:4e:ba:df:12:f4:94:fe:ed:a1:45:ae:3e:11: c1:40:5e:c2:f3:25:f2:2e:a4:c3:f1:b1:6f:44:69:e4:76:de: 63:14:f4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSq7yv9evpkKeCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ODA5NDhjNDctNDFiNS00YWY0LWIwODctODBhNDcwNjBmMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx9n3YaGUrz6/jS8OHZqMal5u3+HQG+fmO5a g4u5rOEvo9yUCru92G9xUK7G1OAkRkrFnbHJ75o/C8a64l/AFZcH9+EJRf50iCNn TcQU+X5y56HAlhQa86bbdlqnYsUc17Sms5XlUJTZUVSZZJzwsQEdUHOjOUCxL6hS 715gcEZ3O782mPnRJsc7iT4WPQP54/UtZRwbUI9eupGjML5qBdrrhw4HZylcKFxq 6PZM1gUmeALdopiqggLAjlZ0CQgsZEed7O2t3rU7qWoPjOTrGq3jmAMYuPHelmGq 5+RLiNMrFszjhhDowNpVPcg8XAm6pXmrq4lpe2OkZd6BjV72OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOayzsxzRESc7/ktUja3sNxOtBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDI1NjAwNjQtMDY1OS0z MmRjLWEzYjAtMWEwMWNmY2E2NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaPCVBg/S7fxQYmXXYp9QxPUC8QwR6N8zL25IAzs7rE57olfuC2YRhW MfE3bJZu94wdZE8ZISQCGlCtgYtNHvbFYyfMVOFXaL4+/kDgSn8KhfIlG9BjEPNO 7zV5OoFLs+4tBtbDwDA692Cfaho9aC4sbmBAjGLmtFYjrXbfV3XsbYJ5L317ABve plW0mgKglPh8QBvOEhi/u6tb2Y1lTxoP0spab3HW4q7IrS5hTEUqG5wPQq0iQyu3 8yxRMIFHu4z4MrDnavWDVTk/c0ZHi1Iw0F/nP1BMsvjiBWkLTrrfEvSU/u2hRa4+ EcFAXsLzJfIupMPxsW9EaeR23mMU9Go= -----END CERTIFICATE-----Generated at Tue Jul 28 20:20:01 2026 by rpki-client