$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa File: 49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa (raw, json) Hash identifier: cQN0q6eouwiewYlomXY4y7AnW9qVIU8mwzIzLBAR7mQ= Subject key identifier: 55:AE:3F:A9:C6:5D:96:8D:DB:02:F3:17:4E:85:57:44:B7:70:F2:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB009EFE7C1FB90D07D5080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.227.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:09:ef:e7:c1:fb:90:d0:7d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=e30b599e-748d-47e1-9f07-5c57fa8452ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:13:4c:07:3f:63:db:71:c1:5f:76:06:0e: a9:90:18:4b:54:4a:42:f1:68:bb:dc:d6:fb:1d:bf: c6:ee:b8:7f:d2:e4:01:94:9a:c1:f8:99:ab:b3:6b: 1f:0b:00:80:56:98:46:62:2d:20:37:db:5b:f3:e9: 27:00:17:1d:08:37:6c:e5:66:d8:6d:3f:a6:c6:4f: 14:1d:66:99:ba:11:30:92:d0:78:8e:5c:fc:36:cc: bd:5c:02:8e:57:ab:49:61:2e:d7:ab:14:b1:1d:a1: 1f:3a:51:46:6c:61:cb:57:a5:6b:e1:e4:1d:a2:08: 83:3d:d6:28:5b:ea:6a:d4:96:16:25:a4:2f:ce:90: 4a:a3:e7:7e:8a:7f:7b:ae:d2:bb:aa:9e:b2:46:8c: a7:f5:85:60:44:d9:7c:2f:8c:47:53:9d:21:4e:58: 64:ad:70:1b:ef:61:4f:10:3c:a3:8b:ed:e2:6b:0e: 5b:a6:48:10:ab:9c:5f:bb:65:49:f8:2f:a1:a0:3e: aa:f6:f9:6d:95:35:75:1e:8c:2a:e1:18:32:a7:0f: 58:27:e7:f1:ec:68:b3:21:62:c0:7c:ce:43:07:54: f3:71:33:74:7f:ae:3e:e3:67:b0:43:4a:ef:0e:e1: b9:f3:f0:51:dc:72:6f:a3:2d:e2:8f:44:80:05:3b: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:3F:A9:C6:5D:96:8D:DB:02:F3:17:4E:85:57:44:B7:70:F2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:40:6a:be:22:53:51:e6:7b:e1:e5:00:c6:d1:ec:09:f0:a8: 21:63:92:33:d0:ed:3a:8a:7d:f5:ed:86:0b:fb:c2:1d:4b:11: fe:6f:24:62:c3:cd:5d:c1:d8:46:89:93:70:bc:76:98:e9:34: c1:90:f2:b2:e2:d2:1c:4d:4f:f8:07:e6:a4:a3:41:bd:61:6e: b1:ab:02:54:55:ac:9d:80:26:98:c6:0d:e7:b9:ec:7b:60:1d: dd:4b:36:d6:b6:56:37:2b:49:c5:f3:7b:07:4d:54:c7:72:4b: cf:69:9c:53:f8:56:03:09:cd:69:7f:6c:48:6e:a4:3d:0b:52: 16:07:e2:87:af:5b:d2:13:e9:b5:22:d5:eb:7a:ec:2d:cb:84: a0:90:a5:7a:95:a9:4c:d6:8b:02:67:21:f1:9a:29:7c:40:2e: 0d:af:d6:2f:24:38:b0:df:b4:cd:69:40:a5:f8:ad:0b:6d:76: f9:28:dc:59:83:bd:aa:84:81:d3:54:e0:48:0d:1c:94:16:94: 08:92:dc:78:84:71:ad:2c:c9:67:a2:01:44:b2:3a:74:11:50: 3e:c8:7c:49:60:4c:be:8d:c2:37:df:ab:58:87:e8:1c:52:16: 08:5e:b0:50:d2:da:fa:6a:7a:b5:63:3d:e5:85:e7:d2:70:a8: 99:3c:bf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esAnv58H7kNB9UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTMwYjU5OWUtNzQ4ZC00N2UxLTlmMDctNWM1N2ZhODQ1MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUTTAc/Y9txwV92Bg6pkBhLVEpC8Wi73Nb7 Hb/G7rh/0uQBlJrB+Jmrs2sfCwCAVphGYi0gN9tb8+knABcdCDds5WbYbT+mxk8U HWaZuhEwktB4jlz8Nsy9XAKOV6tJYS7XqxSxHaEfOlFGbGHLV6Vr4eQdogiDPdYo W+pq1JYWJaQvzpBKo+d+in97rtK7qp6yRoyn9YVgRNl8L4xHU50hTlhkrXAb72FP EDyji+3iaw5bpkgQq5xfu2VJ+C+hoD6q9vltlTV1Howq4Rgypw9YJ+fx7GizIWLA fM5DB1TzcTN0f64+42ewQ0rvDuG58/BR3HJvoy3ij0SABTt5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWuP6nGXZaN2wLzF06FV0S3cPJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDllOGI0MTUtYzAwZS0z ZTc3LThiMTctODFiNWY2ZDJmMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROPpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdAar4iU1Hme+HlAMbR7AnwqCFjkjPQ7TqKffXthgv7wh1LEf5vJGLD zV3B2EaJk3C8dpjpNMGQ8rLi0hxNT/gH5qSjQb1hbrGrAlRVrJ2AJpjGDee57Htg Hd1LNta2VjcrScXzewdNVMdyS89pnFP4VgMJzWl/bEhupD0LUhYH4oevW9IT6bUi 1et67C3LhKCQpXqVqUzWiwJnIfGaKXxALg2v1i8kOLDftM1pQKX4rQttdvko3FmD vaqEgdNU4EgNHJQWlAiS3HiEca0syWeiAUSyOnQRUD7IfElgTL6Nwjffq1iH6BxS FghesFDS2vpqerVjPeWF59JwqJk8v90= -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:55 2026 by rpki-client