$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf96490-cec3-3ae7-854a-54cb49833bf0.roa File: 4bf96490-cec3-3ae7-854a-54cb49833bf0.roa (raw, json) Hash identifier: XvKukp091FusQabLd7McT1Rk7rL58/NGBPqSiwZGHk0= Subject key identifier: E9:E3:DA:97:02:95:70:77:66:4E:63:36:D7:56:EB:D0:E6:23:46:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A6F877777888950B3AD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf96490-cec3-3ae7-854a-54cb49833bf0.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 68.96.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:6f:87:77:77:88:89:50:b3:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=1eaae048-d983-4307-894d-71135da57b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:95:d3:af:d5:1b:84:b6:1a:30:41:bd:36: 96:14:5b:69:7d:3c:d2:0d:25:63:9c:98:24:34:92: 0e:1a:2f:a3:04:a8:46:7f:4e:4a:83:44:f3:eb:10: 14:97:ef:be:bb:85:2c:09:f3:50:12:80:a2:81:66: 2b:60:e2:d3:1f:b8:46:5b:23:fb:57:40:53:cf:a7: 63:62:2f:2c:d1:eb:81:78:62:f5:a3:18:bf:07:df: b8:98:66:fe:51:52:fa:73:4e:d0:45:91:c1:81:5f: ee:cc:25:d6:9d:47:46:1b:4f:2b:08:61:ac:da:16: 57:db:89:58:30:5c:48:69:4d:39:4a:c6:82:15:b9: ca:b0:6a:d2:f0:6d:73:de:bb:6d:7f:80:29:29:1b: f6:94:f1:80:7e:4c:a6:db:6b:39:44:83:87:5c:5a: 5f:dc:16:70:dc:e3:21:52:2b:eb:f1:ba:7d:1c:09: 09:ef:94:c4:3e:3e:fa:45:14:77:ba:e4:f7:07:e0: 2f:e0:bb:26:1c:44:4c:49:e5:a3:a8:bc:4f:3e:77: ba:51:e6:7a:52:75:8b:a4:55:2e:28:d5:e9:2b:9b: dd:b8:0b:fe:69:b3:17:68:c3:ca:65:73:fb:e4:ba: b3:74:cd:7e:16:35:3d:55:52:3f:a6:d8:7f:52:45: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E3:DA:97:02:95:70:77:66:4E:63:36:D7:56:EB:D0:E6:23:46:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf96490-cec3-3ae7-854a-54cb49833bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:85:29:cf:8f:5f:9a:e5:63:f9:92:e2:08:5d:c6:95:76:f2: 01:97:2f:04:3e:21:3b:1e:d2:3e:88:d8:53:f8:63:6e:3c:35: b5:e4:55:f0:54:c1:11:e6:ab:1f:ab:f2:1a:19:cb:8c:35:f7: 52:22:9a:75:93:a9:a1:7d:8f:d8:3f:64:6c:8f:5b:bc:1b:3b: 49:0b:c4:6c:44:4f:58:15:a2:bd:fa:e1:90:13:dd:4a:94:09: e0:29:5c:07:7f:8b:ac:39:66:68:a0:4a:b0:ca:80:a2:96:b4: 74:93:17:59:a5:c8:82:e3:78:4c:9f:a3:b3:3e:33:10:37:4a: 36:00:2b:9c:4c:09:a1:cc:82:80:74:ab:46:86:b9:2d:c2:4d: f1:3f:61:da:ec:0a:ee:b1:f4:5a:93:c0:cd:5a:5d:ea:d9:7d: ac:81:88:63:05:f6:fa:02:01:c2:18:58:fd:6e:76:56:40:95: ae:5a:c5:b5:43:ec:ff:d6:a9:10:ee:7b:6e:ca:6f:2f:23:36: 2a:e7:b2:b0:f7:9a:96:61:eb:7f:40:f7:e1:53:99:5d:bc:af: ff:0d:7f:ee:d0:01:09:97:18:72:e6:f3:9e:8d:e6:60:2e:82: 52:9b:95:00:da:06:5b:17:29:e1:9c:f5:b5:4c:b2:65:bc:f9: 36:2f:45:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hem+Hd3eIiVCzrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk MWVhYWUwNDgtZDk4My00MzA3LTg5NGQtNzExMzVkYTU3YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjGV06/VG4S2GjBBvTaWFFtpfTzSDSVjnJgk NJIOGi+jBKhGf05Kg0Tz6xAUl+++u4UsCfNQEoCigWYrYOLTH7hGWyP7V0BTz6dj Yi8s0euBeGL1oxi/B9+4mGb+UVL6c07QRZHBgV/uzCXWnUdGG08rCGGs2hZX24lY MFxIaU05SsaCFbnKsGrS8G1z3rttf4ApKRv2lPGAfkym22s5RIOHXFpf3BZw3OMh Uivr8bp9HAkJ75TEPj76RRR3uuT3B+Av4LsmHERMSeWjqLxPPne6UeZ6UnWLpFUu KNXpK5vduAv+abMXaMPKZXP75LqzdM1+FjU9VVI/pth/UkXXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnj2pcClXB3Zk5jNtdW69DmI0aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJmOTY0OTAtY2VjMy0z YWU3LTg1NGEtNTRjYjQ5ODMzYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+FKc+PX5rlY/mS4ghdxpV28gGXLwQ+ITse0j6I2FP4Y248NbXkVfBU wRHmqx+r8hoZy4w191IimnWTqaF9j9g/ZGyPW7wbO0kLxGxET1gVor364ZAT3UqU CeApXAd/i6w5ZmigSrDKgKKWtHSTF1mlyILjeEyfo7M+MxA3SjYAK5xMCaHMgoB0 q0aGuS3CTfE/YdrsCu6x9FqTwM1aXerZfayBiGMF9voCAcIYWP1udlZAla5axbVD 7P/WqRDue27Kby8jNirnsrD3mpZh639A9+FTmV28r/8Nf+7QAQmXGHLm856N5mAu glKblQDaBlsXKeGc9bVMsmW8+TYvRQs= -----END CERTIFICATE-----Generated at Wed Jul 29 08:17:59 2026 by rpki-client