$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa File: 4fae2510-3129-3a69-94d5-78a79e2cec6e.roa (raw, json) Hash identifier: zuDxJnqEVIGFkZRurXU4+Witni+7JWgVTy5/6YDhc2A= Subject key identifier: 2D:3E:AA:AB:A2:8C:FC:B6:75:86:10:A6:54:16:72:2A:F5:08:70:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB36E5D2F7C65C17279F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.98.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b3:6e:5d:2f:7c:65:c1:72:79:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=6f25ea5d-73f3-4c97-9d9a-c9678c70825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:9f:39:fb:4b:bc:fd:ad:e8:e4:7c:69:42: 2f:e6:1c:8a:84:4f:a9:55:7f:5d:fc:e7:11:ef:db: d1:09:50:f5:d3:1f:5f:28:e4:15:49:0d:79:f2:a9: ff:40:60:38:77:9e:c7:25:11:cb:61:75:3a:7c:1e: 12:4a:2c:28:f5:33:32:60:f8:a2:09:03:35:4b:34: 07:7d:ed:cd:e4:ef:74:fd:76:43:72:3e:29:90:2c: d2:48:a7:62:ae:80:6b:70:58:bd:21:32:8f:0e:63: ef:89:75:a7:f5:cf:88:dd:0b:9e:13:4a:4b:f5:b1: bb:4a:b5:4e:10:70:50:ef:ed:d1:15:3e:85:a3:a0: 0d:29:df:1a:d7:ce:98:2e:c4:9f:86:61:e4:07:df: 64:4e:1a:85:63:d6:b0:de:f8:f4:13:a4:d0:a2:a2: 6e:58:7c:08:dd:ac:e5:fb:f1:54:67:f8:14:f7:c1: da:04:20:9f:ea:23:16:95:6d:67:6f:f7:d1:cb:76: 8e:97:87:ee:4f:d7:c1:fe:a0:dc:38:2e:de:64:bc: 7d:3f:ec:7d:20:4a:5f:20:90:62:5b:e7:16:02:2d: ea:ae:f5:0c:41:6b:a4:03:11:8b:79:9f:2f:2a:88: eb:4d:85:9f:75:80:96:1e:a2:d3:00:01:d5:18:5e: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:AA:AB:A2:8C:FC:B6:75:86:10:A6:54:16:72:2A:F5:08:70:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8d:a4:f7:75:78:82:f7:07:b0:d3:e2:db:47:62:4e:8a:ba: 1c:a9:79:51:ef:df:83:75:ba:ec:32:3d:9e:f7:a5:aa:91:68: c9:0e:f9:d8:6d:13:30:d7:a2:bd:57:e9:6b:7c:ab:c4:d7:16: e9:cf:ab:0c:53:07:6a:a3:df:2e:63:a3:f0:79:19:fb:bd:4a: 14:fa:27:79:19:81:64:9a:d2:a8:58:92:2d:4b:6f:5e:a8:7b: da:70:dd:2d:6d:fc:95:ca:2c:bc:9e:c1:9e:13:8b:e5:80:02: 75:3d:75:5c:6c:4a:1b:66:2d:c6:60:00:2c:df:c2:69:c3:a9: 2b:3e:61:2b:f0:4a:69:33:b0:6c:82:dd:45:52:ac:2b:8b:03: 43:25:70:3d:7e:f3:13:48:86:3d:6c:6d:ac:e6:76:17:56:cf: cb:41:c4:f4:84:94:d3:42:ab:a1:05:4e:5a:7d:62:32:69:f4: 28:19:d7:ed:5b:74:2a:7d:f2:fd:ba:63:8e:25:cd:76:ca:49: 1b:d5:96:73:b0:05:31:88:35:f2:21:b9:6b:7b:5b:4d:b5:5f: e0:14:52:90:d6:82:cb:3e:5d:d7:58:5c:90:c2:d5:8b:a1:02: 04:33:c9:0a:46:65:d9:de:59:99:5c:1c:1b:1a:2a:52:fa:76: 36:9f:84:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrNuXS98ZcFyefgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NmYyNWVhNWQtNzNmMy00Yzk3LTlkOWEtYzk2NzhjNzA4MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNqfOftLvP2t6OR8aUIv5hyKhE+pVX9d/OcR 79vRCVD10x9fKOQVSQ158qn/QGA4d57HJRHLYXU6fB4SSiwo9TMyYPiiCQM1SzQH fe3N5O90/XZDcj4pkCzSSKdiroBrcFi9ITKPDmPviXWn9c+I3QueE0pL9bG7SrVO EHBQ7+3RFT6Fo6ANKd8a186YLsSfhmHkB99kThqFY9aw3vj0E6TQoqJuWHwI3azl +/FUZ/gU98HaBCCf6iMWlW1nb/fRy3aOl4fuT9fB/qDcOC7eZLx9P+x9IEpfIJBi W+cWAi3qrvUMQWukAxGLeZ8vKojrTYWfdYCWHqLTAAHVGF7D+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0+qquijPy2dYYQplQWcir1CHCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZhZTI1MTAtMzEyOS0z YTY5LTk0ZDUtNzhhNzllMmNlYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqNpPd1eIL3B7DT4ttHYk6KuhypeVHv34N1uuwyPZ73paqRaMkO+dht EzDXor1X6Wt8q8TXFunPqwxTB2qj3y5jo/B5Gfu9ShT6J3kZgWSa0qhYki1Lb16o e9pw3S1t/JXKLLyewZ4Ti+WAAnU9dVxsShtmLcZgACzfwmnDqSs+YSvwSmkzsGyC 3UVSrCuLA0MlcD1+8xNIhj1sbazmdhdWz8tBxPSElNNCq6EFTlp9YjJp9CgZ1+1b dCp98v26Y44lzXbKSRvVlnOwBTGINfIhuWt7W021X+AUUpDWgss+XddYXJDC1Yuh AgQzyQpGZdneWZlcHBsaKlL6djafhEs= -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:22 2026 by rpki-client