$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df40a0e-d96f-3d28-ba3b-aa0f1890d349.roa File: 7df40a0e-d96f-3d28-ba3b-aa0f1890d349.roa (raw, json) Hash identifier: ZeCLBrv6V+6LcNmrbAMD2t24SOMIFrhNKAqshWdnqVI= Subject key identifier: 04:4E:21:EE:AB:89:1D:7F:09:1D:3C:D1:95:50:1C:48:A3:24:CE:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFF7DEAD040E8CBAAD0340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df40a0e-d96f-3d28-ba3b-aa0f1890d349.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.231.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:f7:de:ad:04:0e:8c:ba:ad:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=0fd95b26-365a-4af1-9471-21e7400dc108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:01:b0:c4:6a:a5:4b:8c:70:b6:70:59:9b: 1c:41:0e:63:86:38:d0:9a:3d:31:1d:43:27:8b:67: 81:9e:09:92:07:aa:47:b3:08:8b:fd:08:37:61:14: 24:2e:b2:a3:b5:35:b8:af:59:18:59:4e:d3:45:56: ce:88:7d:19:a5:48:bc:de:7f:6a:44:f0:19:55:64: 98:93:d6:1d:dc:cf:16:75:18:12:74:fd:5d:f2:65: 7c:6e:99:17:a0:72:c6:f1:5e:52:a2:6d:61:2e:bc: 8d:98:c8:ae:0e:f8:3e:78:ff:46:10:1b:37:8f:21: 42:f7:28:e8:da:f6:1a:e9:a2:f4:c0:aa:c4:c2:39: f3:ef:3d:fb:be:d8:ac:ea:88:01:8b:92:de:e5:51: e9:d5:46:99:38:f3:50:74:31:9a:24:30:d5:6d:c1: 31:44:e8:76:15:1a:bd:c2:af:3c:17:81:24:f4:1c: 32:cc:d1:a4:ee:d3:c9:7b:7e:e2:59:96:34:c6:98: a6:7e:79:ea:cd:e5:b1:fb:9c:5a:d3:dc:83:26:cb: 50:a4:24:7c:6c:11:55:76:6a:fb:ca:65:eb:80:e0: 9f:1a:30:ab:23:78:df:d7:fc:da:2d:0e:30:dd:15: fb:dc:26:65:04:f9:a1:b6:90:ac:8c:6b:76:c8:d0: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4E:21:EE:AB:89:1D:7F:09:1D:3C:D1:95:50:1C:48:A3:24:CE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df40a0e-d96f-3d28-ba3b-aa0f1890d349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c4:ea:44:af:07:42:a9:28:8f:a9:49:10:c0:a1:7a:e3:81: 95:37:8c:03:eb:d3:97:a5:b2:e8:0c:b7:80:6d:00:bb:f7:44: e4:db:b6:ba:41:df:86:a1:06:57:e1:01:e2:8f:f7:e0:33:a8: 3d:a8:69:b9:50:be:85:ba:f0:61:b2:63:fa:03:78:d5:4d:55: 5c:e4:3c:9f:cb:c1:23:48:32:24:38:6d:3a:0a:40:29:1e:f2: d1:a5:1c:47:b9:72:97:df:19:cb:ec:b7:cd:4d:65:e5:14:d5: 09:02:71:1f:f7:f8:42:53:c3:c7:59:bc:28:07:30:9d:6c:01: a8:d9:fb:51:12:39:ad:87:78:e2:60:6e:af:b0:25:e5:68:6b: 3c:03:09:37:fb:98:ab:39:51:07:8d:73:94:f3:fa:0d:6c:43: 2f:44:bc:e1:0b:72:05:15:b6:00:06:de:07:b2:49:81:6b:ef: 24:4c:8a:58:cb:9d:3d:a9:b8:7c:25:37:e6:b5:17:19:f3:84: 4a:20:1a:be:fc:6b:b4:ae:71:e2:9e:8c:66:5f:c7:a8:41:72: 99:69:96:bf:9e:14:ad:be:d0:60:4f:6b:d7:f3:91:fb:c6:66: 63:ea:05:f0:e5:90:e4:89:47:0b:7c:e1:0c:84:0f:56:30:68: e3:d2:2d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er/ferQQOjLqtA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MGZkOTViMjYtMzY1YS00YWYxLTk0NzEtMjFlNzQwMGRjMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNIBsMRqpUuMcLZwWZscQQ5jhjjQmj0xHUMn i2eBngmSB6pHswiL/Qg3YRQkLrKjtTW4r1kYWU7TRVbOiH0ZpUi83n9qRPAZVWSY k9Yd3M8WdRgSdP1d8mV8bpkXoHLG8V5Som1hLryNmMiuDvg+eP9GEBs3jyFC9yjo 2vYa6aL0wKrEwjnz7z37vtis6ogBi5Le5VHp1UaZOPNQdDGaJDDVbcExROh2FRq9 wq88F4Ek9BwyzNGk7tPJe37iWZY0xpimfnnqzeWx+5xa09yDJstQpCR8bBFVdmr7 ymXrgOCfGjCrI3jf1/zaLQ4w3RX73CZlBPmhtpCsjGt2yNCVgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAROIe6riR1/CR080ZVQHEijJM58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RmNDBhMGUtZDk2Zi0z ZDI4LWJhM2ItYWEwZjE4OTBkMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADE6kSvB0KpKI+pSRDAoXrjgZU3jAPr05elsugMt4BtALv3ROTbtrpB 34ahBlfhAeKP9+AzqD2oablQvoW68GGyY/oDeNVNVVzkPJ/LwSNIMiQ4bToKQCke 8tGlHEe5cpffGcvst81NZeUU1QkCcR/3+EJTw8dZvCgHMJ1sAajZ+1ESOa2HeOJg bq+wJeVoazwDCTf7mKs5UQeNc5Tz+g1sQy9EvOELcgUVtgAG3geySYFr7yRMiljL nT2puHwlN+a1FxnzhEogGr78a7SuceKejGZfx6hBcplplr+eFK2+0GBPa9fzkfvG ZmPqBfDlkOSJRwt84QyED1YwaOPSLSI= -----END CERTIFICATE-----Generated at Tue Sep 22 01:33:06 2026 by rpki-client