$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f528b84-7c59-3ea3-85c8-fced01b191a2.roa File: 7f528b84-7c59-3ea3-85c8-fced01b191a2.roa (raw, json) Hash identifier: OjZHQHj5w8t9Io1gUpSbKTQ+DwsR3ximMxygLaq08TU= Subject key identifier: EE:9E:66:7D:A5:F3:DC:EC:EB:0E:9C:D6:54:DB:41:AE:17:DB:9E:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EB847749EBB828E175DFA7C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f528b84-7c59-3ea3-85c8-fced01b191a2.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.107.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:74:9e:bb:82:8e:17:5d:fa:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=8a8b34a4-02b2-4d82-9274-80d1762cfeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cf:98:23:66:44:96:df:fc:8d:b6:28:6a:9d: 9a:dc:24:a9:48:4b:4e:06:69:87:12:4a:d7:71:44: fc:da:69:da:db:06:ea:67:a3:4a:14:da:65:55:68: 94:3b:a2:40:83:9f:8f:25:29:93:f8:66:ee:65:62: 25:63:3a:d2:b9:a0:88:c2:53:f1:30:96:c2:00:bc: 59:f6:f9:29:c3:91:2e:0b:5b:a5:89:2c:07:dc:28: 41:0e:66:e8:64:5e:5c:86:70:46:b9:07:64:53:20: 62:17:07:95:1e:f0:e9:52:d4:63:f1:a7:e5:fd:20: 3c:e6:2a:72:a2:aa:97:0a:c0:47:a4:59:9f:ec:1c: 66:c3:24:c5:ac:10:11:72:be:ee:52:ac:71:8b:1c: 03:9c:22:bc:18:06:cb:7b:19:25:9f:57:fb:66:0d: 11:db:60:ed:c3:f0:89:d8:ab:9b:91:38:33:08:47: f4:55:58:6a:01:55:d6:5b:19:0b:b8:2d:e7:79:10: c9:67:bc:e9:81:e6:95:72:64:be:5f:b3:c2:3d:a5: f0:a4:dd:dc:cb:ef:e1:ff:f6:4e:a2:e0:f6:27:1d: a6:83:53:cd:cc:5c:36:be:4e:b1:85:de:52:0f:cc: a5:66:60:34:b4:a9:97:4b:8b:35:0f:8f:5b:42:cd: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9E:66:7D:A5:F3:DC:EC:EB:0E:9C:D6:54:DB:41:AE:17:DB:9E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f528b84-7c59-3ea3-85c8-fced01b191a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:12:b7:17:fd:df:b9:cd:b8:e5:4a:74:94:52:32:73:7c:9d: 63:13:e5:a3:a0:f8:43:c5:97:e4:ff:31:d6:96:b1:4e:25:76: ec:1c:a5:20:51:c2:3b:80:f2:79:d6:a8:40:9c:cd:cb:84:69: ae:49:74:63:a8:4f:9b:72:e4:96:ce:d4:b5:f8:4a:60:e2:b9: 9c:4d:1a:5d:3a:e0:28:57:58:51:15:b5:08:39:7d:41:b6:53: 12:c7:8c:25:9d:c8:38:be:a0:e9:02:16:02:1d:a1:c0:7b:77: 0b:2b:19:f0:0a:62:97:0d:e6:c0:10:a9:55:b7:6a:46:45:09: d0:10:d8:c1:e2:96:b3:4b:e8:59:9f:09:a7:f8:27:69:34:48: 99:44:42:11:2a:93:14:e1:59:3c:53:5b:b9:59:e3:b1:e2:c7: f7:3f:6c:f2:c6:a4:36:e4:f8:73:be:91:14:4d:31:3c:cd:dd: 6b:dc:73:31:ab:c7:0e:81:34:f2:5c:57:8b:8b:db:ef:41:32: 7f:ae:7a:9a:fb:9d:49:bc:53:b8:e6:d1:cd:d8:0f:a6:18:16: bd:9d:7d:32:68:f0:50:5a:9a:48:4c:05:04:51:16:55:fa:dd: 3f:49:a6:2e:3f:e9:c6:9f:63:2b:47:1c:2d:6a:90:99:7c:7f: 18:a5:74:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R3Seu4KOF136fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk OGE4YjM0YTQtMDJiMi00ZDgyLTkyNzQtODBkMTc2MmNmZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8+YI2ZElt/8jbYoap2a3CSpSEtOBmmHEkrX cUT82mna2wbqZ6NKFNplVWiUO6JAg5+PJSmT+GbuZWIlYzrSuaCIwlPxMJbCALxZ 9vkpw5EuC1uliSwH3ChBDmboZF5chnBGuQdkUyBiFweVHvDpUtRj8afl/SA85ipy oqqXCsBHpFmf7BxmwyTFrBARcr7uUqxxixwDnCK8GAbLexkln1f7Zg0R22Dtw/CJ 2KubkTgzCEf0VVhqAVXWWxkLuC3neRDJZ7zpgeaVcmS+X7PCPaXwpN3cy+/h//ZO ouD2Jx2mg1PNzFw2vk6xhd5SD8ylZmA0tKmXS4s1D49bQs0U0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6eZn2l89zs6w6c1lTbQa4X256XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2Y1MjhiODQtN2M1OS0z ZWEzLTg1YzgtZmNlZDAxYjE5MWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcStxf937nNuOVKdJRSMnN8nWMT5aOg+EPFl+T/MdaWsU4lduwcpSBR wjuA8nnWqECczcuEaa5JdGOoT5ty5JbO1LX4SmDiuZxNGl064ChXWFEVtQg5fUG2 UxLHjCWdyDi+oOkCFgIdocB7dwsrGfAKYpcN5sAQqVW3akZFCdAQ2MHilrNL6Fmf Caf4J2k0SJlEQhEqkxThWTxTW7lZ47Hix/c/bPLGpDbk+HO+kRRNMTzN3WvcczGr xw6BNPJcV4uL2+9BMn+uepr7nUm8U7jm0c3YD6YYFr2dfTJo8FBamkhMBQRRFlX6 3T9Jpi4/6cafYytHHC1qkJl8fxildKE= -----END CERTIFICATE-----Generated at Tue Sep 22 12:14:57 2026 by rpki-client