$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa File: 2671cac0-3285-328a-a679-36e51060176e.roa (raw, json) Hash identifier: doUixPYrVqPdIxXCD1F/xYTP1KU3MLxGYpr7pHyNYFw= Subject key identifier: 5B:54:35:C7:AA:92:36:86:71:E4:A9:CE:29:FD:4B:2F:93:57:61:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EB8470D03544435668D2BCDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.101.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:0d:03:54:44:35:66:8d:2b:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=88fa707a-e53a-4b0c-b826-74f963228be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:e6:72:16:f7:81:17:6c:ee:31:10:db:67: 11:56:41:11:7a:38:d7:2d:1d:67:d0:ec:8e:36:d7: d2:a3:e5:43:a0:62:72:30:8e:87:9b:3e:1e:7d:4b: 04:ef:4f:5a:29:80:38:71:cf:e5:ba:de:41:13:8f: f4:ee:1d:c1:ef:ef:67:fa:6f:b5:d9:e7:3a:77:43: cb:a4:9b:19:b5:6e:68:ec:1c:23:d6:68:6b:fc:7e: bf:f9:50:e3:43:86:b7:2e:0f:bc:30:94:4f:42:6e: 46:26:b4:94:44:b6:6d:b0:5b:9d:6f:94:23:46:c4: c9:9f:fb:d5:c8:55:f7:61:c2:0e:b2:48:8c:bd:eb: c5:95:5f:14:5e:12:c7:b8:1d:5b:4f:9f:29:69:fa: a3:72:c8:8e:17:76:b9:a2:ea:c7:ce:8b:dc:1f:2f: ef:19:1a:68:86:ea:f6:19:25:89:e6:81:87:2b:74: 48:bf:51:21:81:73:99:43:b2:8e:18:b1:22:be:62: d0:2f:cf:4b:de:75:27:d3:0f:f3:5e:ba:7e:ae:ab: 72:0e:83:ab:78:c1:4d:ed:1b:b6:3c:96:9a:29:a5: 65:5f:1a:b2:d7:db:81:2a:d3:ad:9f:6a:aa:72:4a: 40:4a:98:4c:02:39:ef:50:fc:aa:6a:8a:58:bf:96: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:35:C7:AA:92:36:86:71:E4:A9:CE:29:FD:4B:2F:93:57:61:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c5:be:3c:8d:8c:b6:20:a5:c0:17:2a:a1:15:64:f6:16:a9: bf:9d:79:5d:5c:be:c6:ac:70:28:87:d6:fd:86:d3:0a:41:d0: e6:84:39:af:18:0c:31:86:e5:cc:60:7d:92:0b:ce:6d:c7:42: cc:c2:19:7a:96:8a:36:c2:d6:e2:19:a7:7d:c2:67:31:56:6f: 65:77:cb:20:f9:59:04:34:bf:00:55:6a:68:f2:8a:4c:d0:a2: 4e:5d:c0:09:9a:5d:08:0b:f2:b6:de:52:a2:74:db:cb:5f:77: b0:8d:4e:ca:36:4a:7d:f3:51:11:f0:36:30:9d:ed:4b:e0:63: 30:25:75:72:d5:c5:4d:ef:84:e6:16:05:af:a1:67:a7:90:ea: 46:b9:f4:58:bf:91:f4:13:d3:e2:8f:33:bb:6a:b2:a3:a9:1c: 41:2d:0b:83:b5:42:14:1b:11:03:24:9b:5f:38:69:7e:6e:b7: 70:a2:2c:cf:70:de:18:26:18:01:ef:ce:20:1b:ad:65:ab:2d: dc:f9:f8:e5:81:fa:8f:d4:8d:57:28:6a:cb:03:6b:73:f4:8b: b0:ff:8a:34:c6:1c:2a:2e:d9:08:8b:e6:c4:df:e0:7e:b2:e5: 10:f2:0a:d3:21:b1:49:50:05:76:7c:86:b7:e7:e2:5d:6a:90: 74:47:56:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rw0DVEQ1Zo0rzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ODhmYTcwN2EtZTUzYS00YjBjLWI4MjYtNzRmOTYzMjI4YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVHmchb3gRds7jEQ22cRVkERejjXLR1n0OyO NtfSo+VDoGJyMI6Hmz4efUsE709aKYA4cc/lut5BE4/07h3B7+9n+m+12ec6d0PL pJsZtW5o7Bwj1mhr/H6/+VDjQ4a3Lg+8MJRPQm5GJrSURLZtsFudb5QjRsTJn/vV yFX3YcIOskiMvevFlV8UXhLHuB1bT58pafqjcsiOF3a5ourHzovcHy/vGRpohur2 GSWJ5oGHK3RIv1EhgXOZQ7KOGLEivmLQL89L3nUn0w/zXrp+rqtyDoOreMFN7Ru2 PJaaKaVlXxqy19uBKtOtn2qqckpASphMAjnvUPyqaopYv5ZpmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtUNceqkjaGceSpzin9Sy+TV2HSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjY3MWNhYzAtMzI4NS0z MjhhLWE2NzktMzZlNTEwNjAxNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLFvjyNjLYgpcAXKqEVZPYWqb+deV1cvsascCiH1v2G0wpB0OaEOa8Y DDGG5cxgfZILzm3HQszCGXqWijbC1uIZp33CZzFWb2V3yyD5WQQ0vwBVamjyikzQ ok5dwAmaXQgL8rbeUqJ028tfd7CNTso2Sn3zURHwNjCd7UvgYzAldXLVxU3vhOYW Ba+hZ6eQ6ka59Fi/kfQT0+KPM7tqsqOpHEEtC4O1QhQbEQMkm184aX5ut3CiLM9w 3hgmGAHvziAbrWWrLdz5+OWB+o/UjVcoassDa3P0i7D/ijTGHCou2QiL5sTf4H6y 5RDyCtMhsUlQBXZ8hrfn4l1qkHRHVsg= -----END CERTIFICATE-----Generated at Tue Aug 4 04:11:03 2026 by rpki-client