$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa File: 2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa (raw, json) Hash identifier: W6pxXkWf3SEXtGLeYAABiDdYeb5prhNsf/j7N6CCP/4= Subject key identifier: C3:23:92:50:78:88:9D:37:5F:19:B7:01:C6:31:01:BC:BD:76:22:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EB84725A25647A3C446A4B6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.0.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:25:a2:56:47:a3:c4:46:a4:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=25074732-634c-4777-bfd1-5aeaddd5fb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:65:a1:b5:17:23:8d:68:f7:f2:64:94:6c: ee:1f:3b:54:40:e3:c6:1b:46:30:e1:86:b0:82:46: e6:5c:4b:bb:88:5b:95:4e:a3:79:44:c3:36:46:02: 8b:2b:5c:83:a5:dc:ae:11:c5:e3:3c:49:66:57:73: c7:a4:31:b8:ef:1e:10:b8:24:c5:4d:3a:87:1c:14: b0:7a:d6:fc:65:2a:cb:b7:77:1b:7b:63:50:fb:e7: 9b:f8:98:5a:66:8c:ea:02:4f:76:f1:b3:94:ed:88: 7f:a9:6c:bd:5a:24:b7:38:6a:7f:70:30:bb:f3:70: 85:37:0b:b0:0d:21:13:87:8b:8c:ab:c5:ab:b6:0d: 3b:90:a8:46:86:cd:94:7d:e9:78:7d:df:ec:4e:73: 2c:19:fe:9d:c4:9d:b7:4e:fd:05:10:51:65:8f:8e: 94:6e:72:1b:53:e1:fb:81:29:ae:b1:24:80:f1:ed: 97:35:d7:0b:01:09:42:5a:15:e4:84:92:e4:27:49: 7e:a5:a6:b1:21:e9:d1:21:0b:c4:8c:7b:ef:de:9a: 20:b6:24:2a:9d:49:30:c3:68:a5:c7:e7:4a:31:42: ef:4d:d4:19:61:07:4e:9a:e2:83:ad:45:0a:bc:cd: 1a:14:15:6e:93:6e:45:59:a4:bd:f9:1f:71:38:85: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:92:50:78:88:9D:37:5F:19:B7:01:C6:31:01:BC:BD:76:22:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:5b:fb:95:3d:06:18:b8:6e:7b:bf:d9:a8:84:80:7f:c5: 55:eb:87:d5:3c:b5:44:08:4c:40:e7:84:4e:65:62:10:28:c5: 70:f4:7b:79:0e:93:a4:a8:7f:cc:c9:60:7d:ee:3d:c2:1c:3e: ab:03:98:e1:0f:b1:71:03:82:c4:0a:fb:4a:5b:a1:85:84:ec: 44:c6:82:c3:d9:07:b1:bf:ad:44:9d:5b:fd:3f:af:70:67:ce: 0d:3c:ce:01:35:0e:d6:8f:2d:b1:34:c5:07:81:3f:6f:c5:05: b7:0b:a9:72:9c:ef:1e:cd:1f:71:18:e6:73:d9:4f:28:d3:c8: ea:b1:94:a8:51:c4:a2:52:d4:bb:37:01:35:91:8e:98:57:68: 8b:d3:9d:5e:d2:19:aa:86:4c:ca:cd:67:71:7b:c4:67:8e:13: 58:80:f7:0f:59:42:eb:9f:09:40:c0:e7:4f:7a:17:fd:c6:d5: c0:ce:4c:e9:9a:59:77:bb:f2:d0:1a:91:b1:14:2d:56:d8:b3: f1:09:66:1b:59:d2:72:2a:68:5b:01:3e:2b:1b:68:c1:4d:2a: d2:f2:ab:53:70:4b:45:cb:76:49:e1:50:6d:42:f7:69:04:a7: c9:51:60:1a:3c:ac:00:91:d1:91:47:d6:38:a7:b0:cd:01:6d: 9f:b3:02:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RyWiVkejxEaktsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk MjUwNzQ3MzItNjM0Yy00Nzc3LWJmZDEtNWFlYWRkZDVmYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKNlobUXI41o9/JklGzuHztUQOPGG0Yw4Yaw gkbmXEu7iFuVTqN5RMM2RgKLK1yDpdyuEcXjPElmV3PHpDG47x4QuCTFTTqHHBSw etb8ZSrLt3cbe2NQ++eb+JhaZozqAk928bOU7Yh/qWy9WiS3OGp/cDC783CFNwuw DSETh4uMq8Wrtg07kKhGhs2Ufel4fd/sTnMsGf6dxJ23Tv0FEFFlj46UbnIbU+H7 gSmusSSA8e2XNdcLAQlCWhXkhJLkJ0l+paaxIenRIQvEjHvv3pogtiQqnUkww2il x+dKMULvTdQZYQdOmuKDrUUKvM0aFBVuk25FWaS9+R9xOIUO5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMjklB4iJ03Xxm3AcYxAby9diLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjkyM2NjYmEtNWZjMi0z N2E3LWFiMzYtYTk1NWU2MWU3YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn4W/uVPQYYuG57v9mohIB/xVXrh9U8tUQITEDnhE5lYhAoxXD0e3kO k6Sof8zJYH3uPcIcPqsDmOEPsXEDgsQK+0pboYWE7ETGgsPZB7G/rUSdW/0/r3Bn zg08zgE1DtaPLbE0xQeBP2/FBbcLqXKc7x7NH3EY5nPZTyjTyOqxlKhRxKJS1Ls3 ATWRjphXaIvTnV7SGaqGTMrNZ3F7xGeOE1iA9w9ZQuufCUDA5096F/3G1cDOTOma WXe78tAakbEULVbYs/EJZhtZ0nIqaFsBPisbaMFNKtLyq1NwS0XLdknhUG1C92kE p8lRYBo8rACR0ZFH1jinsM0BbZ+zAsI= -----END CERTIFICATE-----Generated at Tue Aug 4 05:22:21 2026 by rpki-client