$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39c261b5-010c-3682-bd51-9d8b1e376356.roa File: 39c261b5-010c-3682-bd51-9d8b1e376356.roa (raw, json) Hash identifier: 0ySzwsKHuxg3CLyhqliRgrDFF2eOz2BEhavQiAGnMgo= Subject key identifier: B9:F9:0B:95:F3:4C:A9:F5:9A:E4:65:71:75:00:ED:69:01:C6:D2:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9A7FED6A3F32FFF3B79E3500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39c261b5-010c-3682-bd51-9d8b1e376356.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 68.2.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:ed:6a:3f:32:ff:f3:b7:9e:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=dae1ee2b-fbe1-42a2-937b-196d6b9cde96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:39:64:65:a8:7f:06:64:1c:72:69:6a:8c: 1a:8f:bc:d6:55:99:cb:e1:cb:35:d1:25:93:b4:7c: 7a:c5:d1:f6:4d:01:55:2f:81:1b:71:4e:93:7b:68: 8d:07:fa:2b:d7:30:d6:04:29:61:1b:e9:0f:d6:8e: 85:45:66:df:ab:fb:f7:d8:3b:5a:54:1f:3b:c2:54: 8f:29:40:a7:f5:ef:17:25:bb:e4:51:c8:eb:59:3d: 5f:91:b1:8a:7f:87:0a:a5:c6:31:2d:de:de:66:2e: 09:f2:6b:b1:d4:7b:32:7a:68:d0:8c:17:c7:e5:94: d4:e3:6e:b4:91:aa:3c:97:5d:a7:1c:9b:42:fb:1c: e4:aa:ce:e2:43:13:f1:36:1d:65:7c:8a:82:81:c8: 0b:05:2f:87:1a:0b:f8:24:9a:ae:26:e0:77:44:eb: d5:12:a2:2c:f0:93:9f:56:4b:3c:68:18:d4:01:73: 94:c3:fc:a2:92:06:ff:cb:14:4f:a4:f7:2e:02:be: e4:c8:e9:af:71:83:9c:70:99:3f:5f:49:05:44:62: 10:47:bf:6b:03:a4:fa:0b:ad:be:dd:10:9c:63:e6: 65:5d:ed:c4:08:72:b6:e0:13:90:a7:c9:f5:49:cd: 40:7c:11:e5:27:6b:94:3d:96:ba:4b:51:2d:a7:e6: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F9:0B:95:F3:4C:A9:F5:9A:E4:65:71:75:00:ED:69:01:C6:D2:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39c261b5-010c-3682-bd51-9d8b1e376356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b4:b3:85:22:2c:90:db:aa:13:8e:8a:9d:4e:b9:12:d4:22: 39:4b:f5:5c:c4:1e:c0:68:39:c3:ae:1d:fd:43:9f:49:83:3e: 57:15:c6:68:9b:d3:40:b7:ab:a8:b7:00:3b:df:ab:06:93:8e: f5:d1:45:a2:82:bd:86:c8:de:33:fe:be:f2:a5:eb:e1:a6:55: 71:81:e9:b5:f9:51:ae:63:12:0c:a8:1f:d5:22:50:ec:d7:12: 25:e5:c9:63:01:75:2b:0e:46:8c:04:a0:c6:eb:f8:17:1f:ec: ea:e1:cd:c7:59:de:16:b4:12:83:1a:d5:39:e4:b4:66:02:e7: ea:52:69:f3:6a:f5:7b:92:c5:3f:be:59:44:1e:e5:1f:99:ff: 14:fa:25:36:4a:a5:87:5e:77:54:85:4a:66:54:39:7f:6c:00: a7:cc:88:30:c9:7f:da:26:7e:8a:e4:16:16:d5:49:61:bd:0b: 2c:72:7a:36:cd:7e:8b:c9:03:4c:e1:06:f3:a4:4e:80:56:23: dd:e4:4f:2f:08:e8:a6:f7:d3:eb:1d:68:24:e0:72:a8:7e:ed: 38:6d:5c:8e:ed:45:50:7d:37:8a:88:57:5a:ec:0a:b6:67:45: 2c:c5:9e:e7:eb:8e:63:5d:44:cc:fd:b1:81:d3:9b:9c:eb:5e: 30:70:7b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af+1qPzL/87eeNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGFlMWVlMmItZmJlMS00MmEyLTkzN2ItMTk2ZDZiOWNkZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fM5ZGWofwZkHHJpaowaj7zWVZnL4cs10SWT tHx6xdH2TQFVL4EbcU6Te2iNB/or1zDWBClhG+kP1o6FRWbfq/v32DtaVB87wlSP KUCn9e8XJbvkUcjrWT1fkbGKf4cKpcYxLd7eZi4J8mux1HsyemjQjBfH5ZTU4260 kao8l12nHJtC+xzkqs7iQxPxNh1lfIqCgcgLBS+HGgv4JJquJuB3ROvVEqIs8JOf Vks8aBjUAXOUw/yikgb/yxRPpPcuAr7kyOmvcYOccJk/X0kFRGIQR79rA6T6C62+ 3RCcY+ZlXe3ECHK24BOQp8n1Sc1AfBHlJ2uUPZa6S1Etp+Y3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn5C5XzTKn1muRlcXUA7WkBxtLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzljMjYxYjUtMDEwYy0z NjgyLWJkNTEtOWQ4YjFlMzc2MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu0s4UiLJDbqhOOip1OuRLUIjlL9VzEHsBoOcOuHf1Dn0mDPlcVxmib 00C3q6i3ADvfqwaTjvXRRaKCvYbI3jP+vvKl6+GmVXGB6bX5Ua5jEgyoH9UiUOzX EiXlyWMBdSsORowEoMbr+Bcf7OrhzcdZ3ha0EoMa1TnktGYC5+pSafNq9XuSxT++ WUQe5R+Z/xT6JTZKpYded1SFSmZUOX9sAKfMiDDJf9omforkFhbVSWG9CyxyejbN fovJA0zhBvOkToBWI93kTy8I6Kb30+sdaCTgcqh+7ThtXI7tRVB9N4qIV1rsCrZn RSzFnufrjmNdRMz9sYHTm5zrXjBweyY= -----END CERTIFICATE-----Generated at Fri Jul 24 12:15:21 2026 by rpki-client