$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/035bd612-332f-3100-81ad-9f758470d0ee.roa File: 035bd612-332f-3100-81ad-9f758470d0ee.roa (raw, json) Hash identifier: Y8FND6agEGpKTmKClWVpuF4PAhpOvXXMm5yS8R7Ll0c= Subject key identifier: FB:22:4C:02:65:54:B3:1F:2E:9C:5B:2F:7B:74:5A:A9:3E:2A:81:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD395E3977E780F0CF6180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/035bd612-332f-3100-81ad-9f758470d0ee.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:39:5e:39:77:e7:80:f0:cf:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=f4bb41be-dd19-4d6d-bab7-9b0ca6b2aaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:1e:a0:af:e5:cc:92:0a:d4:bb:16:bc:d4: 20:69:20:5e:09:db:51:af:54:52:78:61:ba:d8:1b: c8:69:85:4d:41:b6:0f:73:8e:8b:2e:51:31:3c:29: 0f:58:f7:ea:19:39:34:5b:9a:c2:2a:9f:20:28:fd: 75:7d:ab:1d:cb:6b:72:da:a4:cf:4f:53:ae:93:26: c8:42:56:26:8d:1c:b7:eb:11:bb:f0:67:6b:19:a1: 76:05:b0:49:af:7f:a2:c1:52:b3:1c:7a:9d:8f:b9: 8e:e5:64:de:0b:7d:c4:2f:80:13:7e:33:e1:5a:72: 91:14:ea:ac:5b:d8:41:bb:d4:f7:b1:bf:e4:fa:03: 8c:96:4a:30:f2:56:bb:bd:4f:f5:22:41:f9:df:52: 64:64:e2:07:bf:fe:97:07:95:6a:fc:35:1d:fb:3f: 0a:68:8a:ac:0a:e8:7f:5e:ce:a6:da:0d:a1:8d:df: 61:81:69:8a:ec:07:d1:ec:68:89:72:b2:88:b0:e8: 8c:a6:42:5e:7f:a9:52:c6:cb:e0:31:aa:b7:e9:97: f2:22:7b:e8:7f:68:38:a0:b7:fb:64:7c:d8:ce:89: 9f:93:1e:e1:54:99:ca:9a:3b:c2:8f:db:dc:a0:88: b9:7c:9d:aa:57:c0:87:81:8c:ca:80:3b:27:26:bc: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:22:4C:02:65:54:B3:1F:2E:9C:5B:2F:7B:74:5A:A9:3E:2A:81:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/035bd612-332f-3100-81ad-9f758470d0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:72:ff:2c:af:34:c9:00:21:82:5a:1a:20:9b:67:8d:99:ee: 3c:4c:60:9f:13:01:08:d7:92:35:6b:22:2e:f5:af:b9:32:38: 12:9b:f2:4c:b0:ce:03:08:30:b1:94:f3:8c:b5:64:de:e1:19: 3f:6d:74:6b:0f:52:84:ef:e3:4d:00:86:7d:96:70:6a:6a:d5: 61:e3:c0:0c:1a:01:89:4d:eb:43:7b:4b:bc:cf:ca:90:e4:4d: 72:fe:34:8a:26:28:68:a3:8e:e2:55:57:3a:cd:69:d3:45:f2: ed:37:a8:e3:8f:1e:a0:ba:f5:17:52:26:8a:bc:b9:06:42:1a: a9:6a:b2:33:86:c5:e1:77:89:76:0e:a6:3c:e9:dc:38:79:89: 74:97:9f:2d:99:1b:2c:8f:96:01:3b:3e:8a:90:71:59:fe:24: 3f:73:66:3d:c7:ff:e4:c0:fb:b9:a9:21:a5:cb:c1:f2:30:93: 9d:f2:53:28:a4:30:ff:c0:cf:09:8a:8e:55:ac:88:34:7b:32: c7:20:b2:80:0c:8e:df:7b:54:10:d3:26:56:60:c3:5d:ca:78: 0f:d5:e3:7a:4e:fe:99:1d:92:a0:55:55:5f:b1:09:e6:3b:8c: 6e:54:5c:f2:d9:14:f2:ed:7d:31:79:f4:f3:71:9c:cc:4c:ba: 7c:6a:4b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTleOXfngPDPYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjRiYjQxYmUtZGQxOS00ZDZkLWJhYjctOWIwY2E2YjJhYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkogeoK/lzJIK1LsWvNQgaSBeCdtRr1RSeGG6 2BvIaYVNQbYPc46LLlExPCkPWPfqGTk0W5rCKp8gKP11fasdy2ty2qTPT1OukybI QlYmjRy36xG78GdrGaF2BbBJr3+iwVKzHHqdj7mO5WTeC33EL4ATfjPhWnKRFOqs W9hBu9T3sb/k+gOMlkow8la7vU/1IkH531JkZOIHv/6XB5Vq/DUd+z8KaIqsCuh/ Xs6m2g2hjd9hgWmK7AfR7GiJcrKIsOiMpkJef6lSxsvgMaq36ZfyInvof2g4oLf7 ZHzYzomfkx7hVJnKmjvCj9vcoIi5fJ2qV8CHgYzKgDsnJrwh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsiTAJlVLMfLpxbL3t0Wqk+KoHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDM1YmQ2MTItMzMyZi0z MTAwLTgxYWQtOWY3NTg0NzBkMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARANZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABty/yyvNMkAIYJaGiCbZ42Z7jxMYJ8TAQjXkjVrIi71r7kyOBKb8kyw zgMIMLGU84y1ZN7hGT9tdGsPUoTv400Ahn2WcGpq1WHjwAwaAYlN60N7S7zPypDk TXL+NIomKGijjuJVVzrNadNF8u03qOOPHqC69RdSJoq8uQZCGqlqsjOGxeF3iXYO pjzp3Dh5iXSXny2ZGyyPlgE7PoqQcVn+JD9zZj3H/+TA+7mpIaXLwfIwk53yUyik MP/AzwmKjlWsiDR7MscgsoAMjt97VBDTJlZgw13KeA/V43pO/pkdkqBVVV+xCeY7 jG5UXPLZFPLtfTF59PNxnMxMunxqS1U= -----END CERTIFICATE-----Generated at Sat Sep 26 16:50:41 2026 by rpki-client