$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04572d52-b027-3b64-94bb-03d12d155a6b.roa File: 04572d52-b027-3b64-94bb-03d12d155a6b.roa (raw, json) Hash identifier: 0BXyWaOOhClD1YoH8iqlLVD+asTP51AVfRcK3ZZNeX0= Subject key identifier: 3B:00:9C:E8:2A:2B:0C:53:AD:5E:4A:26:42:8F:16:3F:1D:7C:9E:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD2C7A69A752FEC2C29130 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04572d52-b027-3b64-94bb-03d12d155a6b.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2c:7a:69:a7:52:fe:c2:c2:91:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=6db415c6-f891-4952-bf36-641545e16953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:95:5b:44:c1:c0:b9:a5:7d:42:9c:3a:9c:7e: 99:16:e0:71:26:cc:01:61:c3:46:17:40:20:87:26: 76:27:75:19:f9:ff:96:b3:b2:44:9c:05:66:7a:14: 30:14:d5:03:9e:b2:44:2c:35:41:f7:64:cb:52:0c: 40:5c:83:e1:fd:a3:d7:0a:f2:7f:9d:08:76:d2:ea: 1e:45:3f:2b:53:75:50:14:6e:52:05:1b:f2:bc:70: bd:96:e6:69:79:cf:78:e9:aa:76:09:7c:66:2d:9b: fb:8c:33:c5:6e:ae:a8:0e:a3:a6:d2:f4:89:85:21: 09:a8:56:9c:9a:86:40:16:a4:07:43:38:d3:fa:07: 34:1f:26:cb:1b:bb:23:07:c5:d4:f0:43:2d:46:cd: e0:95:10:14:2f:1f:20:9e:15:20:fa:a9:60:8a:0c: 24:15:08:84:db:0e:6b:7c:27:bd:f3:1c:fe:2b:b5: 79:b3:97:12:3d:07:38:28:ba:db:12:57:46:a9:d3: fd:d3:ba:9e:8c:ba:77:7a:ad:ea:cc:23:53:3d:49: 9a:88:17:ff:77:f0:bc:e9:1d:e8:a5:d6:c5:49:38: 7d:d4:01:6c:a7:9e:73:fe:8f:4e:a8:43:de:41:b6: c2:b7:81:08:a5:f5:c3:a1:33:bc:03:a7:5c:f7:60: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:9C:E8:2A:2B:0C:53:AD:5E:4A:26:42:8F:16:3F:1D:7C:9E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04572d52-b027-3b64-94bb-03d12d155a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cd:34:c6:6d:35:7f:36:d5:2d:12:b6:9e:bf:59:bc:e3:2f: 67:4e:f0:15:07:b6:8c:9e:a5:90:bb:5a:1f:b3:52:fe:21:d1: e8:5d:6b:78:c2:b1:9d:c6:e3:87:e3:02:bd:6b:e0:21:b5:fa: c7:47:85:f2:3b:cc:16:bc:45:61:25:30:8f:00:85:11:d2:7e: f6:75:7b:8d:ad:60:a5:6c:ba:63:1c:2d:7d:29:5e:b0:07:99: 68:58:b8:2f:f8:dd:78:48:80:46:d0:8c:1d:3b:30:5e:6c:91: 69:63:63:2e:45:d5:85:8a:a2:cc:bc:c0:8d:4a:3b:61:e5:7c: 23:e3:a6:43:84:47:a5:06:41:8d:ef:f0:ed:1b:56:3f:53:94: 6d:dc:54:e9:80:d3:55:f0:c1:c5:36:21:de:02:00:d3:94:83: 04:3b:9d:c1:71:ad:be:14:d6:08:65:f9:df:60:23:96:30:6e: b2:78:70:07:8a:12:45:99:e6:8d:3e:50:01:26:50:c3:45:f5: ad:0c:cf:54:25:ab:c6:10:56:e5:26:83:80:c3:33:a6:f6:40: 2e:6d:ca:91:80:1a:23:c8:53:72:9f:8b:4f:96:ba:af:63:62: 82:ee:69:18:33:71:4d:c7:2d:16:90:a3:a0:1b:9b:63:4b:40: f2:1c:37:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSx6aadS/sLCkTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NmRiNDE1YzYtZjg5MS00OTUyLWJmMzYtNjQxNTQ1ZTE2OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pVbRMHAuaV9Qpw6nH6ZFuBxJswBYcNGF0Ag hyZ2J3UZ+f+Ws7JEnAVmehQwFNUDnrJELDVB92TLUgxAXIPh/aPXCvJ/nQh20uoe RT8rU3VQFG5SBRvyvHC9luZpec946ap2CXxmLZv7jDPFbq6oDqOm0vSJhSEJqFac moZAFqQHQzjT+gc0HybLG7sjB8XU8EMtRs3glRAULx8gnhUg+qlgigwkFQiE2w5r fCe98xz+K7V5s5cSPQc4KLrbEldGqdP907qejLp3eq3qzCNTPUmaiBf/d/C86R3o pdbFSTh91AFsp55z/o9OqEPeQbbCt4EIpfXDoTO8A6dc92DHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsAnOgqKwxTrV5KJkKPFj8dfJ7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDQ1NzJkNTItYjAyNy0z YjY0LTk0YmItMDNkMTJkMTU1YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvNNMZtNX821S0Stp6/WbzjL2dO8BUHtoyepZC7Wh+zUv4h0ehda3jC sZ3G44fjAr1r4CG1+sdHhfI7zBa8RWElMI8AhRHSfvZ1e42tYKVsumMcLX0pXrAH mWhYuC/43XhIgEbQjB07MF5skWljYy5F1YWKosy8wI1KO2HlfCPjpkOER6UGQY3v 8O0bVj9TlG3cVOmA01XwwcU2Id4CANOUgwQ7ncFxrb4U1ghl+d9gI5YwbrJ4cAeK EkWZ5o0+UAEmUMNF9a0Mz1Qlq8YQVuUmg4DDM6b2QC5typGAGiPIU3Kfi0+Wuq9j YoLuaRgzcU3HLRaQo6Abm2NLQPIcN3g= -----END CERTIFICATE-----Generated at Thu Sep 24 04:59:30 2026 by rpki-client