$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06e58a0b-c10c-32b7-a2cf-62588e411716.roa File: 06e58a0b-c10c-32b7-a2cf-62588e411716.roa (raw, json) Hash identifier: XdHAb0w45FkCj7kSetdri9VJXY+4M0dBLvrqCP9fLms= Subject key identifier: 58:30:88:70:DA:AE:B6:CA:23:E2:C6:74:94:99:C2:C6:E8:EC:EB:7B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112C7BE862DDD8F51CD4280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06e58a0b-c10c-32b7-a2cf-62588e411716.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.228.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:c7:be:86:2d:dd:8f:51:cd:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4d0e67da-0442-4677-99f9-53a1aa629b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:c1:31:5a:93:78:48:19:16:44:b3:14:5c: 29:97:b4:1d:50:14:c9:00:01:07:80:c6:44:76:a2: c0:f8:16:f1:e5:21:e9:33:7a:94:80:fa:d5:43:58: 20:24:a8:cf:dd:e5:6c:42:dd:a3:94:98:80:ae:41: 7f:28:99:bd:82:3c:80:76:7a:36:4f:1e:a6:91:57: 17:ea:b0:3b:ec:72:62:0d:78:2d:5d:02:3d:85:aa: 62:62:de:a6:37:59:76:85:20:e7:2c:dc:8a:e2:70: 78:6c:b9:84:68:53:68:85:db:88:36:e1:15:76:44: f0:89:cd:77:68:54:94:ed:7d:1f:3e:28:d8:dc:26: c7:60:8b:93:5a:e4:b9:89:06:02:00:36:ca:83:62: 7a:94:61:a8:da:59:36:fb:e2:ce:69:ba:94:b2:ed: 97:8e:fa:0b:de:03:64:ea:ae:6e:26:8f:96:16:1a: 44:2e:25:ba:df:36:1e:e2:e4:f5:e4:27:09:47:6b: 6f:27:58:2a:15:92:9d:9b:3d:c4:f5:d6:52:e1:87: b0:3e:c8:ae:ca:e3:43:c3:90:fc:50:22:2e:b9:f2: 16:36:cd:e7:3c:5c:6a:d9:c0:c9:84:0d:04:dd:83: 6c:c4:05:40:f8:14:3c:51:a7:3f:a7:1c:d2:52:c5: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:30:88:70:DA:AE:B6:CA:23:E2:C6:74:94:99:C2:C6:E8:EC:EB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06e58a0b-c10c-32b7-a2cf-62588e411716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:af:5d:e4:1e:6c:a1:45:72:12:fd:bf:39:be:c7:d0:32:cb: 68:f6:fd:b1:78:f8:f5:0e:aa:fa:a2:cf:10:4f:2b:36:a2:59: 9b:2c:64:fa:fc:14:b0:ab:76:3f:7a:06:da:8f:73:7a:c9:e7: ac:99:00:71:17:af:8e:78:68:e0:34:a8:33:4f:22:d9:ba:4a: b7:20:6c:bf:c4:34:80:b1:3b:11:f1:1a:88:02:20:85:f4:8e: 00:af:e1:60:18:60:02:e8:d0:f2:ed:f7:70:50:50:40:af:08: c2:e8:0c:e3:73:34:3a:fe:20:f7:98:5a:d5:c0:69:96:1c:dd: 74:81:53:dd:9a:bd:0f:14:75:b3:eb:1b:86:df:a7:86:5d:f5: 78:45:ff:59:47:0d:be:21:9f:b4:66:7c:be:4d:68:87:4f:98: 2e:fd:58:74:23:0a:b4:a1:30:5d:5f:92:ca:4f:08:02:ab:5e: 45:d5:70:2a:2e:37:79:60:7e:3b:21:20:78:ec:11:0b:67:6a: fc:7b:3d:0e:03:97:36:38:12:16:e0:a8:4e:ed:73:8a:ab:b2: a0:f4:ae:0d:26:8c:6c:91:66:7f:5a:99:b8:26:b2:fd:f7:cd: 68:43:55:71:76:5e:71:b1:d6:a9:87:d8:80:a6:e7:3f:59:14: 23:18:7b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEse+hi3dj1HNQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGQwZTY3ZGEtMDQ0Mi00Njc3LTk5ZjktNTNhMWFhNjI5YjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5rBMVqTeEgZFkSzFFwpl7QdUBTJAAEHgMZE dqLA+Bbx5SHpM3qUgPrVQ1ggJKjP3eVsQt2jlJiArkF/KJm9gjyAdno2Tx6mkVcX 6rA77HJiDXgtXQI9hapiYt6mN1l2hSDnLNyK4nB4bLmEaFNohduINuEVdkTwic13 aFSU7X0fPijY3CbHYIuTWuS5iQYCADbKg2J6lGGo2lk2++LOabqUsu2XjvoL3gNk 6q5uJo+WFhpELiW63zYe4uT15CcJR2tvJ1gqFZKdmz3E9dZS4YewPsiuyuNDw5D8 UCIuufIWNs3nPFxq2cDJhA0E3YNsxAVA+BQ8Uac/pxzSUsVdQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgwiHDarrbKI+LGdJSZwsbo7Ot7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDZlNThhMGItYzEwYy0z MmI3LWEyY2YtNjI1ODhlNDExNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACivXeQebKFFchL9vzm+x9Ayy2j2/bF4+PUOqvqizxBPKzaiWZssZPr8 FLCrdj96BtqPc3rJ56yZAHEXr454aOA0qDNPItm6SrcgbL/ENICxOxHxGogCIIX0 jgCv4WAYYALo0PLt93BQUECvCMLoDONzNDr+IPeYWtXAaZYc3XSBU92avQ8UdbPr G4bfp4Zd9XhF/1lHDb4hn7RmfL5NaIdPmC79WHQjCrShMF1fkspPCAKrXkXVcCou N3lgfjshIHjsEQtnavx7PQ4DlzY4EhbgqE7tc4qrsqD0rg0mjGyRZn9ambgmsv33 zWhDVXF2XnGx1qmH2ICm5z9ZFCMYe44= -----END CERTIFICATE-----Generated at Sun Sep 27 08:34:31 2026 by rpki-client