$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa File: 0957c138-5bc7-3c17-84d3-447836d2928a.roa (raw, json) Hash identifier: 4f0EtpzGo8LcKeWKAPnYw6sGX95JWxjVhQa5jTmPRI0= Subject key identifier: FA:32:3F:F5:8D:A4:5C:04:B4:DC:43:4D:CC:3B:04:1A:6A:4E:38:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD7D7F4BEFED6D3006A580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:7d:7f:4b:ef:ed:6d:30:06:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=a6f23f04-5675-44a9-9c31-d4d446e2b27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:f3:75:65:a0:d4:c1:5f:e0:0b:ba:2a:dd: cd:fb:88:3b:ae:26:9f:6b:50:85:36:4f:b4:d1:ae: 56:60:22:f8:28:7f:b2:59:eb:ff:0b:90:e7:b3:95: 5c:b5:18:8b:e6:02:ad:0d:b9:b4:b3:48:7a:8e:e1: cc:22:96:58:4b:de:a8:60:75:26:79:dc:8d:d0:ad: 66:23:a7:49:84:0c:1b:9e:73:c8:a2:16:20:7e:60: cd:46:7c:44:18:2d:05:f9:3d:1f:b3:8e:f1:cd:56: 8f:34:fb:cf:60:12:4e:37:07:08:c2:c8:e2:8a:a8: 0b:81:f8:99:90:05:8d:75:fb:fa:7d:17:bd:fa:b0: 79:e6:5e:13:e1:66:2f:d6:dc:07:dd:dc:25:c8:7e: bb:44:00:10:25:9c:4b:66:f6:ec:80:48:54:13:78: 30:2a:10:bf:06:e8:69:85:58:5d:b3:9f:44:d6:d5: e2:59:0f:c4:ba:62:70:88:5b:df:55:02:0f:66:46: dc:50:e9:95:de:29:0a:f7:ff:c2:6c:74:61:7a:d3: e7:88:17:62:fd:6e:28:e6:09:59:27:3d:d7:b7:c0: 98:84:2e:d5:23:4e:ac:78:4e:1e:46:49:18:1a:35: f1:34:11:5d:78:b7:b4:01:ea:20:92:0c:6f:2f:a3: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:32:3F:F5:8D:A4:5C:04:B4:DC:43:4D:CC:3B:04:1A:6A:4E:38:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:06:ce:cb:b2:cb:79:86:01:dc:20:a7:3c:e5:f6:60:6a:81: 64:5a:85:4c:ef:66:04:7b:6b:c1:e9:49:cc:49:51:ec:53:8f: 05:41:fb:32:f9:92:3b:e0:a7:bb:74:9e:d4:fb:5d:93:f2:06: 26:95:54:c2:db:85:93:dc:2f:9c:19:7d:98:c6:20:a5:e2:45: d5:d0:6b:ed:19:0a:20:98:85:13:37:67:6b:4e:1f:82:52:df: 40:58:fa:4d:eb:f7:d7:03:e4:c1:ff:0c:0a:fc:3a:01:ed:58: 90:80:51:f8:44:d8:68:aa:23:2b:83:e8:5c:7d:e3:2d:00:34: 11:88:83:1b:7d:88:ad:f1:eb:c5:c2:57:f4:99:89:69:f0:07: eb:33:3f:ef:39:84:fa:a6:36:ff:23:fb:00:09:78:a4:37:cc: d9:3e:4f:7e:24:a3:4d:c9:b0:27:62:31:71:a4:97:a0:0e:ed: 25:eb:43:49:90:fe:0e:48:df:23:74:b1:5d:8f:36:3a:9e:c7: 20:ef:e5:c1:7e:d0:c2:f9:78:70:6a:d6:e6:37:a4:72:52:a3: 41:60:00:a6:76:ce:53:c7:45:c8:d6:10:aa:65:87:92:a6:09: 4a:64:16:75:6b:00:87:49:ec:14:5b:f3:09:42:16:b1:60:11: af:b8:6d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3X1/S+/tbTAGpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk YTZmMjNmMDQtNTY3NS00NGE5LTljMzEtZDRkNDQ2ZTJiMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyDzdWWg1MFf4Au6Kt3N+4g7riafa1CFNk+0 0a5WYCL4KH+yWev/C5Dns5VctRiL5gKtDbm0s0h6juHMIpZYS96oYHUmedyN0K1m I6dJhAwbnnPIohYgfmDNRnxEGC0F+T0fs47xzVaPNPvPYBJONwcIwsjiiqgLgfiZ kAWNdfv6fRe9+rB55l4T4WYv1twH3dwlyH67RAAQJZxLZvbsgEhUE3gwKhC/Buhp hVhds59E1tXiWQ/EumJwiFvfVQIPZkbcUOmV3ikK9//CbHRhetPniBdi/W4o5glZ Jz3Xt8CYhC7VI06seE4eRkkYGjXxNBFdeLe0AeogkgxvL6MhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoyP/WNpFwEtNxDTcw7BBpqTjj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk1N2MxMzgtNWJjNy0z YzE3LTg0ZDMtNDQ3ODM2ZDI5MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAGzsuyy3mGAdwgpzzl9mBqgWRahUzvZgR7a8HpScxJUexTjwVB+zL5 kjvgp7t0ntT7XZPyBiaVVMLbhZPcL5wZfZjGIKXiRdXQa+0ZCiCYhRM3Z2tOH4JS 30BY+k3r99cD5MH/DAr8OgHtWJCAUfhE2GiqIyuD6Fx94y0ANBGIgxt9iK3x68XC V/SZiWnwB+szP+85hPqmNv8j+wAJeKQ3zNk+T34ko03JsCdiMXGkl6AO7SXrQ0mQ /g5I3yN0sV2PNjqexyDv5cF+0ML5eHBq1uY3pHJSo0FgAKZ2zlPHRcjWEKplh5Km CUpkFnVrAIdJ7BRb8wlCFrFgEa+4bT0= -----END CERTIFICATE-----Generated at Tue Sep 29 15:45:56 2026 by rpki-client