$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a89a32f-79f2-3c0e-8d96-e8e9c10775fa.roa File: 0a89a32f-79f2-3c0e-8d96-e8e9c10775fa.roa (raw, json) Hash identifier: 3zlWK3irDqaW8jGHHRK6L2e7EDLlBFWSjohhkW6+Ntg= Subject key identifier: 12:7D:98:AF:92:58:5C:22:E0:DB:C4:8E:AE:EF:25:0E:6D:2B:73:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112DEB3FD429862A58F9E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a89a32f-79f2-3c0e-8d96-e8e9c10775fa.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.108.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:de:b3:fd:42:98:62:a5:8f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=b40a8ec0-56cd-415e-aae8-f9e22aab4086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:9b:9c:bc:e4:0e:75:2e:c9:c3:1b:1c:a7: ae:90:21:fe:bb:77:e1:11:21:4a:dc:a4:e6:80:80: be:62:54:f9:eb:c7:48:59:f2:ac:33:df:96:da:28: 76:92:f3:27:67:44:c0:fa:12:85:0b:87:2a:d4:a4: e3:f5:5e:5d:bc:eb:b6:5b:2b:b7:67:6a:35:cc:3e: 18:4e:72:d8:f5:8c:f8:0f:8d:30:bb:66:78:1b:31: 1c:48:9e:94:43:f3:d0:db:7f:84:1d:86:c1:d5:3c: 50:0e:db:18:01:01:c4:57:e7:24:a7:fc:a2:bd:c2: 3f:06:c0:06:80:f7:34:44:0b:94:fb:6c:69:71:a0: 1f:69:66:bd:97:20:e3:c1:5b:78:96:4c:2f:f2:9c: 97:c4:3a:85:4d:fc:1f:cb:d5:af:12:f2:3b:96:cd: a3:dd:dc:e3:bf:5b:be:3d:28:dc:41:b1:bb:fd:86: 87:e7:23:36:9e:03:1f:6a:93:80:01:9b:0b:6d:85: 01:32:9e:a4:fe:fd:eb:ef:9d:e4:2a:9c:23:ae:ee: 15:c6:73:ed:7a:b3:99:ee:b8:53:b2:80:4e:02:fe: 11:87:89:68:78:d5:93:93:40:04:c3:79:9e:93:09: 59:27:fe:dc:ef:3e:23:e5:6b:d7:4d:e7:a0:3b:92: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:98:AF:92:58:5C:22:E0:DB:C4:8E:AE:EF:25:0E:6D:2B:73:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a89a32f-79f2-3c0e-8d96-e8e9c10775fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:21:1a:e2:bd:d8:3b:b3:52:af:3f:d5:5f:ce:31:ec:40:0f: 1a:8a:08:b8:e0:43:f7:fa:a0:c0:c7:c6:b9:ca:dd:1c:e5:31: 8d:8f:e3:be:e6:4b:68:83:37:1e:46:b5:45:d0:70:a8:3b:e1: a0:2a:2c:56:63:20:ba:77:22:70:4f:23:3a:6b:35:70:cf:47: a2:77:85:06:16:f3:b5:84:13:f2:88:d6:53:0f:5b:47:a8:b2: c2:d6:33:e9:ea:35:e0:75:14:c2:1f:b0:21:f5:31:db:02:1f: cf:89:74:f7:f1:ca:64:b7:c1:d5:12:7d:71:4a:13:a7:82:34: 2e:0b:d9:3c:b3:5b:4a:d0:a1:72:5c:ce:61:94:c2:d7:0b:c4: 07:66:e9:45:6f:d4:0a:6d:c9:76:c1:45:fc:04:a6:3d:33:75: 9e:c5:18:6c:66:ab:a6:19:e4:bd:36:5f:31:b7:1d:db:72:08: 65:70:15:3f:30:b8:35:d4:15:79:95:ec:88:e1:8f:87:93:b8: cc:65:69:17:a4:63:98:4c:70:e6:7c:e2:50:43:ff:ad:87:07: f6:3e:0e:3a:07:6a:6c:ba:57:05:11:4d:d0:1e:11:25:56:6a: 42:77:36:9d:79:b8:03:b2:11:cc:65:6c:20:c5:39:e0:94:25: f5:34:95:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEt6z/UKYYqWPngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YjQwYThlYzAtNTZjZC00MTVlLWFhZTgtZjllMjJhYWI0MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo6bnLzkDnUuycMbHKeukCH+u3fhESFK3KTm gIC+YlT568dIWfKsM9+W2ih2kvMnZ0TA+hKFC4cq1KTj9V5dvOu2Wyu3Z2o1zD4Y TnLY9Yz4D40wu2Z4GzEcSJ6UQ/PQ23+EHYbB1TxQDtsYAQHEV+ckp/yivcI/BsAG gPc0RAuU+2xpcaAfaWa9lyDjwVt4lkwv8pyXxDqFTfwfy9WvEvI7ls2j3dzjv1u+ PSjcQbG7/YaH5yM2ngMfapOAAZsLbYUBMp6k/v3r753kKpwjru4VxnPterOZ7rhT soBOAv4Rh4loeNWTk0AEw3mekwlZJ/7c7z4j5WvXTeegO5LKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ9mK+SWFwi4NvEjq7vJQ5tK3NUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE4OWEzMmYtNzlmMi0z YzBlLThkOTYtZThlOWMxMDc3NWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABchGuK92DuzUq8/1V/OMexADxqKCLjgQ/f6oMDHxrnK3RzlMY2P477m S2iDNx5GtUXQcKg74aAqLFZjILp3InBPIzprNXDPR6J3hQYW87WEE/KI1lMPW0eo ssLWM+nqNeB1FMIfsCH1MdsCH8+JdPfxymS3wdUSfXFKE6eCNC4L2TyzW0rQoXJc zmGUwtcLxAdm6UVv1AptyXbBRfwEpj0zdZ7FGGxmq6YZ5L02XzG3HdtyCGVwFT8w uDXUFXmV7Ijhj4eTuMxlaRekY5hMcOZ84lBD/62HB/Y+DjoHamy6VwURTdAeESVW akJ3Np15uAOyEcxlbCDFOeCUJfU0lV8= -----END CERTIFICATE-----Generated at Wed Sep 23 13:24:19 2026 by rpki-client