$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e4bd947-a445-3ab2-a58d-e4f9dac413a2.roa File: 0e4bd947-a445-3ab2-a58d-e4f9dac413a2.roa (raw, json) Hash identifier: Gbr1kFQj3i+YV0bUPqd/dkZ1fuR9YpQ4ZmOonBWGZFk= Subject key identifier: F1:3F:A4:7D:91:60:F8:FF:06:77:C3:36:DA:74:64:EC:FC:B1:10:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8C5A0D971A557831EE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e4bd947-a445-3ab2-a58d-e4f9dac413a2.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8c:5a:0d:97:1a:55:78:31:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=40b34447-b605-43ab-b375-d339f7d765a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:cf:c1:db:ad:72:75:19:31:2a:24:63:3a: 9e:44:ec:b9:9e:27:a8:f7:84:df:e2:86:fb:c1:eb: 16:d7:13:02:4f:37:37:ef:03:2d:22:90:b8:c0:2b: 20:98:3a:11:4a:01:95:67:a2:70:f1:cb:78:c9:ab: 74:d8:f3:95:2e:0a:0a:90:40:f6:76:9e:5d:2e:8c: 54:45:b2:56:39:9b:83:72:a6:71:37:36:e8:1a:0c: 50:2f:89:b6:1f:cd:21:e4:33:8a:65:4e:c2:56:74: 9a:5b:c6:78:f6:db:ea:14:cb:d0:03:2f:5a:71:ff: 61:9f:ab:da:cc:5a:9f:d4:25:e9:7e:fb:6e:16:e0: 35:79:2d:9f:69:1a:9b:7c:ad:e1:b1:f5:52:66:d3: 0c:0b:40:7d:2c:20:8f:b2:95:76:0c:8f:13:76:d8: 57:df:6a:fa:06:f0:cf:5f:5c:35:97:f3:00:bc:93: e8:3c:b3:86:c6:e6:51:ad:ba:62:db:16:e6:96:65: 27:7e:9b:df:b8:cd:42:4b:39:01:04:54:76:a5:47: d5:40:3d:d7:18:7a:e4:08:22:84:d1:71:91:05:85: 16:f6:ec:c2:f1:26:05:cf:ec:28:85:48:1e:ff:b7: ec:2e:51:ca:a0:97:64:88:e9:06:6e:af:a4:0c:9d: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3F:A4:7D:91:60:F8:FF:06:77:C3:36:DA:74:64:EC:FC:B1:10:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e4bd947-a445-3ab2-a58d-e4f9dac413a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6a:03:d3:1e:c9:99:58:1d:e7:b5:d2:81:e2:ea:63:8a:b2: 7f:52:0f:aa:b8:48:e5:de:fc:4f:fd:1e:77:e5:8f:72:70:2f: 9e:f2:db:fa:1d:23:45:e3:8b:14:85:81:9f:a6:2b:7e:b9:45: 37:d0:c5:d7:e1:b2:24:d0:16:73:42:ec:9e:59:8c:53:c6:01: e1:21:f0:31:2a:76:82:db:91:5b:65:0f:0e:6b:64:b9:14:5b: 8c:69:e7:bd:ff:92:58:f7:30:f9:3d:15:87:a9:0c:d9:1a:09: 08:1e:7e:de:21:4e:43:92:94:11:48:83:f9:73:c7:11:a4:63: 61:ef:07:75:83:54:34:b4:6b:6c:31:e4:02:d8:9d:ee:8c:27: 77:84:d0:18:be:b4:85:85:c0:e1:44:b3:84:1c:c2:b3:30:2d: 26:a7:b7:fe:76:7c:c8:8d:df:e3:d8:87:d8:d5:22:c0:5e:37: cb:c4:1d:3e:5e:09:0c:70:39:c2:4e:7b:d6:ab:5a:75:74:b1: 8c:89:52:da:4f:c4:4d:81:5d:3c:57:97:7b:df:2f:fc:20:d0: 32:42:13:d3:ff:52:7b:d0:93:b3:6c:46:29:5b:f9:4e:68:e0: 51:4d:c8:a5:0e:c0:27:7d:99:0d:7d:51:6f:73:8c:4e:71:21: 70:56:fb:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYxaDZcaVXgx7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NDBiMzQ0NDctYjYwNS00M2FiLWIzNzUtZDMzOWY3ZDc2NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsnPwdutcnUZMSokYzqeROy5nieo94Tf4ob7 wesW1xMCTzc37wMtIpC4wCsgmDoRSgGVZ6Jw8ct4yat02POVLgoKkED2dp5dLoxU RbJWOZuDcqZxNzboGgxQL4m2H80h5DOKZU7CVnSaW8Z49tvqFMvQAy9acf9hn6va zFqf1CXpfvtuFuA1eS2faRqbfK3hsfVSZtMMC0B9LCCPspV2DI8TdthX32r6BvDP X1w1l/MAvJPoPLOGxuZRrbpi2xbmlmUnfpvfuM1CSzkBBFR2pUfVQD3XGHrkCCKE 0XGRBYUW9uzC8SYFz+wohUge/7fsLlHKoJdkiOkGbq+kDJ216QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE/pH2RYPj/BnfDNtp0ZOz8sRDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGU0YmQ5NDctYTQ0NS0z YWIyLWE1OGQtZTRmOWRhYzQxM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRANCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpqA9MeyZlYHee10oHi6mOKsn9SD6q4SOXe/E/9Hnflj3JwL57y2/od I0XjixSFgZ+mK365RTfQxdfhsiTQFnNC7J5ZjFPGAeEh8DEqdoLbkVtlDw5rZLkU W4xp573/klj3MPk9FYepDNkaCQgeft4hTkOSlBFIg/lzxxGkY2HvB3WDVDS0a2wx 5ALYne6MJ3eE0Bi+tIWFwOFEs4QcwrMwLSant/52fMiN3+PYh9jVIsBeN8vEHT5e CQxwOcJOe9arWnV0sYyJUtpPxE2BXTxXl3vfL/wg0DJCE9P/UnvQk7NsRilb+U5o 4FFNyKUOwCd9mQ19UW9zjE5xIXBW+9w= -----END CERTIFICATE-----Generated at Thu Sep 24 10:28:44 2026 by rpki-client