$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12663ebe-d69c-34c5-abfc-b8156dc94a60.roa File: 12663ebe-d69c-34c5-abfc-b8156dc94a60.roa (raw, json) Hash identifier: qZJAcilCXy3ysXZVKkCwE71vpeGsJmBINcrjYmsy4Dc= Subject key identifier: 6F:F9:A4:2B:E8:D7:5E:D3:39:34:F1:41:18:62:56:F3:2B:C0:F5:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE2BB2BF37C8C7606BB75B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12663ebe-d69c-34c5-abfc-b8156dc94a60.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:bb:2b:f3:7c:8c:76:06:bb:75:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=1b2f4527-f1e4-4633-afcc-c0fa471d3063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:95:f4:99:3e:95:37:49:68:e1:f5:81:3e: b1:96:9b:5d:50:39:48:91:63:e3:d2:34:e0:b0:92: 87:ec:6a:32:be:ae:33:68:21:33:a4:10:88:cf:2b: cd:17:47:ae:9e:f8:8f:d8:9b:7c:4d:a5:54:40:f9: 90:45:6d:f4:04:7c:52:93:e3:a9:bb:04:61:6e:64: f5:f4:a0:20:41:35:cc:32:8a:7d:c5:ad:e6:52:c6: 15:ac:92:1a:c2:46:36:01:e0:89:60:3c:ed:28:49: 04:9f:ba:45:b5:ef:e0:99:bc:6f:70:cf:28:94:41: 35:99:dd:bb:ab:58:38:a2:d7:f5:b1:28:97:e4:2b: 6c:05:03:f2:96:3f:32:1a:db:05:1d:f4:c1:25:c0: 5e:a9:45:87:ee:27:5d:17:ab:b6:36:a9:7a:c0:02: 91:dc:66:74:06:2c:df:e9:d7:74:3e:37:a8:58:89: 6d:84:80:3d:31:b7:c5:4f:08:6e:38:4b:96:d8:02: 5e:91:f0:26:00:79:de:64:f7:1c:18:fe:63:10:97: c1:69:0a:71:a8:2d:be:f0:24:ad:a8:0b:1d:51:b7: af:08:5e:16:b9:d3:d6:81:0d:c8:45:c8:42:b3:e7: ba:f9:95:ec:4f:ab:dc:2c:47:1f:68:fa:e5:cf:f8: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:A4:2B:E8:D7:5E:D3:39:34:F1:41:18:62:56:F3:2B:C0:F5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12663ebe-d69c-34c5-abfc-b8156dc94a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:16:cd:66:2c:aa:4b:5e:13:a3:b4:fe:20:76:91:44:c5:aa: af:c3:84:cc:57:b4:df:e6:91:5c:70:e5:58:7a:91:84:28:15: 57:15:32:8a:ea:d8:ca:c8:63:1f:4c:1f:7a:ac:92:9a:23:3b: ec:bc:c0:d8:93:8d:5e:08:76:eb:72:c0:51:89:97:52:60:0f: 5e:5d:48:a5:ef:ec:62:ec:6d:9b:3c:ac:fc:25:d1:d2:ad:7c: d8:49:3f:d2:58:e1:75:13:d2:d8:f8:7a:8f:60:29:95:25:ad: d1:9b:91:8d:d3:3d:9f:cb:e5:e8:7a:c5:1c:cb:c5:4c:d0:04: 94:8f:13:09:4e:07:a8:99:45:35:6a:8f:6e:20:22:f4:e7:09: e3:46:27:e8:3c:dd:fb:d9:61:7e:68:ce:95:5f:c3:43:b0:f1: 38:fa:f9:ca:98:4e:82:78:84:fb:5f:90:6e:f1:d9:57:9c:66: a8:9e:23:6d:f7:5e:42:99:de:99:aa:97:3f:d4:74:c6:1a:4d: d7:39:71:b0:20:dc:b7:2a:dc:17:18:3b:18:5b:a7:2a:5e:cd: 2f:2c:5f:97:f6:78:bb:96:a9:00:60:e0:6b:81:82:ad:79:04: b5:9f:97:2b:37:fc:76:af:48:ed:b4:a1:12:72:2d:0e:22:67: 6c:94:39:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rsr83yMdga7dbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MWIyZjQ1MjctZjFlNC00NjMzLWFmY2MtYzBmYTQ3MWQzMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoCV9Jk+lTdJaOH1gT6xlptdUDlIkWPj0jTg sJKH7Goyvq4zaCEzpBCIzyvNF0eunviP2Jt8TaVUQPmQRW30BHxSk+OpuwRhbmT1 9KAgQTXMMop9xa3mUsYVrJIawkY2AeCJYDztKEkEn7pFte/gmbxvcM8olEE1md27 q1g4otf1sSiX5CtsBQPylj8yGtsFHfTBJcBeqUWH7iddF6u2Nql6wAKR3GZ0Bizf 6dd0PjeoWIlthIA9MbfFTwhuOEuW2AJekfAmAHneZPccGP5jEJfBaQpxqC2+8CSt qAsdUbevCF4WudPWgQ3IRchCs+e6+ZXsT6vcLEcfaPrlz/iHAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/5pCvo117TOTTxQRhiVvMrwPXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTI2NjNlYmUtZDY5Yy0z NGM1LWFiZmMtYjgxNTZkYzk0YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkWzWYsqkteE6O0/iB2kUTFqq/DhMxXtN/mkVxw5Vh6kYQoFVcVMorq 2MrIYx9MH3qskpojO+y8wNiTjV4IdutywFGJl1JgD15dSKXv7GLsbZs8rPwl0dKt fNhJP9JY4XUT0tj4eo9gKZUlrdGbkY3TPZ/L5eh6xRzLxUzQBJSPEwlOB6iZRTVq j24gIvTnCeNGJ+g83fvZYX5ozpVfw0Ow8Tj6+cqYToJ4hPtfkG7x2VecZqieI233 XkKZ3pmqlz/UdMYaTdc5cbAg3Lcq3BcYOxhbpypezS8sX5f2eLuWqQBg4GuBgq15 BLWflys3/HavSO20oRJyLQ4iZ2yUOXI= -----END CERTIFICATE-----Generated at Fri Sep 25 00:03:15 2026 by rpki-client