$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1604dcd1-e798-3d75-9ada-f39c52f908a8.roa File: 1604dcd1-e798-3d75-9ada-f39c52f908a8.roa (raw, json) Hash identifier: m71FF8vxrNyu2Y6SRWxLeYzz2qjStKk/WYx/DgnEnqE= Subject key identifier: 7F:F7:C5:90:13:CB:00:2D:1A:E9:AA:F6:2C:C8:82:79:AC:99:7F:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112C217140E99A6988416E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1604dcd1-e798-3d75-9ada-f39c52f908a8.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.228.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:c2:17:14:0e:99:a6:98:84:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=56df396a-e279-40be-aa89-8b801c9fd97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:00:d3:91:fb:34:e3:31:a8:34:c1:3a:c6: c7:22:7e:ea:e4:a9:cb:5d:a8:8e:ee:33:6c:66:cc: f8:12:d1:ec:77:ef:4a:81:13:e1:f9:62:ec:77:4e: 7a:b9:5e:df:14:3c:2e:15:fe:95:1c:a8:43:19:50: 40:76:f9:0e:da:b9:30:88:67:bd:a5:24:a0:a7:10: e0:95:bd:63:81:b0:fa:a3:f5:5a:93:3a:35:5b:6b: 09:c1:4a:83:43:eb:16:9e:3f:d2:2c:c8:eb:df:a8: 64:bc:9a:76:75:aa:62:d3:e4:a6:33:3b:85:dc:bb: 7e:cf:9a:3d:c6:23:38:9e:cc:34:ad:6b:79:81:03: d2:51:d9:a7:04:f1:f3:d0:78:4a:47:e9:c1:ef:d4: e0:70:1b:1f:4a:c5:74:7e:69:61:75:e8:d3:af:3a: 83:59:6f:81:87:38:c4:51:a0:23:1b:9f:e1:20:a7: 77:05:a4:ce:a2:bb:5a:67:55:59:13:3c:26:28:26: a8:c6:1d:e3:2d:7d:48:80:87:d5:cd:dd:fa:4b:11: b2:36:d1:ab:8b:8c:5f:6f:ea:82:98:20:bd:9e:24: 2c:7a:35:79:a5:e2:65:08:17:3e:bb:af:f6:84:bf: 49:fb:a1:10:41:f0:04:18:32:c0:db:99:ec:ef:90: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:C5:90:13:CB:00:2D:1A:E9:AA:F6:2C:C8:82:79:AC:99:7F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1604dcd1-e798-3d75-9ada-f39c52f908a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:55:28:16:38:fd:3c:10:74:d8:ab:82:a8:25:9f:40:c5:50: 42:37:10:bc:37:a5:50:9d:80:f7:30:61:bb:b4:fa:57:2e:86: a2:96:a0:96:02:b8:bc:64:fa:59:8d:e7:8f:9a:84:40:5f:e9: 4a:c9:90:54:f1:5b:9c:c5:0e:07:05:f9:7b:d7:f5:dd:a5:9e: f3:7c:70:bb:75:60:07:01:41:69:02:6d:3a:cf:ca:6e:37:c6: 20:79:87:a9:ee:d0:6e:f4:b7:ea:05:f4:69:ac:1c:8e:67:bc: d8:e6:83:04:0c:0a:18:64:cf:5a:52:8f:33:70:41:49:ec:8f: ba:f8:93:53:39:e5:06:09:55:cb:7b:99:88:23:f5:17:92:c2: 0f:fa:0e:cd:96:00:96:a7:51:48:52:4a:94:c5:3d:93:91:a5: 83:6b:7b:0c:31:c8:10:4e:dc:a8:50:f1:9c:9c:bd:0f:57:87: ff:30:d7:50:66:04:3c:28:d2:ea:14:b0:4d:b4:92:c2:d3:e5: ac:a2:28:a8:a7:08:a2:4c:68:40:58:97:e5:e3:eb:5e:37:9e: bc:87:e6:ec:8b:b1:b3:3d:d6:cc:59:e8:83:fb:d2:9e:97:c4: 6f:67:39:fb:b2:04:38:20:4b:57:17:45:d6:af:6e:ee:22:c5: 68:52:2c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsIXFA6ZppiEFuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTZkZjM5NmEtZTI3OS00MGJlLWFhODktOGI4MDFjOWZkOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcwA05H7NOMxqDTBOsbHIn7q5KnLXaiO7jNs Zsz4EtHsd+9KgRPh+WLsd056uV7fFDwuFf6VHKhDGVBAdvkO2rkwiGe9pSSgpxDg lb1jgbD6o/Vakzo1W2sJwUqDQ+sWnj/SLMjr36hkvJp2dapi0+SmMzuF3Lt+z5o9 xiM4nsw0rWt5gQPSUdmnBPHz0HhKR+nB79TgcBsfSsV0fmlhdejTrzqDWW+BhzjE UaAjG5/hIKd3BaTOortaZ1VZEzwmKCaoxh3jLX1IgIfVzd36SxGyNtGri4xfb+qC mCC9niQsejV5peJlCBc+u6/2hL9J+6EQQfAEGDLA25ns75BzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/3xZATywAtGumq9izIgnmsmX+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTYwNGRjZDEtZTc5OC0z ZDc1LTlhZGEtZjM5YzUyZjkwOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpVKBY4/TwQdNirgqgln0DFUEI3ELw3pVCdgPcwYbu0+lcuhqKWoJYC uLxk+lmN54+ahEBf6UrJkFTxW5zFDgcF+XvX9d2lnvN8cLt1YAcBQWkCbTrPym43 xiB5h6nu0G70t+oF9GmsHI5nvNjmgwQMChhkz1pSjzNwQUnsj7r4k1M55QYJVct7 mYgj9ReSwg/6Ds2WAJanUUhSSpTFPZORpYNrewwxyBBO3KhQ8ZycvQ9Xh/8w11Bm BDwo0uoUsE20ksLT5ayiKKinCKJMaEBYl+Xj6143nryH5uyLsbM91sxZ6IP70p6X xG9nOfuyBDggS1cXRdavbu4ixWhSLBY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:52:16 2026 by rpki-client