$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1624b10d-c282-361d-adce-31af35631854.roa File: 1624b10d-c282-361d-adce-31af35631854.roa (raw, json) Hash identifier: WntozDp7U+nzARHXBaDDkPYtLxmGpPogbFxy5gu5qwo= Subject key identifier: D8:6B:9F:C9:59:63:8D:B3:58:B9:0D:09:EF:78:16:B3:8D:D3:DC:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD84A2A7374A149CF41380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1624b10d-c282-361d-adce-31af35631854.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:84:a2:a7:37:4a:14:9c:f4:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=c7255404-3a35-43fb-bfe9-3b1a313ed29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:d5:f5:bb:20:17:cd:20:7c:fa:9b:dd:d7: 03:5e:18:74:54:bd:20:d5:a3:c6:26:25:c2:79:ee: a7:41:88:f4:84:6d:c0:00:aa:49:ff:17:ad:f5:b7: 74:cb:27:08:45:46:d7:08:51:25:62:d1:40:b3:44: 1c:6a:e1:e6:a8:8d:b2:54:e8:63:58:ca:84:50:42: fa:85:8c:24:05:10:68:b2:61:41:ce:ba:5e:bf:c3: 8d:bb:fb:f5:b7:44:dc:14:31:9a:2a:1d:95:ed:14: 1d:aa:d2:02:be:13:d0:7c:bc:fb:5b:1f:a2:4b:79: 1e:75:64:f4:74:a5:76:a2:20:4a:0d:2c:d2:e1:71: 89:e4:87:82:ab:6e:0f:56:53:3b:a7:1f:cf:38:79: b0:8a:6f:17:16:e8:19:83:0e:e5:ec:58:b4:1f:6d: 1e:a5:55:f0:03:4d:14:37:96:21:70:9b:ac:ef:b8: 27:83:b3:9d:e1:f1:59:f7:13:33:b6:34:f6:70:00: 4e:e9:c9:d9:dd:cc:6f:58:c8:31:14:70:e4:3b:47: 21:4f:c8:d9:5f:43:7f:2b:33:b6:07:15:9d:7c:aa: 27:ba:87:46:f7:d7:e0:a7:01:21:a4:e0:75:ae:77: 2a:28:fd:44:05:32:1e:45:c7:f1:03:ec:71:99:f5: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:9F:C9:59:63:8D:B3:58:B9:0D:09:EF:78:16:B3:8D:D3:DC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1624b10d-c282-361d-adce-31af35631854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:06:5c:1c:c9:96:61:72:a3:82:2a:0d:67:b5:61:c6:fd:91: 5c:f9:57:4a:73:9b:8e:75:9b:83:bc:9d:fb:d2:2d:ec:5a:5d: 45:06:25:c9:c9:8b:cc:a2:73:7f:54:2c:f3:36:5d:37:fb:f1: eb:f0:1d:89:cd:4c:3c:23:ff:2f:4a:3c:5c:7a:44:4c:78:73: 2d:39:5f:ab:2c:53:44:cc:8a:75:57:69:40:42:16:88:67:39: 4a:b2:d3:94:37:69:38:2f:c5:af:5e:26:b8:7d:59:39:9e:1b: 19:a3:6e:14:52:43:5f:49:49:3f:bc:23:c5:7b:24:89:c1:03: e9:c6:45:a7:b0:a1:12:43:d1:41:4d:bf:57:63:fc:05:3b:94: 89:82:3b:ce:77:65:32:c6:45:60:be:2b:72:98:a2:ee:58:53: 18:7e:81:1d:7f:e9:1b:d3:5f:38:2f:ab:f2:ec:79:70:53:e5: 88:33:57:46:02:69:c6:b9:05:ae:52:d7:44:b9:2f:01:b7:44: 9f:26:25:1d:b5:58:6f:b2:23:70:3c:7b:4e:73:97:67:72:9b: bf:07:75:3c:3c:f5:25:ec:8c:cb:a8:ad:ca:2b:86:f7:77:a1: 8a:ec:c0:79:e7:73:c8:6c:27:47:e6:84:57:57:63:55:15:82: 3d:5b:9e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYSipzdKFJz0E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YzcyNTU0MDQtM2EzNS00M2ZiLWJmZTktM2IxYTMxM2VkMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+TV9bsgF80gfPqb3dcDXhh0VL0g1aPGJiXC ee6nQYj0hG3AAKpJ/xet9bd0yycIRUbXCFElYtFAs0QcauHmqI2yVOhjWMqEUEL6 hYwkBRBosmFBzrpev8ONu/v1t0TcFDGaKh2V7RQdqtICvhPQfLz7Wx+iS3kedWT0 dKV2oiBKDSzS4XGJ5IeCq24PVlM7px/POHmwim8XFugZgw7l7Fi0H20epVXwA00U N5YhcJus77gng7Od4fFZ9xMztjT2cABO6cnZ3cxvWMgxFHDkO0chT8jZX0N/KzO2 BxWdfKonuodG99fgpwEhpOB1rncqKP1EBTIeRcfxA+xxmfWBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhrn8lZY42zWLkNCe94FrON09xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTYyNGIxMGQtYzI4Mi0z NjFkLWFkY2UtMzFhZjM1NjMxODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgGXBzJlmFyo4IqDWe1Ycb9kVz5V0pzm451m4O8nfvSLexaXUUGJcnJ i8yic39ULPM2XTf78evwHYnNTDwj/y9KPFx6REx4cy05X6ssU0TMinVXaUBCFohn OUqy05Q3aTgvxa9eJrh9WTmeGxmjbhRSQ19JST+8I8V7JInBA+nGRaewoRJD0UFN v1dj/AU7lImCO853ZTLGRWC+K3KYou5YUxh+gR1/6RvTXzgvq/LseXBT5YgzV0YC aca5Ba5S10S5LwG3RJ8mJR21WG+yI3A8e05zl2dym78HdTw89SXsjMuorcorhvd3 oYrswHnnc8hsJ0fmhFdXY1UVgj1bnvk= -----END CERTIFICATE-----Generated at Sat Sep 26 16:12:02 2026 by rpki-client