$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1794f444-0663-310c-9574-d9d56572be45.roa File: 1794f444-0663-310c-9574-d9d56572be45.roa (raw, json) Hash identifier: xCc3hq/m+4Um/7DxDCJblMbE/fZQhuf065b7qkCSl7E= Subject key identifier: 33:D6:DE:DE:51:3B:8C:2D:90:B6:23:13:B9:23:7D:D6:B6:7C:F5:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD48661CDD5116B3D81500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1794f444-0663-310c-9574-d9d56572be45.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.108.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:48:66:1c:dd:51:16:b3:d8:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=3b9d5876-e2cb-4da3-8e20-d7892860ccf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:36:c1:8e:61:73:de:1d:ef:17:76:a6:94: 31:d2:af:6c:cc:a7:d4:2f:56:f3:24:ec:1f:7f:83: 67:cc:aa:bf:de:59:33:c7:be:fc:7a:f6:b2:b6:e9: f4:3c:63:a4:1c:f7:79:e6:68:84:78:92:95:e6:f6: c1:2a:69:13:44:23:bc:eb:f8:84:a8:b5:51:6c:81: b4:fe:23:da:b3:b4:09:07:c2:19:29:55:0e:9e:72: 9d:b7:62:dc:ea:b6:c5:44:f3:f2:3e:38:d8:e7:12: e8:ba:8d:d3:66:86:91:fa:11:12:10:92:ed:a8:0b: 31:8c:02:27:b9:b8:46:bc:fd:d4:03:92:37:35:cd: 94:cc:6f:ea:8a:0e:46:80:22:9b:0a:e9:51:9e:e4: 28:52:9d:cf:49:16:b9:0a:7c:ce:a9:1b:62:e3:60: 83:c2:7e:e2:4c:8c:d9:2d:e9:df:8f:fe:8c:5e:78: f3:e1:a2:23:b7:36:d7:91:d4:11:0b:d7:73:b3:ec: 27:1a:a8:b9:ae:84:b8:94:cf:b1:7a:dd:07:a2:10: 5e:50:44:1f:6b:02:99:cf:66:c5:66:3f:e2:27:87: 99:9a:26:cd:99:aa:29:0c:6a:54:ab:9b:07:78:94: eb:8d:94:26:49:3e:70:c4:5c:29:36:9c:66:f8:82: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D6:DE:DE:51:3B:8C:2D:90:B6:23:13:B9:23:7D:D6:B6:7C:F5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1794f444-0663-310c-9574-d9d56572be45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3a:2e:c1:0c:39:19:c1:83:13:67:64:a0:f2:ab:13:a2:69: fd:ad:89:5e:4d:94:c4:87:45:51:66:ef:9f:da:55:8a:02:b0: e6:25:90:87:cb:e4:35:82:d6:0b:53:2b:8b:f8:83:cf:ec:eb: af:ed:af:f6:d0:0d:c3:92:5b:ac:1a:25:31:d7:c5:26:b4:3b: 75:de:6d:51:64:7d:03:6b:62:83:aa:5e:db:99:55:39:c5:7a: 3c:2d:d0:5d:70:79:eb:3b:72:64:c2:0d:b7:e1:06:b6:4c:5d: 82:2d:7c:79:88:27:aa:3b:66:12:f0:86:63:57:27:ce:9c:24: 0f:67:81:19:d9:8b:3f:d6:0a:43:5f:ad:82:9d:da:f2:23:eb: d7:53:f9:31:46:46:21:1e:66:ff:01:9d:97:db:9f:e2:b0:a2: ac:2d:3e:50:7c:f5:d2:7c:fc:0c:c9:bc:d3:22:56:95:d3:ce: 04:18:d2:5d:5d:29:3e:e4:a2:3d:8d:bc:e1:72:18:51:aa:b7: 97:c4:1a:1c:fe:05:3f:52:90:29:f2:24:77:3e:f6:45:95:9b: b8:e4:a5:0c:e9:97:12:a1:41:53:b3:20:d7:46:05:2d:90:de: 5f:24:a2:04:d3:2d:4b:c9:95:d5:e5:18:56:11:3a:29:1e:d1: 07:a3:62:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UhmHN1RFrPYFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2I5ZDU4NzYtZTJjYi00ZGEzLThlMjAtZDc4OTI4NjBjY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYQ2wY5hc94d7xd2ppQx0q9szKfUL1bzJOwf f4NnzKq/3lkzx778evaytun0PGOkHPd55miEeJKV5vbBKmkTRCO86/iEqLVRbIG0 /iPas7QJB8IZKVUOnnKdt2Lc6rbFRPPyPjjY5xLouo3TZoaR+hESEJLtqAsxjAIn ubhGvP3UA5I3Nc2UzG/qig5GgCKbCulRnuQoUp3PSRa5CnzOqRti42CDwn7iTIzZ Lenfj/6MXnjz4aIjtzbXkdQRC9dzs+wnGqi5roS4lM+xet0HohBeUEQfawKZz2bF Zj/iJ4eZmibNmaopDGpUq5sHeJTrjZQmST5wxFwpNpxm+IKLDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPW3t5RO4wtkLYjE7kjfda2fPWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTc5NGY0NDQtMDY2My0z MTBjLTk1NzQtZDlkNTY1NzJiZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGw+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU6LsEMORnBgxNnZKDyqxOiaf2tiV5NlMSHRVFm75/aVYoCsOYlkIfL 5DWC1gtTK4v4g8/s66/tr/bQDcOSW6waJTHXxSa0O3XebVFkfQNrYoOqXtuZVTnF ejwt0F1wees7cmTCDbfhBrZMXYItfHmIJ6o7ZhLwhmNXJ86cJA9ngRnZiz/WCkNf rYKd2vIj69dT+TFGRiEeZv8BnZfbn+KwoqwtPlB89dJ8/AzJvNMiVpXTzgQY0l1d KT7koj2NvOFyGFGqt5fEGhz+BT9SkCnyJHc+9kWVm7jkpQzplxKhQVOzINdGBS2Q 3l8kogTTLUvJldXlGFYROike0QejYgo= -----END CERTIFICATE-----Generated at Wed Sep 30 19:58:42 2026 by rpki-client