$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17cdd23d-afce-3621-9d90-c9afc8607dd4.roa File: 17cdd23d-afce-3621-9d90-c9afc8607dd4.roa (raw, json) Hash identifier: bg1CsjmHfdlxPclEM/xDUKJQWY8eGrBLgzoNJwVhBGc= Subject key identifier: BE:DB:98:62:84:87:1E:54:AC:27:82:7C:58:40:BF:72:64:A7:65:E3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41129EA19FA05ADB64575480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17cdd23d-afce-3621-9d90-c9afc8607dd4.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.109.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9e:a1:9f:a0:5a:db:64:57:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=9f76abef-c452-4eee-98e8-0ac911ee3a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:97:bf:91:6c:06:c3:5e:45:74:c0:48:f9: 84:3c:9b:b3:b5:56:8d:a2:98:37:fb:7b:3e:f9:a1: d6:96:da:64:ac:47:61:b0:d2:94:62:f1:b6:84:ea: c4:6a:0f:84:8a:8d:6f:8e:ee:3a:39:8f:7c:d5:66: c1:7c:f3:2d:f4:1d:f5:d1:71:d4:db:a9:78:d1:81: 4d:43:bb:1a:52:86:c9:c0:5f:0b:db:4d:2b:ed:bf: 2c:64:14:ec:20:cf:42:57:4d:7c:97:46:ff:f1:71: 90:c8:db:a8:ef:22:28:c1:d0:e6:6e:2d:43:1a:dc: 2a:97:d2:8d:a0:45:af:60:5c:ba:b6:24:1f:24:93: db:9d:18:ff:8b:80:55:d0:0c:db:7f:17:20:21:64: b8:7f:9c:08:b2:1b:e8:32:92:22:9b:4f:38:f3:74: f6:cb:93:84:d1:a5:a2:95:a3:23:4f:fb:72:ee:c9: 18:2b:13:fe:cf:e8:44:c5:89:be:b4:35:1b:93:8b: f5:6f:5f:24:75:9a:ef:0f:52:12:67:df:b8:15:a3: 6c:8d:26:08:59:61:97:7f:82:1b:70:9d:88:78:46: 7f:2d:a7:44:b2:9a:45:73:61:fd:8d:6e:ee:53:a7: 58:1b:cc:8b:6e:07:ab:61:b3:c6:3e:26:ea:25:81: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DB:98:62:84:87:1E:54:AC:27:82:7C:58:40:BF:72:64:A7:65:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17cdd23d-afce-3621-9d90-c9afc8607dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c2:1e:88:e7:c6:f1:4f:4f:4a:2e:c8:fa:3f:85:e9:fd:f6: 5c:3c:25:f5:58:69:6d:21:a0:24:a1:76:b6:60:4d:26:cc:9b: 79:e1:2b:b2:c3:93:72:89:db:27:f5:f9:30:20:8b:e4:ef:d1: 81:24:5d:e3:35:94:0d:d5:29:f9:e8:90:f3:28:d7:04:60:1f: 88:1c:e7:8f:92:78:96:f7:8f:8b:10:0b:2e:31:63:18:98:81: 63:e6:c7:ea:f5:18:77:67:c5:b4:38:48:00:90:3a:0a:51:5d: 48:2f:a9:54:4d:52:f7:63:16:e8:a1:25:59:ee:06:fd:99:f8: 5e:82:68:04:b2:70:10:72:93:e3:f6:ca:ee:94:de:fa:84:21: 08:ec:b5:dc:f6:e5:4a:df:8a:ea:ec:f0:3f:1b:e9:f2:8b:2d: 4c:ec:4a:26:7e:49:a7:72:0d:c9:c6:bc:88:9a:6d:bd:40:17: 88:f9:c0:01:9d:b5:e5:7a:aa:12:2f:cb:47:e9:36:e5:28:6d: 4b:e6:08:18:6a:e8:15:12:ea:11:8d:0b:7b:78:fe:d9:9d:19: c2:e5:5c:d9:6f:ac:cb:ed:5a:dd:b6:23:b6:18:b5:cc:fe:88: e7:b2:8c:6a:8a:da:69:18:49:5a:45:ba:67:ea:c2:2b:a1:ad: 2b:24:84:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEp6hn6Ba22RXVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk OWY3NmFiZWYtYzQ1Mi00ZWVlLTk4ZTgtMGFjOTExZWUzYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo+Xv5FsBsNeRXTASPmEPJuztVaNopg3+3s+ +aHWltpkrEdhsNKUYvG2hOrEag+Eio1vju46OY981WbBfPMt9B310XHU26l40YFN Q7saUobJwF8L200r7b8sZBTsIM9CV018l0b/8XGQyNuo7yIowdDmbi1DGtwql9KN oEWvYFy6tiQfJJPbnRj/i4BV0AzbfxcgIWS4f5wIshvoMpIim08483T2y5OE0aWi laMjT/ty7skYKxP+z+hExYm+tDUbk4v1b18kdZrvD1ISZ9+4FaNsjSYIWWGXf4Ib cJ2IeEZ/LadEsppFc2H9jW7uU6dYG8yLbgerYbPGPibqJYGawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7bmGKEhx5UrCeCfFhAv3Jkp2XjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTdjZGQyM2QtYWZjZS0z NjIxLTlkOTAtYzlhZmM4NjA3ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvCHojnxvFPT0ouyPo/hen99lw8JfVYaW0hoCShdrZgTSbMm3nhK7LD k3KJ2yf1+TAgi+Tv0YEkXeM1lA3VKfnokPMo1wRgH4gc54+SeJb3j4sQCy4xYxiY gWPmx+r1GHdnxbQ4SACQOgpRXUgvqVRNUvdjFuihJVnuBv2Z+F6CaASycBByk+P2 yu6U3vqEIQjstdz25Urfiurs8D8b6fKLLUzsSiZ+SadyDcnGvIiabb1AF4j5wAGd teV6qhIvy0fpNuUobUvmCBhq6BUS6hGNC3t4/tmdGcLlXNlvrMvtWt22I7YYtcz+ iOeyjGqK2mkYSVpFumfqwiuhrSskhFE= -----END CERTIFICATE-----Generated at Fri Oct 2 13:26:52 2026 by rpki-client