$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/199440f8-b422-3e71-9a03-28c198715e8d.roa File: 199440f8-b422-3e71-9a03-28c198715e8d.roa (raw, json) Hash identifier: hO9l7dvw0LjvnPEzrfavJXtg2UcCiS1GpMcnrNkHcGw= Subject key identifier: C4:E3:D6:12:83:5E:8E:F8:C5:35:50:FF:D7:69:F6:0D:5F:93:F5:33 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8CCFB83B7C17075CE980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/199440f8-b422-3e71-9a03-28c198715e8d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8c:cf:b8:3b:7c:17:07:5c:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=2e7fddd9-ea29-4e74-b567-c1754c11ce10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:a9:bf:40:ca:04:a0:42:a1:bd:7c:04:e8: 9b:9a:48:fb:9b:b0:17:f8:d5:f7:f7:d1:91:ec:32: ff:9e:3a:4b:9e:43:8f:62:28:6c:96:c5:7c:cc:03: a4:25:22:43:08:2b:a2:ca:70:3d:31:4e:c7:cf:3a: 60:23:c3:9e:67:3e:f1:9d:1a:cf:56:fe:34:fd:b9: cd:9a:d1:6d:97:18:10:cd:87:5c:ec:db:ac:23:86: ce:25:16:fe:e0:8a:bf:6a:4f:e9:da:b5:84:08:1e: a1:b5:f3:b9:72:b4:ed:bf:4c:42:0b:e0:f4:0e:b9: 63:81:1a:af:fe:0b:0f:fe:31:92:bd:d9:67:3a:f1: ae:06:b2:53:e6:15:fd:77:54:4b:19:77:45:51:23: 14:e0:bd:3d:a5:9c:cc:a0:7b:fd:c2:cb:7b:ba:3e: 57:47:7f:e5:67:3f:99:d4:09:98:fd:98:8c:2a:9a: 17:d0:81:57:28:df:3d:2c:c7:8a:b1:ba:07:75:05: 36:35:3f:f0:99:17:2e:7e:cd:c8:68:88:77:85:7a: 27:9f:68:06:ea:6c:08:57:d3:0a:2e:e2:d3:cb:e7: 91:3d:ef:d4:5c:0f:04:f9:58:56:78:dd:d1:5e:39: e5:db:3d:63:0f:9c:9f:f0:0b:72:3e:9d:81:04:97: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E3:D6:12:83:5E:8E:F8:C5:35:50:FF:D7:69:F6:0D:5F:93:F5:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/199440f8-b422-3e71-9a03-28c198715e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:13:a6:6e:d6:5e:03:cf:58:6f:a3:c1:cf:f6:f3:82:73:93: 61:c1:e2:5f:e4:77:a6:b0:8e:b7:59:90:f2:df:f6:8d:5d:f2: 52:d9:63:36:26:5f:0b:7f:18:f7:ab:b2:01:fe:76:52:87:0d: 58:82:b2:c3:cb:b3:d1:8d:1d:02:42:5c:a2:23:66:1e:cc:a7: d6:b2:15:8d:a0:16:d6:5f:06:ba:6b:79:71:8e:2f:bc:a3:cb: dc:d7:d0:36:d6:2a:6c:4e:00:ee:e8:3f:8c:59:83:e7:ba:be: 99:07:d9:cd:24:7d:bb:aa:0b:12:31:bd:23:b7:9f:30:0b:cf: 0c:c1:82:19:82:28:89:4c:76:67:77:b6:c6:b6:a3:27:79:f7: cf:45:ff:3d:11:2b:7a:d4:46:a6:8e:1c:c2:30:c3:81:30:f8: 6f:36:d0:72:ff:94:d1:d0:00:2c:50:9a:9c:88:e1:13:e9:00: b2:af:b5:72:8a:f2:0f:b2:74:4f:d8:7e:63:f7:09:fd:4e:0a: 7d:32:b2:ad:0a:5e:a3:5b:f1:af:de:e9:66:b9:3f:97:1c:d4: 9e:2e:f0:a0:b6:22:2f:55:16:bc:1b:4e:04:4c:63:0d:bd:53: 51:b2:3c:ef:62:0a:1d:5a:c3:1c:28:0f:e1:7f:fa:fd:0e:fd: 78:31:e8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYzPuDt8Fwdc6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MmU3ZmRkZDktZWEyOS00ZTc0LWI1NjctYzE3NTRjMTFjZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoapv0DKBKBCob18BOibmkj7m7AX+NX399GR 7DL/njpLnkOPYihslsV8zAOkJSJDCCuiynA9MU7HzzpgI8OeZz7xnRrPVv40/bnN mtFtlxgQzYdc7NusI4bOJRb+4Iq/ak/p2rWECB6htfO5crTtv0xCC+D0DrljgRqv /gsP/jGSvdlnOvGuBrJT5hX9d1RLGXdFUSMU4L09pZzMoHv9wst7uj5XR3/lZz+Z 1AmY/ZiMKpoX0IFXKN89LMeKsboHdQU2NT/wmRcufs3IaIh3hXonn2gG6mwIV9MK LuLTy+eRPe/UXA8E+VhWeN3RXjnl2z1jD5yf8AtyPp2BBJffCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTj1hKDXo74xTVQ/9dp9g1fk/UzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTk5NDQwZjgtYjQyMi0z ZTcxLTlhMDMtMjhjMTk4NzE1ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsTpm7WXgPPWG+jwc/284Jzk2HB4l/kd6awjrdZkPLf9o1d8lLZYzYm Xwt/GPersgH+dlKHDViCssPLs9GNHQJCXKIjZh7Mp9ayFY2gFtZfBrpreXGOL7yj y9zX0DbWKmxOAO7oP4xZg+e6vpkH2c0kfbuqCxIxvSO3nzALzwzBghmCKIlMdmd3 tsa2oyd5989F/z0RK3rURqaOHMIww4Ew+G820HL/lNHQACxQmpyI4RPpALKvtXKK 8g+ydE/YfmP3Cf1OCn0ysq0KXqNb8a/e6Wa5P5cc1J4u8KC2Ii9VFrwbTgRMYw29 U1GyPO9iCh1awxwoD+F/+v0O/Xgx6KE= -----END CERTIFICATE-----Generated at Wed Sep 23 05:17:45 2026 by rpki-client