$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa File: 1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa (raw, json) Hash identifier: h5qnq1NHMHy3frvO0vuZpXsbpBg1HcFhHm1aO9vbpKQ= Subject key identifier: 87:72:C1:82:A3:9F:04:19:B0:41:D3:E7:1B:C3:0A:B3:13:97:B5:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD34BDC96C9F0AD2A4AF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.224.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:34:bd:c9:6c:9f:0a:d2:a4:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=217386c3-dc44-447b-afb7-dbaa11b8fab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b8:7f:cb:c1:73:a5:82:17:6c:75:98:d5:68: c6:7d:83:5c:57:09:d9:6c:23:b4:09:3e:86:41:34: b6:60:63:30:a2:2a:cb:3c:63:41:5f:91:87:b6:a9: d1:3f:68:c9:cb:51:64:33:8f:0a:c1:de:f9:de:6b: c5:23:1a:08:7c:fd:3d:b2:3b:f2:6d:dd:84:ec:13: 0e:28:9a:40:19:ed:c0:92:87:c4:0c:42:b0:49:61: 65:29:35:13:e6:62:18:98:76:34:dc:20:09:c3:3d: 2f:33:61:3e:88:f7:18:6d:19:97:8f:af:6d:d8:dd: 54:20:04:cc:90:4b:43:aa:67:61:c8:ca:d0:5d:10: 23:60:b0:2b:74:39:33:17:0b:c2:65:35:c0:a6:7d: 20:fb:62:3c:41:81:ca:44:f0:64:3d:37:9a:0a:64: 3a:08:30:d5:5b:c9:5b:97:7f:8b:82:a3:a8:f8:20: fa:89:0f:d3:30:10:45:73:dd:dd:91:1c:11:51:fc: 18:21:e3:a8:93:da:8b:33:9a:d9:6c:ea:27:80:fd: ca:f2:5a:e5:8c:f0:a6:01:ce:61:f6:f4:09:45:3a: 31:5b:b7:83:63:5b:d3:09:9b:51:28:7d:50:bf:88: 1e:1e:d6:3b:17:06:b3:70:89:7d:5d:56:1f:00:46: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:72:C1:82:A3:9F:04:19:B0:41:D3:E7:1B:C3:0A:B3:13:97:B5:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4b:79:b5:45:c9:c3:77:00:11:6d:d5:32:78:2d:6b:71:a9: 78:d7:fc:ba:96:f2:af:a5:5f:9b:a6:90:a8:53:0f:aa:57:d3: 22:32:07:99:91:e7:81:b0:0e:b0:f4:28:dd:e3:00:c7:2b:2e: ea:8f:f9:9d:e7:25:74:58:9b:b9:9d:ef:aa:1a:cd:f6:63:60: 62:82:6c:60:57:5b:3f:b2:0e:f4:7c:d1:57:27:70:4f:e3:d6: 2b:b5:08:22:46:2c:37:b4:39:fe:18:74:db:2f:6d:68:61:b7: a3:77:60:95:38:9a:a1:0f:19:e6:b5:a8:a7:51:13:2f:10:72: d2:03:b7:ef:43:18:93:c7:c4:b0:ca:b9:26:e6:cf:59:e1:4f: a8:59:ed:05:cd:de:f4:6a:c3:19:f6:c5:c1:e1:07:52:ce:26: 6b:b3:7d:c2:5e:1d:2e:6b:52:61:49:ab:d8:5f:f4:52:38:a1: dc:68:e8:42:3a:69:b9:b1:95:c8:f9:cf:25:71:86:f1:9d:8d: e0:7a:37:70:2b:2c:b5:3e:2d:53:c2:dd:6d:cb:22:3e:bb:60: 32:ec:7c:12:eb:f6:f2:c2:10:bd:b4:7c:e3:eb:46:53:4e:26: 7d:13:68:b1:4d:05:bb:8f:5a:e6:2f:ba:be:be:55:1e:9e:e2: db:18:44:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3TS9yWyfCtKkrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjE3Mzg2YzMtZGM0NC00NDdiLWFmYjctZGJhYTExYjhmYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7h/y8FzpYIXbHWY1WjGfYNcVwnZbCO0CT6G QTS2YGMwoirLPGNBX5GHtqnRP2jJy1FkM48Kwd753mvFIxoIfP09sjvybd2E7BMO KJpAGe3AkofEDEKwSWFlKTUT5mIYmHY03CAJwz0vM2E+iPcYbRmXj69t2N1UIATM kEtDqmdhyMrQXRAjYLArdDkzFwvCZTXApn0g+2I8QYHKRPBkPTeaCmQ6CDDVW8lb l3+LgqOo+CD6iQ/TMBBFc93dkRwRUfwYIeOok9qLM5rZbOongP3K8lrljPCmAc5h 9vQJRToxW7eDY1vTCZtRKH1Qv4geHtY7FwazcIl9XVYfAEb6/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdywYKjnwQZsEHT5xvDCrMTl7VqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFhODUzNzctM2U3ZS0z OTJmLWJmYWEtY2FkNjdjMmUyYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERLebVFycN3ABFt1TJ4LWtxqXjX/LqW8q+lX5umkKhTD6pX0yIyB5mR 54GwDrD0KN3jAMcrLuqP+Z3nJXRYm7md76oazfZjYGKCbGBXWz+yDvR80VcncE/j 1iu1CCJGLDe0Of4YdNsvbWhht6N3YJU4mqEPGea1qKdREy8QctIDt+9DGJPHxLDK uSbmz1nhT6hZ7QXN3vRqwxn2xcHhB1LOJmuzfcJeHS5rUmFJq9hf9FI4odxo6EI6 abmxlcj5zyVxhvGdjeB6N3ArLLU+LVPC3W3LIj67YDLsfBLr9vLCEL20fOPrRlNO Jn0TaLFNBbuPWuYvur6+VR6e4tsYREQ= -----END CERTIFICATE-----Generated at Thu Sep 24 14:43:50 2026 by rpki-client