$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1acdfa59-e7d1-31e5-8075-92e5098d6e85.roa File: 1acdfa59-e7d1-31e5-8075-92e5098d6e85.roa (raw, json) Hash identifier: Xegp5gMcZ+C4CT9C8EkgQe/tn47HT605PUPh5MGZH/g= Subject key identifier: 24:AD:94:B5:79:B0:55:07:2D:31:CA:C3:36:83:29:6E:6C:40:C2:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112D4F5387F7AE765495000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1acdfa59-e7d1-31e5-8075-92e5098d6e85.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:d4:f5:38:7f:7a:e7:65:49:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=73847bcc-4770-49ed-b958-01ed20b79294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:61:d0:48:38:03:db:c7:e1:69:5b:94:72: be:79:70:3d:6f:f3:f1:2b:a0:04:3d:77:8c:a5:2f: 29:bf:53:37:c2:8a:9b:48:a1:99:82:6a:c4:a3:03: c9:0b:f3:a6:51:b9:c2:3b:29:a2:3d:e9:f6:1a:62: 1b:d9:f5:15:cb:0f:0b:1f:5e:14:53:97:d7:8a:33: 72:b3:a2:76:d6:f0:bb:b1:51:9a:71:ed:ea:24:d4: eb:92:fe:bc:eb:2a:a6:a3:fc:0d:f7:6b:c9:76:03: 90:40:64:32:0f:3f:1f:b5:3f:f5:2d:03:ee:76:83: 09:8b:71:95:a4:25:f6:7c:83:c3:6b:4c:b2:b6:77: ac:2c:86:8c:db:e2:50:5e:1c:59:22:ca:73:67:cf: 3b:b5:a6:7e:c9:60:5a:ae:5d:7a:1d:07:cf:0a:bf: 1f:75:51:75:bf:9c:16:d4:d8:d2:49:c1:5b:3e:d8: d6:9b:af:8c:43:83:67:e7:84:88:23:03:f6:58:25: fb:55:a0:54:ea:d6:d5:96:ea:d8:95:27:69:e9:d3: 90:04:00:cf:6d:77:5d:20:64:63:49:13:f5:ec:90: 8c:d1:0e:bf:34:50:8c:ad:16:49:ed:5d:58:10:81: 56:21:be:c6:d8:81:3d:29:c2:e8:a4:fa:dc:b4:6d: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:94:B5:79:B0:55:07:2D:31:CA:C3:36:83:29:6E:6C:40:C2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1acdfa59-e7d1-31e5-8075-92e5098d6e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d3:38:07:1a:f1:db:a5:07:f7:15:66:e4:15:ec:bb:5c:31: f2:73:8c:19:64:93:8e:43:f3:33:d0:d4:02:8e:fc:ad:8c:e3: eb:21:97:05:cf:5e:98:e2:ef:d0:e9:fa:04:60:56:3b:0a:a0: 79:f5:64:49:07:a8:a9:51:9f:ea:26:cb:4a:da:f4:8a:82:53: 07:16:4a:7b:0e:36:ba:09:bf:8f:08:14:87:5a:d5:2b:3c:35: 1f:96:55:ed:76:3e:a0:fb:6d:af:75:c5:f0:8e:67:c2:6e:1d: 6d:17:57:8d:c3:ac:79:ec:3d:1b:83:62:f6:c6:5c:b9:f8:35: 0b:ff:92:95:42:fe:cc:d9:2b:e3:eb:96:06:fb:b3:b6:ff:70: f8:e9:92:a0:a3:e4:38:c2:94:03:bb:2e:62:ad:32:4f:55:eb: fb:70:70:e7:4e:6f:8e:20:c5:46:c6:c4:43:06:34:86:4f:ae: dc:80:d3:e2:2a:8a:1e:20:21:82:c1:1a:1b:23:9e:1e:35:a1: 99:b7:39:b1:16:a7:2b:4e:3c:12:18:96:ab:68:15:6f:77:1b: 4e:9b:39:fe:0e:34:30:df:55:d8:e9:94:63:ec:0d:3f:b7:12: b2:17:ae:f1:4f:ef:1a:93:a8:98:16:d3:1f:d7:c4:13:10:9d: ad:38:7c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEtT1OH9652VJUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzM4NDdiY2MtNDc3MC00OWVkLWI5NTgtMDFlZDIwYjc5Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSJh0Eg4A9vH4WlblHK+eXA9b/PxK6AEPXeM pS8pv1M3woqbSKGZgmrEowPJC/OmUbnCOymiPen2GmIb2fUVyw8LH14UU5fXijNy s6J21vC7sVGace3qJNTrkv686yqmo/wN92vJdgOQQGQyDz8ftT/1LQPudoMJi3GV pCX2fIPDa0yytnesLIaM2+JQXhxZIspzZ887taZ+yWBarl16HQfPCr8fdVF1v5wW 1NjSScFbPtjWm6+MQ4Nn54SIIwP2WCX7VaBU6tbVlurYlSdp6dOQBADPbXddIGRj SRP17JCM0Q6/NFCMrRZJ7V1YEIFWIb7G2IE9KcLopPrctG1dNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCStlLV5sFUHLTHKwzaDKW5sQMJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFjZGZhNTktZTdkMS0z MWU1LTgwNzUtOTJlNTA5OGQ2ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7TOAca8dulB/cVZuQV7LtcMfJzjBlkk45D8zPQ1AKO/K2M4+shlwXP Xpji79Dp+gRgVjsKoHn1ZEkHqKlRn+omy0ra9IqCUwcWSnsONroJv48IFIda1Ss8 NR+WVe12PqD7ba91xfCOZ8JuHW0XV43DrHnsPRuDYvbGXLn4NQv/kpVC/szZK+Pr lgb7s7b/cPjpkqCj5DjClAO7LmKtMk9V6/twcOdOb44gxUbGxEMGNIZPrtyA0+Iq ih4gIYLBGhsjnh41oZm3ObEWpytOPBIYlqtoFW93G06bOf4ONDDfVdjplGPsDT+3 ErIXrvFP7xqTqJgW0x/XxBMQna04fFQ= -----END CERTIFICATE-----Generated at Wed Sep 23 01:59:11 2026 by rpki-client