$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e61fc50-92ae-32a5-87db-36232c40b5fc.roa File: 1e61fc50-92ae-32a5-87db-36232c40b5fc.roa (raw, json) Hash identifier: m0i2JjRbY3FSoI95SnJyG7v6Z5V9EGG13c5ShBa1w2k= Subject key identifier: 1F:5D:3E:72:4B:DD:70:FC:5A:54:F6:9D:E9:E3:FF:CC:B5:D8:8B:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD7AC25EA40057F8D17280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e61fc50-92ae-32a5-87db-36232c40b5fc.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.96.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:7a:c2:5e:a4:00:57:f8:d1:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=3d0a3d58-fb58-4330-b2e0-87c045f06fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:79:6c:22:af:3f:29:d9:5f:76:cb:9a:ec: 29:c3:35:ff:74:95:6a:e4:7b:f2:51:8d:de:b4:d1: b3:99:3b:dc:44:08:e6:00:e1:4d:d3:3c:4f:4d:df: a6:dc:cb:db:9b:a9:20:6a:c4:1d:9a:d5:14:78:df: 85:68:c3:5b:21:37:a7:f0:c6:25:b1:16:3e:d2:01: 01:e1:49:c8:ce:d2:45:af:38:49:bb:ea:19:f6:20: e6:01:46:2f:68:73:f4:5a:98:6f:53:0f:d6:d9:ed: 12:60:56:0b:d3:9d:32:be:a3:ce:d5:6b:95:3d:a7: 5b:54:61:76:33:f2:69:5e:19:0b:45:64:2f:64:82: 3b:af:77:2f:a2:67:de:9a:25:fd:d1:1b:a9:e2:85: bf:5e:0e:5a:c5:fd:fd:d9:23:67:14:6f:c8:cc:64: b1:4b:76:9c:9a:fa:f5:40:6e:ff:89:a7:f9:7e:17: b2:08:0b:3c:38:af:de:f0:31:60:09:d1:24:74:61: b4:50:9a:3f:89:e0:58:27:7b:57:be:3a:c1:57:c1: 70:88:d2:4f:cb:38:cf:c2:a0:09:c7:0b:9a:a4:a3: fe:0d:01:e3:f1:30:fe:e0:4b:39:50:c3:1e:81:c3: 39:03:81:46:45:64:7d:b9:22:35:dc:12:b1:e9:32: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5D:3E:72:4B:DD:70:FC:5A:54:F6:9D:E9:E3:FF:CC:B5:D8:8B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e61fc50-92ae-32a5-87db-36232c40b5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e3:96:48:1e:8e:e3:47:38:d0:c4:fd:98:08:30:3d:a9:08: 09:92:33:83:f9:cb:9a:15:12:9f:e3:6f:95:60:18:9a:2c:9d: c9:ae:0a:f6:4b:ac:fb:02:c3:5c:7c:9b:0c:4c:46:a4:f7:11: dd:d8:2e:bc:08:67:61:72:6a:26:bc:85:5f:ef:99:2d:da:ae: a5:1f:18:13:04:aa:a8:2b:2a:9f:69:25:db:b1:dc:cb:34:db: a1:f9:80:d7:37:ef:23:36:7f:0f:9e:13:65:bd:36:05:dc:b1: 88:c9:bd:56:69:af:dc:02:6d:e5:c2:83:43:f9:e8:65:20:6d: d0:bb:9b:9c:09:7a:eb:cd:db:5c:12:e4:66:76:55:43:ff:61: 94:84:d9:63:e3:f8:b2:99:f8:91:48:b5:b2:cc:5e:40:80:e1: 1d:1b:aa:76:41:65:76:a3:0f:2f:20:1a:1f:b2:b8:0d:50:3a: 1f:11:53:4e:4f:d4:46:9b:ef:c6:6f:e8:78:0b:b0:36:fc:af: b7:9e:ff:6e:cb:e7:21:c8:ec:cb:94:63:4c:5e:e3:72:fe:be: 4d:85:b5:81:0b:04:90:f5:1a:bf:64:b7:32:27:bd:ed:6c:35: 28:73:3d:33:de:1d:de:a4:13:ae:eb:78:e7:89:73:6c:b5:3e: 69:d7:01:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3XrCXqQAV/jRcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2QwYTNkNTgtZmI1OC00MzMwLWIyZTAtODdjMDQ1ZjA2ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXl5bCKvPynZX3bLmuwpwzX/dJVq5HvyUY3e tNGzmTvcRAjmAOFN0zxPTd+m3Mvbm6kgasQdmtUUeN+FaMNbITen8MYlsRY+0gEB 4UnIztJFrzhJu+oZ9iDmAUYvaHP0WphvUw/W2e0SYFYL050yvqPO1WuVPadbVGF2 M/JpXhkLRWQvZII7r3cvomfemiX90Rup4oW/Xg5axf392SNnFG/IzGSxS3acmvr1 QG7/iaf5fheyCAs8OK/e8DFgCdEkdGG0UJo/ieBYJ3tXvjrBV8FwiNJPyzjPwqAJ xwuapKP+DQHj8TD+4Es5UMMegcM5A4FGRWR9uSI13BKx6TL5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9dPnJL3XD8WlT2nenj/8y12IsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWU2MWZjNTAtOTJhZS0z MmE1LTg3ZGItMzYyMzJjNDBiNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfjlkgejuNHONDE/ZgIMD2pCAmSM4P5y5oVEp/jb5VgGJosncmuCvZL rPsCw1x8mwxMRqT3Ed3YLrwIZ2Fyaia8hV/vmS3arqUfGBMEqqgrKp9pJdux3Ms0 26H5gNc37yM2fw+eE2W9NgXcsYjJvVZpr9wCbeXCg0P56GUgbdC7m5wJeuvN21wS 5GZ2VUP/YZSE2WPj+LKZ+JFItbLMXkCA4R0bqnZBZXajDy8gGh+yuA1QOh8RU05P 1Eab78Zv6HgLsDb8r7ee/27L5yHI7MuUY0xe43L+vk2FtYELBJD1Gr9ktzInve1s NShzPTPeHd6kE67reOeJc2y1PmnXAf8= -----END CERTIFICATE-----Generated at Thu Sep 24 00:32:18 2026 by rpki-client