$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2129bb36-47a5-33cc-840f-6160dc0b9372.roa File: 2129bb36-47a5-33cc-840f-6160dc0b9372.roa (raw, json) Hash identifier: LZG34ziho62abI7YJlXdyCknndinBYYL4espTCOE5Mw= Subject key identifier: 89:80:BD:3A:4A:43:57:7E:69:CB:07:18:14:24:60:4A:F7:B3:93:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112AD75F58CF26D62122580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2129bb36-47a5-33cc-840f-6160dc0b9372.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:ad:75:f5:8c:f2:6d:62:12:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=fe317be4-18d3-46de-9b4e-ee3b96858d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:fb:ae:c2:ea:ed:01:8e:60:4f:13:1c:96: 20:a2:70:24:92:e2:17:e8:d5:65:74:26:b4:e4:c4: c4:80:22:12:22:29:a5:8c:6e:99:42:e9:0e:bf:21: 6e:ca:9e:14:64:16:1f:fc:9e:63:67:6c:22:10:ae: f5:eb:da:6f:c2:1a:ce:b3:68:73:db:e9:1a:8a:1e: e9:eb:fe:93:98:f5:ae:9a:c1:be:b2:67:15:8d:d6: c3:6a:62:4b:2f:4d:33:a4:57:f7:96:e0:ac:b6:0c: d6:40:08:e7:c1:db:fa:86:cc:6a:7c:66:c5:ad:db: cc:7e:54:1c:50:6d:4a:ba:6a:1d:09:b3:07:e9:bc: b9:1a:8a:0b:70:76:a4:75:12:11:c6:13:2c:47:43: fc:48:8b:ab:23:f0:bd:25:12:c3:55:fe:04:45:a2: 81:1a:37:5b:68:46:e8:e1:66:7e:ac:3f:dc:17:53: f0:18:ab:a9:f3:25:2b:0f:a9:1e:4b:f1:33:a0:50: 0b:95:9c:90:a0:d5:e9:71:fe:fd:67:e6:bd:96:3f: b8:87:31:2c:d7:cd:ee:c3:75:e3:44:89:b6:2c:d0: d4:1c:38:df:33:7c:0a:59:9d:fd:72:81:ca:1f:8e: f2:45:88:5d:39:8a:ea:7b:e1:43:7a:75:83:0b:57: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:80:BD:3A:4A:43:57:7E:69:CB:07:18:14:24:60:4A:F7:B3:93:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2129bb36-47a5-33cc-840f-6160dc0b9372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1d:5a:58:e5:d6:63:f4:a2:e6:6d:77:21:36:ca:bc:f3:20: de:ce:c7:73:ef:f0:05:88:9c:d1:9d:60:88:e4:a7:af:9c:b9: 86:96:40:58:f8:45:ca:52:68:62:a5:35:d8:b0:e8:93:79:5f: b6:8b:1c:7a:5d:b6:19:9e:cc:a9:87:10:34:12:43:35:56:b9: ea:de:23:e3:f3:4a:99:4b:2a:fa:e5:4f:44:71:5c:38:bb:f3: 82:7c:05:f0:33:65:57:af:b5:c8:3f:1a:82:46:f7:bd:f7:61: ad:8c:13:ff:44:9c:52:c7:c8:7c:83:2f:21:84:d0:87:d8:24: 57:31:c3:63:7e:95:88:14:16:27:30:40:11:8a:22:e2:a2:40: 5f:06:19:6c:52:e7:cf:d1:16:84:88:b7:ef:6a:d5:b4:de:61: 05:57:70:e5:7c:37:58:14:03:21:de:af:79:39:db:bc:01:8a: c7:4c:13:75:0f:57:c0:dd:fa:bf:cb:8d:01:b0:61:2d:d1:3c: 42:cc:dc:fb:3d:5f:64:a3:e8:aa:d9:00:a8:88:46:20:4a:0b: 01:5f:9b:b8:b8:ea:17:ac:27:eb:dc:46:c0:89:60:d7:3d:9f: 26:bb:46:47:62:8e:65:8b:64:44:60:4f:33:54:47:81:4d:c4: b7:f8:38:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEq119YzybWISJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZmUzMTdiZTQtMThkMy00NmRlLTliNGUtZWUzYjk2ODU4ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFz7rsLq7QGOYE8THJYgonAkkuIX6NVldCa0 5MTEgCISIimljG6ZQukOvyFuyp4UZBYf/J5jZ2wiEK7169pvwhrOs2hz2+kaih7p 6/6TmPWumsG+smcVjdbDamJLL00zpFf3luCstgzWQAjnwdv6hsxqfGbFrdvMflQc UG1KumodCbMH6by5GooLcHakdRIRxhMsR0P8SIurI/C9JRLDVf4ERaKBGjdbaEbo 4WZ+rD/cF1PwGKup8yUrD6keS/EzoFALlZyQoNXpcf79Z+a9lj+4hzEs183uw3Xj RIm2LNDUHDjfM3wKWZ39coHKH47yRYhdOYrqe+FDenWDC1eUIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImAvTpKQ1d+acsHGBQkYEr3s5OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEyOWJiMzYtNDdhNS0z M2NjLTg0MGYtNjE2MGRjMGI5MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwdWljl1mP0ouZtdyE2yrzzIN7Ox3Pv8AWInNGdYIjkp6+cuYaWQFj4 RcpSaGKlNdiw6JN5X7aLHHpdthmezKmHEDQSQzVWuereI+PzSplLKvrlT0RxXDi7 84J8BfAzZVevtcg/GoJG9733Ya2ME/9EnFLHyHyDLyGE0IfYJFcxw2N+lYgUFicw QBGKIuKiQF8GGWxS58/RFoSIt+9q1bTeYQVXcOV8N1gUAyHer3k527wBisdME3UP V8Dd+r/LjQGwYS3RPELM3Ps9X2Sj6KrZAKiIRiBKCwFfm7i46hesJ+vcRsCJYNc9 nya7RkdijmWLZERgTzNUR4FNxLf4OAA= -----END CERTIFICATE-----Generated at Thu Sep 24 06:45:39 2026 by rpki-client