$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa File: 24852c38-21d4-3340-ad31-087aec7f9bba.roa (raw, json) Hash identifier: sYiqBUXVaCczsDyJ1FQoQ2EMfFMBaIXCm1TIi8OIRAU= Subject key identifier: C9:D8:59:2B:EB:B8:70:51:C8:0C:33:2F:E9:AC:21:AA:E9:30:D9:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD5F5B0937055BAD81F300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.108.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:5f:5b:09:37:05:5b:ad:81:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=ee95317e-9ffb-4e2f-9c34-5bec5e6708aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:4a:5b:18:86:5c:25:ef:29:28:4c:00:f9: a6:1e:79:95:3a:2f:b4:96:7a:84:52:ba:3b:91:f7: b6:a7:86:31:6e:31:99:77:9d:2a:ee:9b:4f:a7:0c: 2f:c6:f4:a3:35:38:f4:3e:10:f0:a0:1c:cb:76:a8: aa:a9:6f:6c:2b:e0:e8:83:b0:f2:50:39:16:df:13: 3f:51:c7:ba:24:54:ed:85:b1:3a:6f:02:54:a2:df: a4:7f:41:9a:10:53:f4:f6:13:93:c0:28:c4:4e:9a: 9c:2b:e5:0f:6e:b2:28:17:1d:51:cf:52:cd:95:93: fc:26:cd:7b:80:31:07:80:7d:28:ee:21:cf:1a:33: ba:17:55:13:1e:89:bf:4f:69:18:f6:42:ff:85:a9: 60:b5:e0:2e:99:e1:34:75:c9:84:98:bc:d6:48:de: 0a:9e:5e:9e:50:75:91:09:f6:45:1f:39:b8:ef:70: 31:5b:03:1c:e9:fe:a2:97:43:39:05:d2:4a:f5:e2: 69:d8:80:23:c8:6e:f6:a8:b8:40:b1:6b:be:14:6c: a0:bc:21:16:4a:8f:5b:c4:8e:15:f6:30:e0:0d:30: 4a:3a:70:7b:20:91:76:77:57:75:53:2c:86:c1:08: 0d:c4:1e:cc:01:b2:2e:7f:47:78:a6:67:98:d8:ad: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D8:59:2B:EB:B8:70:51:C8:0C:33:2F:E9:AC:21:AA:E9:30:D9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:04:7e:83:89:73:ef:c3:0d:b9:02:08:90:c9:0c:45:d6:fc: 2a:29:2c:cd:42:a3:8d:ad:55:fe:23:6b:59:19:b7:6b:56:02: cd:9d:6f:5b:41:85:b9:72:81:ed:5d:3f:65:99:eb:a6:ad:b4: 70:28:ba:8d:52:49:82:99:82:fb:65:6e:65:14:ab:76:52:f8: 32:aa:f7:b3:48:55:a8:37:81:b3:44:41:d0:11:0e:77:30:c6: 6b:7f:65:52:a5:83:2a:bb:5e:0c:c5:27:6c:27:a4:0a:db:87: 7e:5b:77:b0:1f:05:09:29:f5:33:4a:63:28:8e:26:98:0e:96: e1:12:b4:54:e3:63:be:1b:45:5b:29:cf:5a:3d:1d:82:e7:4e: fe:46:49:39:8f:6b:0c:b0:98:2e:89:a5:a3:23:fe:1d:7e:ad: a6:53:66:74:ae:11:69:51:6d:6c:c1:ca:bd:91:d0:cf:b2:2c: 50:4c:74:a7:44:89:21:97:8a:cc:29:28:e0:19:28:0a:25:80: 20:e7:6f:ba:f4:1d:ec:51:df:e7:de:1e:da:e1:19:22:39:13: 6d:b0:aa:46:c7:c1:a3:8e:d4:cc:88:54:30:5b:e7:a2:86:4e: ee:06:26:a1:17:67:24:e8:e4:59:71:d4:36:e3:d4:25:f1:ec: fa:50:18:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3V9bCTcFW62B8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZWU5NTMxN2UtOWZmYi00ZTJmLTljMzQtNWJlYzVlNjcwOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPVKWxiGXCXvKShMAPmmHnmVOi+0lnqEUro7 kfe2p4YxbjGZd50q7ptPpwwvxvSjNTj0PhDwoBzLdqiqqW9sK+Dog7DyUDkW3xM/ Uce6JFTthbE6bwJUot+kf0GaEFP09hOTwCjETpqcK+UPbrIoFx1Rz1LNlZP8Js17 gDEHgH0o7iHPGjO6F1UTHom/T2kY9kL/halgteAumeE0dcmEmLzWSN4Knl6eUHWR CfZFHzm473AxWwMc6f6il0M5BdJK9eJp2IAjyG72qLhAsWu+FGygvCEWSo9bxI4V 9jDgDTBKOnB7IJF2d1d1UyyGwQgNxB7MAbIuf0d4pmeY2K37vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnYWSvruHBRyAwzL+msIarpMNmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQ4NTJjMzgtMjFkNC0z MzQwLWFkMzEtMDg3YWVjN2Y5YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8EfoOJc+/DDbkCCJDJDEXW/CopLM1Co42tVf4ja1kZt2tWAs2db1tB hblyge1dP2WZ66attHAouo1SSYKZgvtlbmUUq3ZS+DKq97NIVag3gbNEQdARDncw xmt/ZVKlgyq7XgzFJ2wnpArbh35bd7AfBQkp9TNKYyiOJpgOluEStFTjY74bRVsp z1o9HYLnTv5GSTmPawywmC6JpaMj/h1+raZTZnSuEWlRbWzByr2R0M+yLFBMdKdE iSGXiswpKOAZKAolgCDnb7r0HexR3+feHtrhGSI5E22wqkbHwaOO1MyIVDBb56KG Tu4GJqEXZyTo5Flx1Dbj1CXx7PpQGBY= -----END CERTIFICATE-----Generated at Fri Sep 25 04:30:09 2026 by rpki-client