$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2539e95f-4a01-39ee-acb3-561e42e12e19.roa File: 2539e95f-4a01-39ee-acb3-561e42e12e19.roa (raw, json) Hash identifier: DxP6hsOKlhrmJg1p+jW+lqgOGDibUsyDvMw9np3qI4Y= Subject key identifier: DD:A8:8F:3C:D9:3E:D5:20:21:80:08:56:C6:32:07:96:E8:EB:C2:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112852D94C3DFB153B83F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2539e95f-4a01-39ee-acb3-561e42e12e19.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:85:2d:94:c3:df:b1:53:b8:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=7ef88c8d-afb7-4e6d-8a97-f560897da20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:ef:f1:07:3c:fd:08:95:e8:ef:b3:9e:58: 7c:22:fa:36:f7:29:30:77:66:15:d9:8a:6d:a9:d8: 16:b7:09:08:2d:b3:87:07:f7:24:48:30:63:80:b9: bf:30:d9:81:55:04:37:65:33:d4:44:98:2f:18:d0: 57:72:d3:c0:5e:f0:98:6f:90:e7:22:03:bf:20:99: b3:6f:7d:67:f8:72:83:23:dd:1e:ec:6e:c6:d6:c1: cd:6f:c8:b3:e9:52:62:2a:39:7a:35:cd:3a:7e:d4: 08:b9:81:07:bf:13:53:50:9d:f9:45:18:b0:d3:f7: 32:55:8b:c4:61:30:1a:a5:aa:17:7e:95:84:e4:81: 09:3c:ad:1e:0e:77:70:29:4d:30:f7:57:47:fe:2b: e7:f7:ee:70:b8:62:34:a8:d0:14:06:a9:95:99:1d: 13:f6:b5:4f:db:21:a5:88:9a:e9:23:f4:2a:c9:12: d8:40:11:2b:d8:1c:51:40:27:d1:b5:ca:2d:38:ad: 42:77:04:43:e1:3d:e8:11:74:bf:8d:33:9e:e2:69: 89:c5:bb:72:45:ad:da:49:78:53:ff:f7:44:2f:bd: 73:3f:02:74:93:3a:9e:4a:13:c9:86:d6:63:3a:29: a5:96:21:e1:1d:24:0a:5b:7f:e4:97:58:0e:64:9b: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:8F:3C:D9:3E:D5:20:21:80:08:56:C6:32:07:96:E8:EB:C2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2539e95f-4a01-39ee-acb3-561e42e12e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:69:37:97:37:fa:46:35:7a:72:d9:0c:68:45:e1:2c:7c:67: b3:e8:0b:df:23:cb:27:18:8b:6b:f0:ee:26:ef:0c:93:40:ed: fd:35:41:e2:52:2e:87:72:31:33:d7:e8:55:84:c3:18:e6:25: d7:9c:fb:68:50:2d:5d:f1:86:2d:c3:5d:96:e2:cb:d5:47:ae: 45:06:53:93:78:ac:04:75:1d:40:33:ef:56:39:5d:9f:76:8d: e4:ce:0a:ad:b2:52:3b:49:f8:a1:1b:ed:e0:fe:12:05:ab:87: 3d:b3:f9:0b:0b:e9:d2:d3:68:65:bb:82:17:0d:fd:ff:8a:ab: 70:09:f8:b9:69:f9:d7:ca:1f:40:e2:1e:ef:2f:39:5d:60:b9: 70:37:18:fe:09:88:64:77:d1:ec:f8:8d:fe:c1:87:39:97:9e: 0b:61:2c:ab:9b:4b:fa:c4:ac:74:2a:49:ef:30:07:e1:b2:df: 55:4a:20:31:33:ed:86:47:ec:49:15:65:45:3d:70:b5:fa:99: 42:d8:05:fa:19:49:97:0b:ae:d6:00:26:18:fa:2b:2e:10:a7: ba:8d:e7:94:27:b9:18:2a:78:76:30:6e:6c:0e:7a:22:c6:6e: 97:a4:9c:5f:51:61:96:5e:39:db:b8:56:79:1e:19:78:4e:79: 1a:ad:52:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoUtlMPfsVO4PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk N2VmODhjOGQtYWZiNy00ZTZkLThhOTctZjU2MDg5N2RhMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhenv8Qc8/QiV6O+znlh8Ivo29ykwd2YV2Ypt qdgWtwkILbOHB/ckSDBjgLm/MNmBVQQ3ZTPURJgvGNBXctPAXvCYb5DnIgO/IJmz b31n+HKDI90e7G7G1sHNb8iz6VJiKjl6Nc06ftQIuYEHvxNTUJ35RRiw0/cyVYvE YTAapaoXfpWE5IEJPK0eDndwKU0w91dH/ivn9+5wuGI0qNAUBqmVmR0T9rVP2yGl iJrpI/QqyRLYQBEr2BxRQCfRtcotOK1CdwRD4T3oEXS/jTOe4mmJxbtyRa3aSXhT //dEL71zPwJ0kzqeShPJhtZjOimlliHhHSQKW3/kl1gOZJsySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2ojzzZPtUgIYAIVsYyB5bo68JVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUzOWU5NWYtNGEwMS0z OWVlLWFjYjMtNTYxZTQyZTEyZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlpN5c3+kY1enLZDGhF4Sx8Z7PoC98jyycYi2vw7ibvDJNA7f01QeJS LodyMTPX6FWEwxjmJdec+2hQLV3xhi3DXZbiy9VHrkUGU5N4rAR1HUAz71Y5XZ92 jeTOCq2yUjtJ+KEb7eD+EgWrhz2z+QsL6dLTaGW7ghcN/f+Kq3AJ+Llp+dfKH0Di Hu8vOV1guXA3GP4JiGR30ez4jf7BhzmXngthLKubS/rErHQqSe8wB+Gy31VKIDEz 7YZH7EkVZUU9cLX6mULYBfoZSZcLrtYAJhj6Ky4Qp7qN55QnuRgqeHYwbmwOeiLG bpeknF9RYZZeOdu4VnkeGXhOeRqtUo8= -----END CERTIFICATE-----Generated at Sat Sep 26 12:12:32 2026 by rpki-client