$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c9d39b-0536-367b-9736-7ca3823bcc25.roa File: 25c9d39b-0536-367b-9736-7ca3823bcc25.roa (raw, json) Hash identifier: +hcJGrvCEyPXZBYx8g9huQl7FL5iYf49jGsumwU7zIc= Subject key identifier: BC:D6:03:78:08:66:FB:AC:64:E3:E0:C0:4D:4F:AC:6E:42:1B:86:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD850555DC81AEDFF06000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c9d39b-0536-367b-9736-7ca3823bcc25.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:85:05:55:dc:81:ae:df:f0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=014e2dd6-77b7-4282-996a-fa1612f3afec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:c5:eb:a1:c1:6b:78:e6:cf:c0:75:94:3b: c4:3c:75:22:17:0f:86:6c:2e:33:90:b1:cd:df:27: dd:16:00:2e:02:7b:4e:42:4d:a8:cb:08:f3:99:8e: 08:a6:ba:78:60:3e:18:79:bf:de:0d:35:b4:fd:0a: 5b:ca:41:ec:38:59:4a:ad:45:f7:b8:01:e7:83:b4: 99:08:62:c0:ba:46:15:6a:d2:01:5d:43:4f:f2:74: 60:7f:a4:ca:d9:c3:1b:a5:2a:85:f7:9a:39:e3:28: 0c:00:0e:78:16:31:f8:2c:26:f8:1e:49:50:50:8f: d0:8e:a5:41:aa:4e:01:14:98:2d:98:1c:36:95:67: 8f:55:c2:c1:ad:d0:c4:bd:8b:24:ec:36:ff:73:aa: 02:c6:dd:61:61:2a:a3:68:75:eb:08:a6:32:5e:48: ef:6e:a4:96:c2:cf:15:15:ad:2b:d1:53:84:6d:f2: 47:2b:bb:08:a0:7e:fd:c4:3d:ab:6b:18:33:e4:ba: d3:34:02:89:38:20:fd:4a:0f:f7:c3:7f:95:1d:a8: 2d:67:ad:a6:70:94:2d:ed:96:37:c1:95:df:6e:30: c3:14:83:c4:82:3f:d8:9b:e6:7f:40:c8:0d:ef:35: 57:da:6b:36:ce:80:46:45:dd:e4:14:2a:c2:e9:1e: 6d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D6:03:78:08:66:FB:AC:64:E3:E0:C0:4D:4F:AC:6E:42:1B:86:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c9d39b-0536-367b-9736-7ca3823bcc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ee:7c:e4:a6:f7:28:8c:38:a8:86:40:40:6f:c2:08:5f:3e: 88:45:ad:81:08:f7:70:70:9c:f3:9e:d9:1a:82:fd:2f:0f:54: e0:1b:04:5f:19:a3:b9:0c:cc:7b:9c:11:2a:88:63:97:3c:06: 1a:20:91:67:af:62:f1:cf:6f:30:88:80:f8:41:7a:f5:31:04: 30:2c:97:8b:94:19:2d:a7:7e:23:74:c2:c0:38:bb:1a:69:39: f8:8b:b7:76:eb:72:84:4a:8c:6a:c4:62:f4:c6:df:89:09:f4: c8:89:2d:87:c6:7e:bf:fb:b7:50:33:42:6d:02:b8:44:05:ed: 92:f3:e6:06:d3:9c:f9:8b:47:90:cb:c7:ef:5b:79:59:21:4d: 78:92:c4:03:01:79:c6:9e:e5:dc:23:1e:67:59:72:86:63:51: e3:38:88:dc:e9:15:49:c6:30:1a:82:57:92:24:fd:30:ea:b8: 6f:7d:06:a1:af:05:e7:1c:c3:be:29:ab:cb:7f:a3:81:a9:f9: 9b:61:0d:71:5f:fe:eb:07:01:92:5a:cd:44:bc:7d:39:29:a5: c4:86:76:17:f6:dc:41:45:9a:01:23:be:ac:26:d1:08:71:10: f2:f8:0e:52:04:42:61:6e:9f:82:f5:57:f3:e6:eb:80:35:26: eb:a2:b5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYUFVdyBrt/wYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDE0ZTJkZDYtNzdiNy00MjgyLTk5NmEtZmExNjEyZjNhZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs3F66HBa3jmz8B1lDvEPHUiFw+GbC4zkLHN 3yfdFgAuAntOQk2oywjzmY4Iprp4YD4Yeb/eDTW0/QpbykHsOFlKrUX3uAHng7SZ CGLAukYVatIBXUNP8nRgf6TK2cMbpSqF95o54ygMAA54FjH4LCb4HklQUI/QjqVB qk4BFJgtmBw2lWePVcLBrdDEvYsk7Db/c6oCxt1hYSqjaHXrCKYyXkjvbqSWws8V Fa0r0VOEbfJHK7sIoH79xD2raxgz5LrTNAKJOCD9Sg/3w3+VHagtZ62mcJQt7ZY3 wZXfbjDDFIPEgj/Ym+Z/QMgN7zVX2ms2zoBGRd3kFCrC6R5t0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzWA3gIZvusZOPgwE1PrG5CG4biMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVjOWQzOWItMDUzNi0z NjdiLTk3MzYtN2NhMzgyM2JjYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzufOSm9yiMOKiGQEBvwghfPohFrYEI93BwnPOe2RqC/S8PVOAbBF8Z o7kMzHucESqIY5c8BhogkWevYvHPbzCIgPhBevUxBDAsl4uUGS2nfiN0wsA4uxpp OfiLt3brcoRKjGrEYvTG34kJ9MiJLYfGfr/7t1AzQm0CuEQF7ZLz5gbTnPmLR5DL x+9beVkhTXiSxAMBecae5dwjHmdZcoZjUeM4iNzpFUnGMBqCV5Ik/TDquG99BqGv Beccw74pq8t/o4Gp+ZthDXFf/usHAZJazUS8fTkppcSGdhf23EFFmgEjvqwm0Qhx EPL4DlIEQmFun4L1V/Pm64A1JuuitZU= -----END CERTIFICATE-----Generated at Wed Sep 23 21:34:42 2026 by rpki-client