$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b72a825-99aa-3767-9147-beccdc7570c0.roa File: 2b72a825-99aa-3767-9147-beccdc7570c0.roa (raw, json) Hash identifier: bKUYAgBjyHflewJ4d2D+wCiiURQIRHM5iTzQg2+3v7U= Subject key identifier: C7:9A:FF:22:56:06:5D:BC:1A:B4:E1:93:7B:AF:65:FF:73:CE:D2:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD6C90A8536C6AEB423100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b72a825-99aa-3767-9147-beccdc7570c0.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.224.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:6c:90:a8:53:6c:6a:eb:42:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=366d5709-e21e-4405-96ea-9d9295973a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b9:9b:14:44:1b:66:bb:b6:ab:20:78:0c:86: 5d:99:f1:ef:7b:43:b4:12:3b:72:4f:ee:5c:8e:28: 61:3a:d0:23:70:e3:dd:f5:97:f6:56:18:7d:83:6a: 6d:df:28:b5:b3:d5:3e:20:b9:58:9e:14:8e:2f:ab: 0e:08:59:2d:34:04:93:e7:ac:65:fa:e7:6b:36:41: df:68:63:a9:18:79:e3:4a:3b:28:54:bf:14:89:d8: e1:48:ef:1e:e3:b1:94:4b:98:ef:e3:e5:b6:1b:29: f1:b1:7a:05:a2:a0:da:90:e6:38:98:ed:f7:46:5f: eb:f7:ca:73:93:82:24:a2:91:de:5f:ca:8c:57:db: 72:c8:fd:3c:b9:cc:8c:b3:20:2f:39:24:ab:11:6f: 48:a5:5b:ef:2e:ee:f0:8a:c5:e6:2a:73:ae:0b:64: 02:a9:1a:05:70:3f:85:07:0c:9a:14:51:79:81:2c: 1a:e7:fa:5b:bb:41:a5:48:f8:5c:59:ce:e7:3f:85: 58:d0:8e:12:26:f7:4d:d2:4a:83:60:25:ea:14:2e: c6:fa:c4:40:b8:76:6e:9d:53:c1:7e:87:6f:e7:59: 91:16:e9:14:ba:df:54:5d:28:9e:20:32:05:22:bb: 43:27:3e:d3:31:f0:53:0a:6b:3c:ce:e6:70:fc:c8: 10:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9A:FF:22:56:06:5D:BC:1A:B4:E1:93:7B:AF:65:FF:73:CE:D2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b72a825-99aa-3767-9147-beccdc7570c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:47:0a:a4:d0:76:9a:dd:01:94:1c:da:b5:b6:54:dd:de:eb: c0:8a:da:00:f7:7d:25:04:e6:91:12:65:6e:c3:15:5f:1c:88: 39:e7:3c:16:54:d2:51:98:14:20:a3:f7:7f:ce:6e:13:68:a3: fa:4e:cb:c4:28:e9:38:85:ee:d4:c1:91:97:e0:df:9a:95:da: a4:b6:3d:80:1a:6e:b1:d1:2a:bc:2b:7e:7b:2a:49:00:95:85: cb:62:57:db:85:32:97:aa:44:86:d6:2e:29:7d:fc:0b:39:9a: dc:f3:09:d8:2d:bd:7e:ff:91:4b:81:1d:2f:d6:48:07:07:b7: 18:39:86:46:ec:10:31:93:a5:dd:c6:b8:9f:be:8b:d7:96:26: 98:23:79:0c:97:63:23:bc:a1:4c:13:07:b7:f8:c2:5e:dd:d3: 20:f7:f9:cd:01:5f:5c:57:30:68:f5:dc:04:cc:43:62:4e:ff: 01:9f:f1:f1:fa:7c:f9:2c:1a:14:15:83:b8:28:53:5e:38:af: 56:d9:f3:1d:27:36:7f:5f:0d:18:ac:07:21:f4:9d:45:c7:e6: cd:fc:0a:34:88:86:18:be:aa:df:88:cb:b8:0a:98:4e:90:eb: b5:70:ae:7f:8a:e6:0d:5b:5b:1a:f0:d9:79:fd:4c:1f:af:a7: 2d:65:eb:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3WyQqFNsautCMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MzY2ZDU3MDktZTIxZS00NDA1LTk2ZWEtOWQ5Mjk1OTczYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibmbFEQbZru2qyB4DIZdmfHve0O0EjtyT+5c jihhOtAjcOPd9Zf2Vhh9g2pt3yi1s9U+ILlYnhSOL6sOCFktNAST56xl+udrNkHf aGOpGHnjSjsoVL8UidjhSO8e47GUS5jv4+W2GynxsXoFoqDakOY4mO33Rl/r98pz k4IkopHeX8qMV9tyyP08ucyMsyAvOSSrEW9IpVvvLu7wisXmKnOuC2QCqRoFcD+F BwyaFFF5gSwa5/pbu0GlSPhcWc7nP4VY0I4SJvdN0kqDYCXqFC7G+sRAuHZunVPB fodv51mRFukUut9UXSieIDIFIrtDJz7TMfBTCms8zuZw/MgQBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMea/yJWBl28GrThk3uvZf9zztLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI3MmE4MjUtOTlhYS0z NzY3LTkxNDctYmVjY2RjNzU3MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJHCqTQdprdAZQc2rW2VN3e68CK2gD3fSUE5pESZW7DFV8ciDnnPBZU 0lGYFCCj93/ObhNoo/pOy8Qo6TiF7tTBkZfg35qV2qS2PYAabrHRKrwrfnsqSQCV hctiV9uFMpeqRIbWLil9/As5mtzzCdgtvX7/kUuBHS/WSAcHtxg5hkbsEDGTpd3G uJ++i9eWJpgjeQyXYyO8oUwTB7f4wl7d0yD3+c0BX1xXMGj13ATMQ2JO/wGf8fH6 fPksGhQVg7goU144r1bZ8x0nNn9fDRisByH0nUXH5s38CjSIhhi+qt+Iy7gKmE6Q 67Vwrn+K5g1bWxrw2Xn9TB+vpy1l67E= -----END CERTIFICATE-----Generated at Thu Sep 24 03:23:46 2026 by rpki-client