$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cb7055e-2e07-328a-9dec-995b3cb74e78.roa File: 2cb7055e-2e07-328a-9dec-995b3cb74e78.roa (raw, json) Hash identifier: K40W3WDnOIUr+N8eFLagCvsX6PS/ijpe1gUaude+qO0= Subject key identifier: 07:54:05:40:F0:C2:DB:92:7D:C0:44:8A:24:4F:50:53:9D:2C:64:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4982F79A840BEE96CA6B5800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cb7055e-2e07-328a-9dec-995b3cb74e78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.227.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:f7:9a:84:0b:ee:96:ca:6b:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9e0342e8-c6f4-4c73-9451-8039cd771d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:b2:14:33:63:f6:b9:13:73:1b:c5:0d:b9: df:ed:e0:a4:d6:f9:e0:8d:37:07:79:22:0f:f5:be: 90:3d:d8:8c:74:79:6f:be:50:b1:5f:7b:bd:3f:67: 74:a6:9c:20:50:e3:ba:57:f4:b1:d6:39:0e:5d:da: ce:22:16:58:9c:bc:b0:29:dc:26:eb:8a:66:60:69: ea:9c:5d:6c:1f:77:e7:ce:cc:3e:eb:3d:13:a5:1b: ad:32:3f:39:42:e5:4b:bc:f1:74:e4:2b:9d:57:97: e7:0a:e9:ff:f3:f6:9c:93:c7:88:85:90:61:54:86: fe:77:5c:0f:9b:0b:83:4a:70:5e:be:94:af:e9:48: 3c:45:eb:51:11:bb:64:84:4f:81:45:e4:94:ea:72: 91:de:ab:6f:83:a1:fe:4f:3a:0b:23:f2:10:1a:4d: 90:9f:0f:1f:f9:bb:63:e1:b8:1c:34:ae:60:46:fa: 2d:cc:eb:38:92:4e:e2:a8:36:76:ad:62:20:93:72: 64:24:bb:93:40:1c:40:9f:33:a4:9d:94:34:2b:38: f5:97:2e:0a:99:8c:a4:89:c1:e9:e9:e8:5b:3f:66: 54:f9:0d:50:24:29:bb:5c:d4:24:bd:1f:83:58:b9: c6:4b:51:bb:66:0d:73:6e:af:10:f6:d0:64:f6:a9: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:05:40:F0:C2:DB:92:7D:C0:44:8A:24:4F:50:53:9D:2C:64:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cb7055e-2e07-328a-9dec-995b3cb74e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:30:58:d3:c3:a9:ce:b2:6c:59:fa:99:03:14:01:0f:ba:4a: 97:5f:6b:a6:b4:c7:8b:2b:e4:1a:f1:93:cb:e5:49:70:c8:a9: 16:c3:14:eb:0d:0d:bc:88:e8:21:d3:20:89:d7:6a:f9:b4:3f: 69:55:6c:45:d8:f4:19:2d:f0:54:8d:90:dd:36:e3:94:15:04: bc:93:d7:80:9d:4a:9b:dc:04:1f:84:34:74:f1:78:78:27:03: bf:c3:56:d0:69:93:d3:ac:6e:01:90:a2:09:84:a9:c1:b0:71: f1:01:96:f2:94:89:10:24:c7:12:66:22:05:45:fa:11:e0:0f: b7:d0:bd:24:64:7e:af:6d:a4:fd:93:f6:a8:b3:67:e4:af:7a: ab:6b:e4:b8:18:f3:b7:10:a5:09:7d:61:ce:4d:35:30:16:ff: c6:18:f1:c7:90:3f:7b:ae:35:be:8d:2f:04:cf:08:58:6e:23: e7:e3:2f:27:c5:98:5a:7e:bb:5f:88:52:32:b7:4d:88:77:d8: 19:1a:a1:fb:b4:02:4e:e1:4a:5c:97:31:a0:dd:0a:d5:ae:0d: 88:43:86:39:07:17:9a:9a:19:c4:da:c3:b9:3b:ff:e8:86:30: fb:93:69:ce:11:ff:73:3d:bf:5a:ce:91:5e:7f:b0:61:2c:08: 6a:cf:d9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgveahAvulsprWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWUwMzQyZTgtYzZmNC00YzczLTk0NTEtODAzOWNkNzcxZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAyyFDNj9rkTcxvFDbnf7eCk1vngjTcHeSIP 9b6QPdiMdHlvvlCxX3u9P2d0ppwgUOO6V/Sx1jkOXdrOIhZYnLywKdwm64pmYGnq nF1sH3fnzsw+6z0TpRutMj85QuVLvPF05CudV5fnCun/8/ack8eIhZBhVIb+d1wP mwuDSnBevpSv6Ug8RetREbtkhE+BReSU6nKR3qtvg6H+TzoLI/IQGk2Qnw8f+btj 4bgcNK5gRvotzOs4kk7iqDZ2rWIgk3JkJLuTQBxAnzOknZQ0Kzj1ly4KmYykicHp 6ehbP2ZU+Q1QJCm7XNQkvR+DWLnGS1G7Zg1zbq8Q9tBk9qk/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdUBUDwwtuSfcBEiiRPUFOdLGQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNiNzA1NWUtMmUwNy0z MjhhLTlkZWMtOTk1YjNjYjc0ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYwWNPDqc6ybFn6mQMUAQ+6Spdfa6a0x4sr5Brxk8vlSXDIqRbDFOsN DbyI6CHTIInXavm0P2lVbEXY9Bkt8FSNkN0245QVBLyT14CdSpvcBB+ENHTxeHgn A7/DVtBpk9OsbgGQogmEqcGwcfEBlvKUiRAkxxJmIgVF+hHgD7fQvSRkfq9tpP2T 9qizZ+Sveqtr5LgY87cQpQl9Yc5NNTAW/8YY8ceQP3uuNb6NLwTPCFhuI+fjLyfF mFp+u1+IUjK3TYh32Bkaofu0Ak7hSlyXMaDdCtWuDYhDhjkHF5qaGcTaw7k7/+iG MPuTac4R/3M9v1rOkV5/sGEsCGrP2X0= -----END CERTIFICATE-----Generated at Sun Sep 27 06:12:53 2026 by rpki-client