$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa File: 2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa (raw, json) Hash identifier: UBzuWKNq7Dvf3aP3SS3AsYiBKVJkm1QSEEb/1MQxUkQ= Subject key identifier: 0F:57:D7:23:E4:73:6A:78:39:D3:AB:88:67:C4:1D:B7:92:73:DB:51 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8D30BB4A42845FE45580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.0.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8d:30:bb:4a:42:84:5f:e4:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=d2c04f76-da5f-49b5-a618-c331b872eb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:23:32:86:e4:31:2e:bd:99:fd:68:d9:64:c8: 73:05:7d:ee:b9:42:37:24:d0:96:e4:38:66:74:51: e1:2d:cb:b4:37:ca:52:e5:ac:37:17:8a:9a:3c:65: 30:ef:4c:b7:c9:af:ac:32:9d:af:a4:52:8b:c7:3e: 76:2f:c0:93:e4:0f:93:54:ae:df:63:4b:7d:cb:72: ab:97:b2:e1:7c:aa:12:01:fa:44:a6:2e:21:fd:b2: 70:86:f6:b2:2c:38:c0:98:26:87:6f:17:9d:b9:1d: 3b:2b:29:e8:1c:d2:03:54:b0:88:e7:75:52:d4:54: 01:60:da:5e:04:1c:0c:b9:62:4a:7e:f2:6e:0b:6b: a2:51:30:68:84:09:6d:6d:19:7b:59:97:6a:0e:a6: 23:52:29:ab:ed:60:c4:d5:e2:f4:6d:3e:b6:7e:6a: c9:7f:a1:4c:3f:fd:88:42:9c:85:26:96:b7:a7:9b: 43:f7:58:53:b5:bd:12:c4:fa:b0:f0:0f:0d:07:e5: 57:13:f7:98:ea:af:24:91:e5:89:bc:79:63:3a:b3: 57:02:e7:d8:e0:1f:c0:b4:70:a6:25:d1:3b:71:85: 96:76:ac:98:e1:42:79:0c:40:5e:25:71:3a:a5:ba: 2d:7e:13:85:3b:47:d8:80:3d:ca:44:be:22:1a:6d: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:D7:23:E4:73:6A:78:39:D3:AB:88:67:C4:1D:B7:92:73:DB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e9bcec1-cda0-3ef4-8a6e-59e171f04760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d0:2d:cd:4b:21:6b:8a:01:f4:5f:b9:0b:fc:be:7a:c9:60: 67:3a:b1:6a:a9:4b:69:ac:fd:02:ec:67:05:71:91:fe:26:88: cc:27:14:f0:ae:c1:c7:75:c4:21:ce:dc:00:d8:d9:0e:c7:88: 64:9c:91:71:64:59:7b:40:ab:c5:3e:6d:53:d9:39:b7:83:63: 77:00:2d:4c:02:c5:32:a2:7c:f5:b8:39:31:1b:6a:d0:5b:db: f4:1f:83:d9:5a:ef:3c:16:4b:79:6b:47:6d:c5:af:49:b6:ff: 16:95:1c:62:e9:dc:9f:ba:52:6a:b5:a2:c9:6e:1c:35:f5:9c: 73:b9:7b:34:66:22:e1:60:7e:d1:47:74:52:5c:91:a3:ad:03: d9:96:d0:84:52:f2:50:d0:04:91:d7:6f:9f:ce:70:85:24:07: ba:7c:89:fa:2f:ed:64:b9:0e:e5:24:80:5e:aa:82:7a:ae:b9: ed:fb:e6:f1:41:c5:4f:92:27:46:13:0b:43:42:d3:cc:f4:54: 89:68:42:8d:b0:0c:06:33:20:8d:d5:c6:39:9b:48:93:83:0b: 7d:1c:18:ed:ee:2b:bb:6f:62:3b:76:20:2a:d9:89:6c:b3:50: b8:77:11:6d:96:c0:60:f6:06:f4:bf:80:f9:0f:6f:19:34:57: 6d:d6:0e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rY0wu0pChF/kVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDJjMDRmNzYtZGE1Zi00OWI1LWE2MTgtYzMzMWI4NzJlYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SMyhuQxLr2Z/WjZZMhzBX3uuUI3JNCW5Dhm dFHhLcu0N8pS5aw3F4qaPGUw70y3ya+sMp2vpFKLxz52L8CT5A+TVK7fY0t9y3Kr l7LhfKoSAfpEpi4h/bJwhvayLDjAmCaHbxeduR07KynoHNIDVLCI53VS1FQBYNpe BBwMuWJKfvJuC2uiUTBohAltbRl7WZdqDqYjUimr7WDE1eL0bT62fmrJf6FMP/2I QpyFJpa3p5tD91hTtb0SxPqw8A8NB+VXE/eY6q8kkeWJvHljOrNXAufY4B/AtHCm JdE7cYWWdqyY4UJ5DEBeJXE6pbotfhOFO0fYgD3KRL4iGm1bbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9X1yPkc2p4OdOriGfEHbeSc9tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmU5YmNlYzEtY2RhMC0z ZWY0LThhNmUtNTllMTcxZjA0NzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvQLc1LIWuKAfRfuQv8vnrJYGc6sWqpS2ms/QLsZwVxkf4miMwnFPCu wcd1xCHO3ADY2Q7HiGSckXFkWXtAq8U+bVPZObeDY3cALUwCxTKifPW4OTEbatBb 2/Qfg9la7zwWS3lrR23Fr0m2/xaVHGLp3J+6Umq1osluHDX1nHO5ezRmIuFgftFH dFJckaOtA9mW0IRS8lDQBJHXb5/OcIUkB7p8ifov7WS5DuUkgF6qgnquue375vFB xU+SJ0YTC0NC08z0VIloQo2wDAYzII3VxjmbSJODC30cGO3uK7tvYjt2ICrZiWyz ULh3EW2WwGD2BvS/gPkPbxk0V23WDhQ= -----END CERTIFICATE-----Generated at Wed Sep 23 16:03:47 2026 by rpki-client