$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f08722c-a2da-30fc-9207-fae253ca5bd9.roa File: 2f08722c-a2da-30fc-9207-fae253ca5bd9.roa (raw, json) Hash identifier: I/gMtye2S4Wzx6oTqzW3maNOXuJgEBaP0/dOiDYU660= Subject key identifier: C5:86:B9:F0:EE:92:A1:7A:39:6D:92:61:C3:88:26:43:8F:EB:43:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD40E7A2C14728B705F080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f08722c-a2da-30fc-9207-fae253ca5bd9.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.68.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:40:e7:a2:c1:47:28:b7:05:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=618848f8-f658-49ca-93e4-c9412f33f3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:ec:38:55:76:8d:53:df:d0:fd:c1:bc:c4: 1d:8e:b1:1f:80:b9:58:82:dc:9c:65:9a:39:81:62: 0f:b0:86:a2:96:38:5e:9a:df:78:8d:e3:38:5c:a9: 97:2b:85:65:9c:21:b0:f5:00:42:03:f6:f6:38:c2: a1:08:f6:cd:a6:89:92:e4:9b:66:1e:e5:04:9a:a8: 12:bb:42:7c:9f:0c:18:48:9a:72:c3:16:38:f2:92: 2b:56:82:cf:af:23:d3:11:ed:44:66:09:3b:e3:c3: ed:9c:39:ef:c1:24:33:ba:49:0d:35:d6:13:02:e4: 0e:68:94:c8:0e:db:90:ac:8c:59:6e:09:f1:c8:50: 7e:2f:5c:26:68:12:f9:c5:c7:11:bd:6c:a6:05:aa: 2d:9d:83:c0:18:25:74:dd:a2:b3:bb:57:ee:2e:fc: 11:73:2e:af:4d:bb:90:c5:13:e2:2f:23:b3:5c:ef: 5f:6f:36:d0:ca:78:94:bd:91:a4:cc:12:36:18:e0: d0:d2:38:23:40:33:1a:cf:f9:8b:e6:cd:3b:55:81: 19:ff:e2:23:95:68:72:14:09:2a:e7:38:65:1f:1d: c1:f2:26:2f:96:40:62:34:f4:c0:3b:b4:8b:4e:cb: 86:bd:00:89:ba:a4:d5:c5:7b:d8:44:5b:77:25:cb: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:B9:F0:EE:92:A1:7A:39:6D:92:61:C3:88:26:43:8F:EB:43:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f08722c-a2da-30fc-9207-fae253ca5bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5c:27:b6:e0:ca:17:53:66:a9:7c:b8:38:ac:cd:28:58:59: 60:50:d1:fa:66:f6:a6:a8:7e:ce:b0:ad:4d:5a:c3:b0:17:13: 60:03:6a:2b:02:c2:83:f2:eb:57:ca:90:ea:68:3d:b4:0f:27: 8c:0b:54:8e:43:8b:2e:3b:ed:8b:37:ad:a6:5f:f6:01:86:dd: 48:8b:a7:28:be:84:30:0b:73:12:06:9e:82:42:c5:4e:56:e9: 0a:3c:c4:dc:2a:d7:93:65:0b:19:0d:a2:f0:34:bd:6b:34:e7: 31:13:86:3f:ec:6c:62:dd:34:04:a7:4a:0e:6d:af:91:ec:69: 84:55:e9:1b:41:81:f2:62:bb:f3:87:6b:4e:24:e2:97:78:93: ca:94:c4:a9:28:ae:1e:60:e2:33:d1:64:ba:0d:d4:f0:2e:1b: 27:90:8a:b1:8b:1f:f2:15:e8:30:90:b5:8f:25:d4:63:ad:f1: 34:32:a7:c4:78:39:05:78:71:ea:e7:c6:2f:f5:97:7e:19:9e: d2:8a:11:51:65:f7:00:19:85:82:5c:a4:18:72:7a:64:07:12: 89:9a:11:5a:7c:38:9a:98:ae:0c:98:6a:5f:44:cd:44:71:e3: 44:e0:f1:0b:51:24:13:eb:d2:e1:4d:80:1f:77:de:30:20:fd: 22:97:8b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UDnosFHKLcF8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NjE4ODQ4ZjgtZjY1OC00OWNhLTkzZTQtYzk0MTJmMzNmM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksLsOFV2jVPf0P3BvMQdjrEfgLlYgtycZZo5 gWIPsIailjhemt94jeM4XKmXK4VlnCGw9QBCA/b2OMKhCPbNpomS5JtmHuUEmqgS u0J8nwwYSJpywxY48pIrVoLPryPTEe1EZgk748PtnDnvwSQzukkNNdYTAuQOaJTI DtuQrIxZbgnxyFB+L1wmaBL5xccRvWymBaotnYPAGCV03aKzu1fuLvwRcy6vTbuQ xRPiLyOzXO9fbzbQyniUvZGkzBI2GODQ0jgjQDMaz/mL5s07VYEZ/+IjlWhyFAkq 5zhlHx3B8iYvlkBiNPTAO7SLTsuGvQCJuqTVxXvYRFt3JctCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWGufDukqF6OW2SYcOIJkOP60PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmYwODcyMmMtYTJkYS0z MGZjLTkyMDctZmFlMjUzY2E1YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlcJ7bgyhdTZql8uDiszShYWWBQ0fpm9qaofs6wrU1aw7AXE2ADaisC woPy61fKkOpoPbQPJ4wLVI5Diy477Ys3raZf9gGG3UiLpyi+hDALcxIGnoJCxU5W 6Qo8xNwq15NlCxkNovA0vWs05zEThj/sbGLdNASnSg5tr5HsaYRV6RtBgfJiu/OH a04k4pd4k8qUxKkorh5g4jPRZLoN1PAuGyeQirGLH/IV6DCQtY8l1GOt8TQyp8R4 OQV4cernxi/1l34ZntKKEVFl9wAZhYJcpBhyemQHEomaEVp8OJqYrgyYal9EzURx 40Tg8QtRJBPr0uFNgB933jAg/SKXiws= -----END CERTIFICATE-----Generated at Sat Sep 26 19:05:59 2026 by rpki-client