$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/372f1072-3112-32d2-b22d-aae625e51d21.roa File: 372f1072-3112-32d2-b22d-aae625e51d21.roa (raw, json) Hash identifier: 5Yml+WbLPeHENMB8vVcIWsfNAeNJl9T2TTIaF3gZEPY= Subject key identifier: 5E:68:80:59:6D:5B:49:3C:10:EB:80:68:9A:29:B4:07:FF:94:4C:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD2B5047F5BCE39EFD8140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/372f1072-3112-32d2-b22d-aae625e51d21.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.0.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2b:50:47:f5:bc:e3:9e:fd:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a1066e52-6c28-4eca-b421-94cb3eb36489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:90:ab:c2:34:66:2a:b3:82:40:97:e7:a3: 10:6e:96:1d:16:55:3a:40:4e:8a:9b:91:d9:42:8e: 6c:fa:1f:5d:e9:a4:e2:74:7b:8e:49:48:6c:83:ab: 19:5c:c4:a5:0f:04:b6:30:d2:25:45:fc:f1:2b:30: ea:24:0d:be:30:2e:fe:ad:71:f8:fd:6a:22:bc:62: 6b:84:bd:7c:c7:0c:48:c9:df:da:1a:62:ad:88:23: ae:ad:18:44:1e:51:e6:b9:91:33:90:48:db:43:1a: 93:2a:ff:42:95:38:7c:02:88:e3:02:65:7d:47:2a: 66:13:d2:1b:27:fc:a4:74:9a:46:b0:16:3e:7d:e4: ad:01:75:4c:c7:0e:9f:3f:5d:14:ee:50:75:c3:df: 91:a8:4a:9e:f5:ce:ad:fa:7d:b2:c4:0c:da:ca:a9: 34:6c:08:86:8b:08:63:e9:9f:19:1e:7d:d9:58:c8: 3b:0e:0f:cb:f7:2a:24:cc:99:11:18:97:3b:25:60: fd:62:40:50:91:25:8f:00:40:fd:97:5a:80:77:72: b4:65:d3:ba:ad:07:ae:c1:c5:ec:51:e9:f3:b7:2a: 79:1d:90:29:bf:d1:46:85:7a:14:55:a4:8b:38:92: 55:f4:8f:b5:9c:f1:6c:f5:10:5d:c5:f2:85:24:ab: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:68:80:59:6D:5B:49:3C:10:EB:80:68:9A:29:B4:07:FF:94:4C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/372f1072-3112-32d2-b22d-aae625e51d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8f:88:06:40:57:3b:98:7a:75:c3:be:81:82:41:8a:21:d9: 88:74:18:59:f5:22:21:52:3f:44:50:83:51:29:28:06:8e:fb: bc:bb:76:58:db:ac:db:ef:ee:00:fb:37:32:3f:d4:11:a7:59: f3:7a:01:6e:3d:6d:1a:92:c2:f9:cb:38:c7:64:08:43:83:83: 27:b4:07:79:75:f5:f2:50:01:e2:bd:e1:e8:0e:34:8e:83:7d: 9f:73:e3:25:0d:a7:6c:29:bd:64:22:3c:29:0f:1e:bd:29:ca: 62:e8:9b:8f:bf:b0:af:14:9f:a0:14:99:84:f6:e0:4f:07:55: 9b:ed:a5:5e:5f:99:53:3a:38:d2:bb:af:79:92:a9:86:26:98: 37:d0:7f:a8:c8:44:bf:5b:9a:f6:7d:ef:b6:3b:b6:fc:17:2e: 17:e1:ce:a1:a4:db:3a:7a:0f:98:6f:e3:ff:c1:68:59:d7:28: ed:82:38:8c:a1:69:37:20:41:44:24:5b:cb:07:d1:b1:c4:ae: 2c:3a:e7:6b:b5:dd:54:df:f4:95:1b:93:b7:d5:fe:9a:c8:3d: dd:24:aa:83:4f:ae:d2:b9:0e:6a:75:5a:91:16:08:ac:21:72: a9:ae:2b:d5:1f:8d:a0:84:4c:7f:4b:b3:3b:7c:0f:17:70:ff: 80:b5:08:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rStQR/W84579gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTEwNjZlNTItNmMyOC00ZWNhLWI0MjEtOTRjYjNlYjM2NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybuQq8I0ZiqzgkCX56MQbpYdFlU6QE6Km5HZ Qo5s+h9d6aTidHuOSUhsg6sZXMSlDwS2MNIlRfzxKzDqJA2+MC7+rXH4/WoivGJr hL18xwxIyd/aGmKtiCOurRhEHlHmuZEzkEjbQxqTKv9ClTh8AojjAmV9RypmE9Ib J/ykdJpGsBY+feStAXVMxw6fP10U7lB1w9+RqEqe9c6t+n2yxAzayqk0bAiGiwhj 6Z8ZHn3ZWMg7Dg/L9yokzJkRGJc7JWD9YkBQkSWPAED9l1qAd3K0ZdO6rQeuwcXs Uenztyp5HZApv9FGhXoUVaSLOJJV9I+1nPFs9RBdxfKFJKs5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5ogFltW0k8EOuAaJoptAf/lExEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzcyZjEwNzItMzExMi0z MmQyLWIyMmQtYWFlNjI1ZTUxZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyPiAZAVzuYenXDvoGCQYoh2Yh0GFn1IiFSP0RQg1EpKAaO+7y7dljb rNvv7gD7NzI/1BGnWfN6AW49bRqSwvnLOMdkCEODgye0B3l19fJQAeK94egONI6D fZ9z4yUNp2wpvWQiPCkPHr0pymLom4+/sK8Un6AUmYT24E8HVZvtpV5fmVM6ONK7 r3mSqYYmmDfQf6jIRL9bmvZ977Y7tvwXLhfhzqGk2zp6D5hv4//BaFnXKO2COIyh aTcgQUQkW8sH0bHEriw652u13VTf9JUbk7fV/prIPd0kqoNPrtK5Dmp1WpEWCKwh cqmuK9UfjaCETH9Lszt8Dxdw/4C1CGc= -----END CERTIFICATE-----Generated at Wed Sep 23 09:28:22 2026 by rpki-client