$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a20baee-d58b-3643-8496-2fb6de84baee.roa File: 3a20baee-d58b-3643-8496-2fb6de84baee.roa (raw, json) Hash identifier: HEwuDPFfwjMyz2RMLQYRCshMplT4PY0TaPGkgiyOjhc= Subject key identifier: 30:A6:97:EE:EF:32:12:B9:9A:AC:E8:93:EC:D9:7E:49:9C:90:DB:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD3A9E97897C7CA661A400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a20baee-d58b-3643-8496-2fb6de84baee.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.0.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3a:9e:97:89:7c:7c:a6:61:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=690ff4b7-eba5-4aab-baea-b420f78d29c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:ad:18:84:b2:c8:be:c0:35:c5:f4:02:1e: 68:c0:6a:ce:ed:58:e9:fa:1e:a9:13:00:de:8b:f4: 31:58:69:c6:f2:a9:3f:ab:f9:a2:12:0c:d6:29:70: 1a:95:9d:2f:4c:a4:db:4b:e7:da:1e:a9:42:f0:3d: dd:f4:c9:c5:a7:b5:1e:4b:d5:b7:2a:83:19:cd:04: 54:9f:a7:29:f6:ee:d4:30:6e:49:36:09:ce:cf:32: c7:d2:b7:7d:42:dd:6d:c0:0a:56:ea:09:a9:99:59: a5:6a:f7:b9:ec:86:bc:1b:d6:a4:7d:1e:11:87:04: b3:01:8c:75:6e:ca:bc:3a:86:97:41:dd:89:25:26: 78:40:20:40:88:fd:bc:70:84:90:b8:9e:49:0b:bc: 23:5d:ab:94:2b:6a:66:2a:4f:e1:67:43:ae:26:cd: ed:6b:b6:04:0d:6b:84:93:e4:3c:c2:2b:5a:88:8c: 87:c1:76:3b:ed:af:24:91:f6:ac:7e:5f:dd:50:4c: 8c:db:1b:58:f0:eb:c5:23:a1:72:4e:1b:3d:4b:5b: 7e:85:6b:a2:35:92:a2:cc:61:82:3e:ab:d6:90:89: 71:de:3a:24:e1:96:7f:6d:bb:c3:1f:8b:b4:2c:21: c9:bb:03:fe:b0:56:a6:8d:76:c3:0f:c4:13:52:11: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A6:97:EE:EF:32:12:B9:9A:AC:E8:93:EC:D9:7E:49:9C:90:DB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a20baee-d58b-3643-8496-2fb6de84baee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3f:4c:4f:1b:08:30:f7:27:67:8b:2f:c7:2e:ee:ed:d4:0b: 20:30:29:a8:da:2b:64:e6:2e:fa:f7:41:a9:e0:4f:2e:ce:9d: 61:da:2a:d5:b7:d7:1f:63:78:73:5c:03:4a:64:23:99:9b:82: f4:31:a3:11:02:27:2e:b8:21:e9:1d:e1:69:28:ae:ec:88:38: 8f:c0:ca:cd:76:01:ee:dd:8b:7f:71:f6:37:1b:a5:8b:b1:89: ec:d3:32:3f:d7:9a:2a:11:00:c3:6a:db:bc:f3:ca:ef:13:b9: 77:e0:7c:0c:55:7a:f9:73:cf:cf:ef:5e:90:b2:77:51:98:62: d7:b5:44:6b:29:31:f0:b5:99:49:75:1f:9c:e9:54:ca:38:08: 71:96:d3:1d:fd:65:05:b7:0b:0b:db:50:2f:48:f5:16:76:0d: d6:a5:66:a4:d8:a1:1d:e0:ce:e9:b1:bc:f3:37:85:87:d3:a2: 4f:1c:87:2b:e6:dc:57:8e:c7:8a:44:f8:3e:d2:50:66:a8:56: 00:fc:1d:ef:cb:76:36:32:d7:1d:61:85:37:cc:04:48:3d:d0: f7:14:68:37:e2:0f:22:32:f3:e4:6e:c3:af:2f:c6:5c:af:d5: 96:48:2b:b0:7c:22:82:9d:28:1a:fa:0b:58:fc:38:6f:0a:3a: 06:27:e8:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTqel4l8fKZhpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjkwZmY0YjctZWJhNS00YWFiLWJhZWEtYjQyMGY3OGQyOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4CtGISyyL7ANcX0Ah5owGrO7Vjp+h6pEwDe i/QxWGnG8qk/q/miEgzWKXAalZ0vTKTbS+faHqlC8D3d9MnFp7UeS9W3KoMZzQRU n6cp9u7UMG5JNgnOzzLH0rd9Qt1twApW6gmpmVmlave57Ia8G9akfR4RhwSzAYx1 bsq8OoaXQd2JJSZ4QCBAiP28cISQuJ5JC7wjXauUK2pmKk/hZ0OuJs3ta7YEDWuE k+Q8witaiIyHwXY77a8kkfasfl/dUEyM2xtY8OvFI6FyThs9S1t+hWuiNZKizGGC PqvWkIlx3jok4ZZ/bbvDH4u0LCHJuwP+sFamjXbDD8QTUhEH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCml+7vMhK5mqzok+zZfkmckNvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2EyMGJhZWUtZDU4Yi0z NjQzLTg0OTYtMmZiNmRlODRiYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw/TE8bCDD3J2eLL8cu7u3UCyAwKajaK2TmLvr3QangTy7OnWHaKtW3 1x9jeHNcA0pkI5mbgvQxoxECJy64Iekd4WkoruyIOI/Ays12Ae7di39x9jcbpYux iezTMj/XmioRAMNq27zzyu8TuXfgfAxVevlzz8/vXpCyd1GYYte1RGspMfC1mUl1 H5zpVMo4CHGW0x39ZQW3CwvbUC9I9RZ2DdalZqTYoR3gzumxvPM3hYfTok8chyvm 3FeOx4pE+D7SUGaoVgD8He/LdjYy1x1hhTfMBEg90PcUaDfiDyIy8+Ruw68vxlyv 1ZZIK7B8IoKdKBr6C1j8OG8KOgYn6FI= -----END CERTIFICATE-----Generated at Fri Sep 25 08:57:08 2026 by rpki-client