$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9f5635-7b26-3a2e-abee-56a04450d06f.roa File: 3a9f5635-7b26-3a2e-abee-56a04450d06f.roa (raw, json) Hash identifier: qm92BKh7o9nRckBvVIj6Yh5OrLwQuN4/xr6pWgAKBTo= Subject key identifier: 3A:8D:32:CE:0F:3A:16:C8:23:EC:C5:55:FA:EB:BA:94:64:DF:4A:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41128218CA715B3E2A29C780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9f5635-7b26-3a2e-abee-56a04450d06f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.231.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:82:18:ca:71:5b:3e:2a:29:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=ceb34ed5-e258-46f1-8f01-3f7d56b944fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:da:8e:19:1a:a5:2b:c5:ee:db:83:fe:8d: 87:62:8d:9a:60:7a:0d:86:55:4f:eb:43:8a:9b:ee: 5b:60:4c:4e:fb:af:bc:41:e3:2a:92:a4:bf:96:b7: eb:80:b6:3d:a2:6d:88:18:8b:72:9e:90:c1:a1:49: 48:ac:a6:b3:8f:3c:d3:79:42:a1:33:70:37:5a:7b: 91:7e:78:7b:06:7b:06:6c:29:52:7a:cc:50:ef:f7: d8:df:3a:fc:90:f0:09:c5:15:3b:0b:78:6c:5c:c7: 4a:01:4e:ed:f1:cc:bf:47:66:4d:03:a7:df:58:1c: 13:20:86:83:a6:29:d7:42:ca:d2:dc:c7:0f:dc:27: e7:3d:63:07:70:65:ec:3f:ac:10:9e:b3:74:d1:ea: 64:32:1a:1b:45:14:55:fe:ae:5a:3a:0a:3e:b0:dc: a5:12:54:8c:2c:d4:ff:db:5b:2a:9f:c3:86:01:2d: 53:ab:a7:a7:4c:ea:76:a3:24:71:37:c5:8c:56:d3: 91:2d:bb:ae:61:9b:05:5e:98:f6:24:7a:22:95:2f: 05:3a:af:17:b1:54:3a:51:4c:27:0a:13:e9:7c:85: 6c:df:b0:a4:1d:22:72:54:49:e8:70:eb:1c:b0:e6: 6c:59:09:28:1e:da:7f:c0:31:eb:e2:e2:bd:eb:f6: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:32:CE:0F:3A:16:C8:23:EC:C5:55:FA:EB:BA:94:64:DF:4A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9f5635-7b26-3a2e-abee-56a04450d06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f4:dd:16:02:e7:91:4a:6a:91:5e:97:34:fe:04:89:03:4b: 1a:38:d5:c3:f1:ab:9b:b2:ae:54:68:98:fe:93:29:f9:83:9d: 57:2c:d1:79:a7:f7:c6:38:01:08:1a:80:2f:fd:aa:65:28:2e: c2:88:87:40:aa:74:a3:aa:d2:80:c4:ef:2a:0c:b7:29:3c:c5: 0a:ac:0f:be:be:74:89:23:1d:0e:76:d8:39:95:9f:0e:22:c7: 29:a8:e3:aa:49:36:74:3b:ec:67:36:6a:80:3d:c0:09:a6:a8: dd:04:9f:6a:7c:78:e4:90:8e:a9:db:6c:82:98:c2:c5:a6:b1: af:10:94:a3:be:b5:c9:1f:53:14:55:41:fc:17:de:2b:89:34: 8d:b8:bd:64:c4:34:5e:0a:2b:09:55:30:9d:e4:44:a6:ba:a1: a8:2f:c6:78:60:62:17:5d:85:84:dc:61:a3:89:17:df:b9:77: d9:d8:7a:45:02:e7:e2:ec:e1:cb:cf:87:07:56:cf:63:34:30: d5:f8:ca:43:70:7a:2c:39:64:fd:dd:20:90:1e:8e:f1:18:f9: 51:94:d7:8e:14:7a:8c:99:d5:39:7f:ea:52:11:55:1c:82:b6: fd:ff:57:b3:72:05:da:de:da:d3:02:25:44:6c:f4:2d:d3:2c: 97:67:e5:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoIYynFbPiopx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2ViMzRlZDUtZTI1OC00NmYxLThmMDEtM2Y3ZDU2Yjk0NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3vajhkapSvF7tuD/o2HYo2aYHoNhlVP60OK m+5bYExO+6+8QeMqkqS/lrfrgLY9om2IGItynpDBoUlIrKazjzzTeUKhM3A3WnuR fnh7BnsGbClSesxQ7/fY3zr8kPAJxRU7C3hsXMdKAU7t8cy/R2ZNA6ffWBwTIIaD pinXQsrS3McP3CfnPWMHcGXsP6wQnrN00epkMhobRRRV/q5aOgo+sNylElSMLNT/ 21sqn8OGAS1Tq6enTOp2oyRxN8WMVtORLbuuYZsFXpj2JHoilS8FOq8XsVQ6UUwn ChPpfIVs37CkHSJyVEnocOscsOZsWQkoHtp/wDHr4uK96/Zz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqNMs4POhbII+zFVfrrupRk30oBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E5ZjU2MzUtN2IyNi0z YTJlLWFiZWUtNTZhMDQ0NTBkMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT03RYC55FKapFelzT+BIkDSxo41cPxq5uyrlRomP6TKfmDnVcs0Xmn 98Y4AQgagC/9qmUoLsKIh0CqdKOq0oDE7yoMtyk8xQqsD76+dIkjHQ522DmVnw4i xymo46pJNnQ77Gc2aoA9wAmmqN0En2p8eOSQjqnbbIKYwsWmsa8QlKO+tckfUxRV QfwX3iuJNI24vWTENF4KKwlVMJ3kRKa6oagvxnhgYhddhYTcYaOJF9+5d9nYekUC 5+Ls4cvPhwdWz2M0MNX4ykNweiw5ZP3dIJAejvEY+VGU144UeoyZ1Tl/6lIRVRyC tv3/V7NyBdre2tMCJURs9C3TLJdn5RM= -----END CERTIFICATE-----Generated at Fri Sep 25 23:04:08 2026 by rpki-client