$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ebb912e-ac39-3433-9ee3-10afc435b2ef.roa File: 3ebb912e-ac39-3433-9ee3-10afc435b2ef.roa (raw, json) Hash identifier: B0Cu5aD5S4omu4ps5ruOr3ibj2SmdsFlokfy4XGPrKI= Subject key identifier: CA:D2:E4:FB:C0:32:4E:45:2A:F7:3E:83:09:E2:62:92:CD:80:48:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41129E55BA5015A89D2C4400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ebb912e-ac39-3433-9ee3-10afc435b2ef.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9e:55:ba:50:15:a8:9d:2c:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=f321e1c0-d1c1-4359-8d05-b75a573df6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:cd:32:1f:ca:c8:02:f0:dc:9a:ef:8f:ad: 9a:1f:e3:c9:d9:cf:95:3a:9e:90:67:b8:d1:06:a4: 11:59:4f:91:8f:7a:bc:7f:58:d9:74:7e:a9:2d:a6: fb:7d:ed:1f:57:15:f4:da:c1:09:19:7a:23:38:06: 20:32:fe:72:5b:c9:17:eb:a5:96:12:24:95:b5:71: da:c3:eb:65:61:7d:06:b4:e3:e5:75:8f:2c:04:13: b6:f4:98:90:65:a3:b2:c1:09:7a:13:8b:57:1c:53: aa:fe:85:d9:d0:a7:7a:a5:26:87:33:6b:39:e4:5f: bc:4a:d6:57:4f:85:10:30:e6:88:a7:85:b2:fb:56: 96:62:31:22:cc:a6:7a:5f:36:87:56:41:bd:1c:f8: 20:24:32:be:b3:e8:a8:fa:5c:4b:5b:87:cb:16:c1: a8:3c:26:77:71:bd:08:ed:e3:c3:a0:dd:90:9a:46: 0b:a3:2d:2e:ae:c5:1c:f7:2b:db:5a:fc:c5:b1:41: 4a:19:56:be:a0:9f:c0:29:df:4b:2f:23:21:b9:20: 2a:bc:32:cb:1e:c5:1e:d7:c0:e5:68:80:9b:24:14: 2a:35:8f:9e:38:d5:29:e5:01:01:37:e1:ed:e5:09: 59:7a:31:37:c0:7a:2f:51:80:f8:09:5c:bc:9b:da: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:E4:FB:C0:32:4E:45:2A:F7:3E:83:09:E2:62:92:CD:80:48:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ebb912e-ac39-3433-9ee3-10afc435b2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:40:7c:54:af:3b:52:75:35:cd:19:5d:41:1e:51:c8:f0:f4: 8a:9e:95:34:64:63:28:db:b0:85:43:58:3b:7a:b7:3b:ad:e6: 49:f3:05:97:66:6b:a9:2f:0a:0c:78:43:f8:87:d9:56:e7:58: 2f:ca:42:be:47:ec:5e:98:5b:6e:56:a6:37:52:80:59:ef:00: 96:3a:88:5a:f4:96:df:92:d3:9e:cc:ef:a5:94:f7:11:08:37: b9:4d:7e:c5:8f:97:f7:c8:84:a3:a8:a0:0a:70:2e:91:9e:a4: 21:71:4c:56:d4:77:80:88:60:f5:7d:a0:4a:b7:42:7a:62:6d: dd:56:93:88:09:c8:02:45:89:79:d7:a2:86:0e:93:bb:31:8f: b0:ea:b1:76:cf:d9:35:1d:62:05:90:68:85:25:f2:91:d6:00: f6:85:0e:71:44:6e:1d:3b:23:c0:d5:8b:81:c6:16:e7:fc:29: 06:ac:93:f9:ec:f1:ed:b9:46:e8:c4:58:80:fb:4c:73:e6:5a: db:d7:54:1e:9a:b1:f0:ba:26:68:82:a8:6e:82:9e:82:2c:63: 88:cd:30:e8:60:43:05:f8:aa:d5:cc:cf:74:48:d4:db:d1:cc: 93:d5:2c:30:3b:a1:27:f1:33:f8:66:3d:91:bb:bb:c7:14:c7: e1:cd:71:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEp5VulAVqJ0sRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjMyMWUxYzAtZDFjMS00MzU5LThkMDUtYjc1YTU3M2RmNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLDNMh/KyALw3Jrvj62aH+PJ2c+VOp6QZ7jR BqQRWU+Rj3q8f1jZdH6pLab7fe0fVxX02sEJGXojOAYgMv5yW8kX66WWEiSVtXHa w+tlYX0GtOPldY8sBBO29JiQZaOywQl6E4tXHFOq/oXZ0Kd6pSaHM2s55F+8StZX T4UQMOaIp4Wy+1aWYjEizKZ6XzaHVkG9HPggJDK+s+io+lxLW4fLFsGoPCZ3cb0I 7ePDoN2QmkYLoy0ursUc9yvbWvzFsUFKGVa+oJ/AKd9LLyMhuSAqvDLLHsUe18Dl aICbJBQqNY+eONUp5QEBN+Ht5QlZejE3wHovUYD4CVy8m9oKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrS5PvAMk5FKvc+gwniYpLNgEhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ViYjkxMmUtYWMzOS0z NDMzLTllZTMtMTBhZmM0MzViMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExAfFSvO1J1Nc0ZXUEeUcjw9IqelTRkYyjbsIVDWDt6tzut5knzBZdm a6kvCgx4Q/iH2VbnWC/KQr5H7F6YW25WpjdSgFnvAJY6iFr0lt+S057M76WU9xEI N7lNfsWPl/fIhKOooApwLpGepCFxTFbUd4CIYPV9oEq3Qnpibd1Wk4gJyAJFiXnX ooYOk7sxj7DqsXbP2TUdYgWQaIUl8pHWAPaFDnFEbh07I8DVi4HGFuf8KQask/ns 8e25RujEWID7THPmWtvXVB6asfC6JmiCqG6CnoIsY4jNMOhgQwX4qtXMz3RI1NvR zJPVLDA7oSfxM/hmPZG7u8cUx+HNcTU= -----END CERTIFICATE-----Generated at Sat Sep 26 11:07:56 2026 by rpki-client