$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4388e094-f5a6-39d1-9ab3-0f4a2e4043f4.roa File: 4388e094-f5a6-39d1-9ab3-0f4a2e4043f4.roa (raw, json) Hash identifier: EcqGgI+4+XaVAzTWIxsiZcXTtt0VkRR2UvFZW6PAYsg= Subject key identifier: ED:56:B5:19:83:D8:56:C0:48:E2:75:7C:59:59:F5:B1:E9:61:D0:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD852A325621842E24C580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4388e094-f5a6-39d1-9ab3-0f4a2e4043f4.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.0.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:85:2a:32:56:21:84:2e:24:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=efba923f-8255-4aa9-ae79-55e1d25e275a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:1d:fd:52:67:f8:b0:d5:ba:93:f5:6d:1b: fb:15:27:4b:d8:48:64:f8:c6:16:03:7a:80:3a:09: d0:c3:51:38:95:20:04:54:32:8b:30:ce:22:e0:0e: 8a:90:78:b7:21:66:28:15:83:e7:1a:02:db:c1:ff: 93:c3:50:ab:21:af:4a:8e:99:5a:95:24:ef:2a:f5: ba:61:f6:6c:0a:3b:fe:2e:16:c3:d9:d3:9d:7b:b7: b6:b5:9b:63:17:75:b3:9a:e4:cf:cb:b8:c4:fe:fe: e8:18:f7:e2:71:0f:30:ab:61:cc:b9:7c:e4:93:c3: 54:13:e9:e5:bb:25:3a:eb:57:32:14:d8:cc:2b:fe: c1:05:85:72:9f:9f:f2:13:54:4d:2c:f9:31:0d:12: 69:bb:e2:d5:ed:5c:ca:32:ba:68:b9:01:6b:40:37: 7b:0d:a4:ee:c0:ee:52:e7:ea:ce:5b:a0:eb:37:00: 00:b7:05:4b:89:89:f7:e7:5b:c7:e0:6e:32:59:df: 32:af:fd:2d:ab:02:f6:55:2a:5b:b0:1e:dd:d2:79: 40:92:fd:89:f9:56:05:e0:b2:c0:8c:57:af:50:b5: 23:79:35:89:fd:8c:8e:1d:1a:d1:b4:e6:1b:32:45: 21:d3:85:ce:cf:d5:e2:ad:5f:82:d7:19:14:28:e9: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:56:B5:19:83:D8:56:C0:48:E2:75:7C:59:59:F5:B1:E9:61:D0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4388e094-f5a6-39d1-9ab3-0f4a2e4043f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cf:f1:7e:50:80:cb:86:25:63:91:4b:a2:99:0f:9c:a6:6f: 4a:53:59:1f:92:1b:04:ab:35:13:83:45:6c:9b:b4:96:3d:cf: 38:03:7d:48:96:c5:bf:2e:94:1d:cf:c8:f4:67:38:56:e8:02: a0:ee:de:d6:c6:61:08:cf:dc:e6:01:da:27:e1:61:0d:3a:a4: de:fe:50:22:0b:43:89:72:1d:08:04:13:8a:da:e9:a9:9f:90: 89:f8:ca:0d:a5:4a:2d:64:18:03:6f:c9:ad:71:65:5d:9d:f7: 4d:a2:04:81:74:19:a4:ca:57:06:fe:b9:8d:b2:04:3b:ce:d4: cb:61:31:d8:23:4b:8a:24:b9:cb:17:fc:20:80:26:17:ab:03: 08:80:e0:c7:e9:2c:9d:3d:72:09:0a:16:7a:76:23:54:0d:4e: 3b:74:a6:c5:53:82:c3:74:3c:8b:e5:63:33:7a:c4:57:11:02: b7:97:de:01:f9:c8:0c:33:a2:f6:ca:5f:79:05:cc:05:ff:0c: 27:73:6b:56:0f:f3:a2:d5:76:fb:2d:db:58:cf:84:d8:00:d3: bb:5f:f3:d1:91:b8:3c:10:89:8c:18:97:9e:c7:74:93:d8:55: d8:7a:25:b5:5d:50:a2:c8:77:f5:d1:8d:c2:49:ab:cf:4b:10: a6:49:a3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYUqMlYhhC4kxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWZiYTkyM2YtODI1NS00YWE5LWFlNzktNTVlMWQyNWUyNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0d/VJn+LDVupP1bRv7FSdL2Ehk+MYWA3qA OgnQw1E4lSAEVDKLMM4i4A6KkHi3IWYoFYPnGgLbwf+Tw1CrIa9KjplalSTvKvW6 YfZsCjv+LhbD2dOde7e2tZtjF3WzmuTPy7jE/v7oGPficQ8wq2HMuXzkk8NUE+nl uyU661cyFNjMK/7BBYVyn5/yE1RNLPkxDRJpu+LV7VzKMrpouQFrQDd7DaTuwO5S 5+rOW6DrNwAAtwVLiYn351vH4G4yWd8yr/0tqwL2VSpbsB7d0nlAkv2J+VYF4LLA jFevULUjeTWJ/YyOHRrRtOYbMkUh04XOz9XirV+C1xkUKOnquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1WtRmD2FbASOJ1fFlZ9bHpYdAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4OGUwOTQtZjVhNi0z OWQxLTlhYjMtMGY0YTJlNDA0M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfP8X5QgMuGJWORS6KZD5ymb0pTWR+SGwSrNRODRWybtJY9zzgDfUiW xb8ulB3PyPRnOFboAqDu3tbGYQjP3OYB2ifhYQ06pN7+UCILQ4lyHQgEE4ra6amf kIn4yg2lSi1kGANvya1xZV2d902iBIF0GaTKVwb+uY2yBDvO1MthMdgjS4okucsX /CCAJherAwiA4MfpLJ09cgkKFnp2I1QNTjt0psVTgsN0PIvlYzN6xFcRAreX3gH5 yAwzovbKX3kFzAX/DCdza1YP86LVdvst21jPhNgA07tf89GRuDwQiYwYl57HdJPY Vdh6JbVdUKLId/XRjcJJq89LEKZJo9M= -----END CERTIFICATE-----Generated at Thu Sep 24 23:24:16 2026 by rpki-client