$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4afc6f91-396b-3c42-aab9-2bf4edb56e92.roa File: 4afc6f91-396b-3c42-aab9-2bf4edb56e92.roa (raw, json) Hash identifier: xLbydxF8no7W18q+5xi2JiVtTpW07umneKx/fbMw2og= Subject key identifier: 31:3D:1D:2C:AB:B4:8E:3F:E5:44:21:DB:69:CF:49:B3:57:63:93:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD7497341290C64950EFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4afc6f91-396b-3c42-aab9-2bf4edb56e92.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.96.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:74:97:34:12:90:c6:49:50:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=1a0ac1e7-93f0-451a-b455-34c49343f4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:80:e6:76:3c:6c:7f:0f:51:43:79:93:2f: c2:e4:d2:9d:20:d0:3d:4f:69:e4:d3:ad:da:ed:1f: 6e:08:9d:3b:a4:1d:6c:ee:6d:05:4a:c1:2e:4f:d1: 51:f2:1c:97:8f:53:3f:82:ac:7d:29:f2:90:ae:c2: f6:3e:3b:b7:19:fa:c8:31:22:a3:00:65:34:97:e9: 29:53:0a:84:93:12:ad:c0:c1:21:9d:d4:9c:76:b6: eb:10:b7:77:19:f8:61:2a:fe:2d:03:3b:f4:d5:e8: fc:9b:a6:7d:8a:2b:25:d1:b6:56:4c:3e:a4:9b:ad: c0:93:5f:94:7b:5e:5f:40:22:05:0e:72:25:01:67: 25:cc:b5:f8:19:72:31:b5:81:ba:5d:6f:95:6a:f7: ca:53:0e:f3:b0:a4:f3:17:fd:cb:8d:59:91:bf:a3: 02:e7:fc:4b:ee:6e:e0:df:22:a2:6a:d5:29:e8:50: 8b:e9:99:ed:52:8a:fb:02:d7:2a:11:1c:3c:13:ab: d5:0c:dc:4d:e5:f7:0a:ba:7c:a6:d6:e3:a4:f0:b7: 43:d6:58:eb:d9:db:41:2d:13:75:f5:34:99:97:1c: 8f:dc:6a:f1:a3:0e:c2:08:cf:d2:f1:fa:c1:7d:2f: ac:93:bf:8b:fa:ca:b6:5d:dc:9c:16:4f:81:ce:7f: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3D:1D:2C:AB:B4:8E:3F:E5:44:21:DB:69:CF:49:B3:57:63:93:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4afc6f91-396b-3c42-aab9-2bf4edb56e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:bc:03:71:97:b0:e4:86:4c:ec:11:8d:ce:dc:7e:2a:85:74: 58:73:29:8e:1a:2f:c1:12:cc:aa:29:19:9a:fe:e0:8d:6f:17: 2a:41:ac:01:c6:6c:c1:e8:07:0f:3a:2e:46:03:fc:5c:24:6a: 04:e7:c7:bb:1d:a9:24:6f:6e:14:03:92:a2:e9:c8:42:73:b0: af:5f:45:34:5a:eb:bd:5c:5c:77:51:be:4a:fd:cf:0d:e0:ad: 81:85:15:ff:90:db:ae:40:fc:eb:cc:f5:4a:c1:08:55:b1:91: 39:26:da:86:ff:80:b7:f2:6d:31:32:90:ee:25:5d:12:ad:e3: 2a:d6:60:05:9e:1d:27:ed:d2:34:b4:de:92:29:15:b2:27:d9: a0:d1:c3:89:bc:4b:73:b1:5d:01:61:f9:72:da:c2:08:5d:5a: 55:8d:0b:23:2f:fb:38:13:3a:ef:77:96:53:fc:3e:2c:65:89: 8c:67:12:26:91:a2:2c:d4:77:ae:79:7f:4c:d6:11:71:18:b0: 9e:6b:c7:a9:80:0a:12:49:7e:8a:03:ed:48:8a:8b:60:7d:f5: e0:b1:2b:6a:f1:77:bd:53:4d:1f:e4:ba:c7:cd:c2:d8:c1:16: 6b:83:48:ed:6d:cf:df:65:d5:00:f9:ee:db:13:f8:57:c5:56: 88:76:30:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3XSXNBKQxklQ78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MWEwYWMxZTctOTNmMC00NTFhLWI0NTUtMzRjNDkzNDNmNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmaA5nY8bH8PUUN5ky/C5NKdINA9T2nk063a 7R9uCJ07pB1s7m0FSsEuT9FR8hyXj1M/gqx9KfKQrsL2Pju3GfrIMSKjAGU0l+kp UwqEkxKtwMEhndScdrbrELd3GfhhKv4tAzv01ej8m6Z9iisl0bZWTD6km63Ak1+U e15fQCIFDnIlAWclzLX4GXIxtYG6XW+VavfKUw7zsKTzF/3LjVmRv6MC5/xL7m7g 3yKiatUp6FCL6ZntUor7AtcqERw8E6vVDNxN5fcKunym1uOk8LdD1ljr2dtBLRN1 9TSZlxyP3Grxow7CCM/S8frBfS+sk7+L+sq2XdycFk+Bzn/kqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE9HSyrtI4/5UQh22nPSbNXY5MaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFmYzZmOTEtMzk2Yi0z YzQyLWFhYjktMmJmNGVkYjU2ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa8A3GXsOSGTOwRjc7cfiqFdFhzKY4aL8ESzKopGZr+4I1vFypBrAHG bMHoBw86LkYD/FwkagTnx7sdqSRvbhQDkqLpyEJzsK9fRTRa671cXHdRvkr9zw3g rYGFFf+Q265A/OvM9UrBCFWxkTkm2ob/gLfybTEykO4lXRKt4yrWYAWeHSft0jS0 3pIpFbIn2aDRw4m8S3OxXQFh+XLawghdWlWNCyMv+zgTOu93llP8PixliYxnEiaR oizUd655f0zWEXEYsJ5rx6mAChJJfooD7UiKi2B99eCxK2rxd71TTR/kusfNwtjB FmuDSO1tz99l1QD57tsT+FfFVoh2MIg= -----END CERTIFICATE-----Generated at Wed Sep 23 05:15:46 2026 by rpki-client