$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa File: 4c1430d9-02cb-3481-8505-5f2be0891f36.roa (raw, json) Hash identifier: B47wF+CiYIsMcUK1SbuByOw1zgEWlSpzT3wTc09V2To= Subject key identifier: 4A:43:D3:AF:14:59:D4:1B:08:04:6A:C3:C9:76:D3:BB:0E:11:7F:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD396AAFA2AA88887B9D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:39:6a:af:a2:aa:88:88:7b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=22e7ea51-495e-49b9-865d-a4a8b31ea508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:cd:a5:65:f1:27:71:7a:b3:7b:fc:45:bd: 61:b6:7c:17:4c:9e:09:65:18:55:b6:75:fb:13:1d: 51:ab:be:93:f9:29:77:76:63:2f:6a:03:97:b8:de: 47:9c:97:0f:06:4b:d4:a4:a0:4a:8c:41:f5:7c:75: b0:bf:84:ef:c5:01:7c:6e:6b:d2:02:b6:ce:3c:4c: aa:4c:60:64:57:1b:08:de:94:36:15:be:b4:9d:1b: 09:00:d8:ae:7e:bb:1f:69:c3:ca:2b:44:b3:38:3d: 77:3b:45:c4:7a:32:f3:f9:8f:2a:23:60:ad:fd:42: fa:5c:1c:ee:f9:d0:15:7e:40:bc:84:c9:a6:b2:69: e6:f7:3a:05:c7:b1:0b:cf:00:ff:8a:03:8e:80:a4: ce:d7:7d:81:52:8b:87:43:ce:78:80:70:61:ac:bc: 07:af:ec:17:33:4a:9e:7a:af:97:2e:8e:ac:c5:a9: 10:bc:20:ce:a2:6b:b3:1d:58:e6:f5:5c:33:48:c6: 3b:d5:75:62:c9:56:e4:71:d0:54:53:78:12:74:37: 01:f6:41:d3:25:2b:1c:af:ec:f2:8c:1e:9d:7a:03: 4d:46:78:75:88:a3:9e:e6:98:b5:d2:e4:6e:15:cf: 41:a3:7f:9c:8e:8f:29:d5:e8:a5:9a:be:f5:5f:c0: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:D3:AF:14:59:D4:1B:08:04:6A:C3:C9:76:D3:BB:0E:11:7F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9d:02:0f:7c:2a:01:59:3e:9b:f5:02:2a:47:94:91:5f:88: 98:bb:e9:78:33:8a:75:e6:c3:ea:c4:eb:88:7a:56:a7:f3:7a: e8:d6:ba:34:ab:b8:fa:68:d5:c2:7b:75:5a:01:b0:2b:ce:27: 2d:db:c3:15:3c:2a:d0:29:1e:36:f4:b4:ce:e8:f9:da:7b:6e: c9:80:65:26:16:5f:22:61:9c:ec:f1:83:69:d1:e7:fe:7d:9b: 0e:11:db:35:75:8f:9e:a6:c0:3a:a4:a7:b5:67:ce:1f:2c:5c: c9:17:85:c0:d4:f5:7b:a0:28:ab:36:23:48:9f:2c:24:b7:91: 52:9f:39:21:79:56:2a:bf:3d:61:ec:7e:e0:c8:96:bb:12:18: 7c:b6:fc:39:17:58:a1:5a:5b:c7:aa:27:d4:c7:31:d9:6a:0b: 89:5a:b3:97:80:bc:65:65:2e:40:f7:53:64:76:a7:ed:62:5d: a5:ea:31:1b:e8:22:4d:d7:fd:cb:56:52:64:53:0c:1a:c3:36: 0b:c3:d7:b9:17:be:3f:00:cc:09:a1:75:a3:d0:57:27:2f:96: 9d:83:bb:e9:a7:ff:e2:e0:2e:ba:85:61:5b:b0:ea:4a:13:80: ea:d0:7c:0c:0e:b4:1a:26:a4:fb:26:42:4c:4f:22:d1:f9:2c: e3:86:39:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTlqr6KqiIh7nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjJlN2VhNTEtNDk1ZS00OWI5LTg2NWQtYTRhOGIzMWVhNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWfNpWXxJ3F6s3v8Rb1htnwXTJ4JZRhVtnX7 Ex1Rq76T+Sl3dmMvagOXuN5HnJcPBkvUpKBKjEH1fHWwv4TvxQF8bmvSArbOPEyq TGBkVxsI3pQ2Fb60nRsJANiufrsfacPKK0SzOD13O0XEejLz+Y8qI2Ct/UL6XBzu +dAVfkC8hMmmsmnm9zoFx7ELzwD/igOOgKTO132BUouHQ854gHBhrLwHr+wXM0qe eq+XLo6sxakQvCDOomuzHVjm9VwzSMY71XViyVbkcdBUU3gSdDcB9kHTJSscr+zy jB6degNNRnh1iKOe5pi10uRuFc9Bo3+cjo8p1eilmr71X8AiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpD068UWdQbCARqw8l207sOEX+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGMxNDMwZDktMDJjYi0z NDgxLTg1MDUtNWYyYmUwODkxZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSdAg98KgFZPpv1AipHlJFfiJi76XgzinXmw+rE64h6VqfzeujWujSr uPpo1cJ7dVoBsCvOJy3bwxU8KtApHjb0tM7o+dp7bsmAZSYWXyJhnOzxg2nR5/59 mw4R2zV1j56mwDqkp7Vnzh8sXMkXhcDU9XugKKs2I0ifLCS3kVKfOSF5Viq/PWHs fuDIlrsSGHy2/DkXWKFaW8eqJ9THMdlqC4las5eAvGVlLkD3U2R2p+1iXaXqMRvo Ik3X/ctWUmRTDBrDNgvD17kXvj8AzAmhdaPQVycvlp2Du+mn/+LgLrqFYVuw6koT gOrQfAwOtBompPsmQkxPItH5LOOGOa8= -----END CERTIFICATE-----Generated at Fri Sep 25 04:29:37 2026 by rpki-client