$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddc945a-a198-3782-83e6-4208fe300ee0.roa File: 4ddc945a-a198-3782-83e6-4208fe300ee0.roa (raw, json) Hash identifier: PMxS2z2HhfwN8NXhQs/IrVnCPMXHJdSRU8e2m0xn3jw= Subject key identifier: EB:D2:65:36:E2:18:29:33:94:26:2A:9E:3C:36:AF:F8:16:F2:0A:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD75CCC163B3E2851872C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddc945a-a198-3782-83e6-4208fe300ee0.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.104.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:75:cc:c1:63:b3:e2:85:18:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=e1ad5183-54cb-4ed4-8686-4973b928bb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:44:1b:c1:e9:6d:ec:d6:01:e1:0b:70:4c: ae:e9:82:af:9c:37:20:fc:fc:3d:c8:9c:df:f5:49: cd:ab:9a:1e:2d:73:fa:c4:f7:64:a3:7b:e0:f7:04: 2b:9e:77:f9:57:5b:1c:f6:4e:a6:99:d0:80:86:15: 3a:1e:ec:0c:fb:48:94:e8:96:f6:92:df:f9:1b:10: c7:08:e8:26:07:37:11:15:e8:08:95:55:ae:49:f8: 66:ce:65:a2:c5:ad:c8:87:c5:fd:d0:fd:7b:37:f6: 51:a0:94:8c:69:46:e2:f7:07:14:47:02:d3:45:01: 11:ad:f2:f5:3f:33:d2:7c:39:4e:c8:e7:0b:d6:7a: b2:8b:e3:c4:9d:fb:8e:69:b6:ee:e7:ef:35:96:68: 65:ba:67:1f:e1:cb:d2:82:15:05:53:9a:c5:d2:85: 80:4a:c6:cc:c4:d9:e2:df:fd:eb:5e:65:75:0e:29: 7e:e8:69:03:67:f2:25:7f:a4:9d:58:fa:08:f5:28: 44:b1:2d:e3:e2:ae:d9:83:0e:72:b4:39:9c:e8:14: 19:d7:3f:54:25:c7:cc:a6:c2:cd:00:b9:37:99:5f: 61:ce:9f:5d:d2:98:a0:ec:45:2e:7a:b3:ab:1b:06: 72:b5:3c:b3:41:1f:6a:ca:fd:32:ac:6c:34:2d:af: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:65:36:E2:18:29:33:94:26:2A:9E:3C:36:AF:F8:16:F2:0A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddc945a-a198-3782-83e6-4208fe300ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:34:2f:0b:39:18:b0:2a:74:1c:0d:8e:26:ca:a7:13:b3:9d: c2:68:59:ec:1a:81:67:53:20:b3:0d:7c:b0:e9:24:e1:94:f4: e3:d1:95:4d:0c:da:2c:5b:e0:14:18:d5:5d:8f:ec:bc:2d:2e: 0f:66:d3:56:b5:1a:06:a8:f3:14:eb:f8:58:ba:bc:3c:45:9f: 96:27:c5:34:2c:79:e9:2f:94:19:7a:c8:a2:0c:a8:4c:55:99: 78:ec:cb:bf:79:63:d9:6b:e2:e7:42:1e:58:9d:8f:cf:67:b5: a9:2c:3d:0f:d0:5c:c4:a8:c5:3c:96:67:ad:9b:7e:99:72:1d: fb:8b:15:eb:54:95:55:e5:c8:cd:20:4f:37:cb:75:21:a8:47: e1:26:ba:1d:57:50:a1:af:b1:f6:d1:a0:19:89:af:96:93:c2: a8:6e:65:10:61:55:0e:2f:0f:89:4e:36:d7:d3:4f:07:bc:6b: 14:09:3e:8f:5c:3a:33:2d:97:09:28:57:c4:3c:26:52:c3:31: ec:d9:7c:42:9b:d6:0b:69:26:33:f8:bf:dd:fb:25:38:60:be: c7:46:33:a0:e4:8a:ad:d2:a7:1f:a9:c8:99:57:44:95:2c:fb: c3:0a:dc:9c:b9:73:37:6d:cf:8e:e1:1a:e5:06:da:af:d4:dc: e5:20:1e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3XXMwWOz4oUYcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTFhZDUxODMtNTRjYi00ZWQ0LTg2ODYtNDk3M2I5MjhiYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxlEG8HpbezWAeELcEyu6YKvnDcg/Pw9yJzf 9UnNq5oeLXP6xPdko3vg9wQrnnf5V1sc9k6mmdCAhhU6HuwM+0iU6Jb2kt/5GxDH COgmBzcRFegIlVWuSfhmzmWixa3Ih8X90P17N/ZRoJSMaUbi9wcURwLTRQERrfL1 PzPSfDlOyOcL1nqyi+PEnfuOabbu5+81lmhlumcf4cvSghUFU5rF0oWASsbMxNni 3/3rXmV1Dil+6GkDZ/Ilf6SdWPoI9ShEsS3j4q7Zgw5ytDmc6BQZ1z9UJcfMpsLN ALk3mV9hzp9d0pig7EUuerOrGwZytTyzQR9qyv0yrGw0La+MmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvSZTbiGCkzlCYqnjw2r/gW8gqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRkYzk0NWEtYTE5OC0z NzgyLTgzZTYtNDIwOGZlMzAwZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE40Lws5GLAqdBwNjibKpxOzncJoWewagWdTILMNfLDpJOGU9OPRlU0M 2ixb4BQY1V2P7LwtLg9m01a1Ggao8xTr+Fi6vDxFn5YnxTQseekvlBl6yKIMqExV mXjsy795Y9lr4udCHlidj89ntaksPQ/QXMSoxTyWZ62bfplyHfuLFetUlVXlyM0g TzfLdSGoR+Emuh1XUKGvsfbRoBmJr5aTwqhuZRBhVQ4vD4lONtfTTwe8axQJPo9c OjMtlwkoV8Q8JlLDMezZfEKb1gtpJjP4v937JThgvsdGM6Dkiq3Spx+pyJlXRJUs +8MK3Jy5czdtz47hGuUG2q/U3OUgHis= -----END CERTIFICATE-----Generated at Thu Sep 24 13:51:03 2026 by rpki-client