$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fb5dc3d-4266-3c71-8955-95f5bfa1e1d3.roa File: 4fb5dc3d-4266-3c71-8955-95f5bfa1e1d3.roa (raw, json) Hash identifier: 14cgqXmG3fzIUZBEDxxDj3dd/vp4IRRhCBe3XToIC0I= Subject key identifier: 40:C9:33:0B:DF:4F:6C:7C:D9:B0:82:44:5A:8F:05:03:20:22:88:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A65761E88C94AA7830E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fb5dc3d-4266-3c71-8955-95f5bfa1e1d3.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.227.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a6:57:61:e8:8c:94:aa:78:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=dbfa3742-39eb-4ae6-8f47-306130cd92f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:38:97:92:15:be:41:d2:70:83:e5:b1:2a: 85:23:a8:40:ab:da:53:91:ad:99:d2:dd:ff:14:83: 5e:a2:91:17:32:21:4e:19:ea:82:03:c2:69:1a:46: 85:c9:da:62:bf:e9:ed:da:c6:6b:02:73:b1:b6:c5: a0:1f:9a:48:e7:4c:8d:68:b8:96:de:9f:da:cb:e2: 00:38:1b:56:aa:66:5d:4b:8c:f7:c7:67:ed:e5:02: 1d:96:69:1f:06:1f:95:51:53:ca:15:06:6c:ae:df: e5:2b:90:7e:3b:a8:8b:35:a2:af:98:2c:d7:c8:01: 91:47:2f:18:fa:a6:ed:18:24:ff:ec:5b:aa:ca:e5: 35:d5:40:ac:a9:ea:0d:0e:fc:76:3d:ee:da:71:ef: f7:2e:4a:0b:67:35:35:8a:55:6c:60:00:87:9d:e1: 1d:67:42:0b:a9:a2:57:df:53:8f:2b:fc:5c:ca:b5: d1:13:b8:bb:4a:1d:7c:fd:73:44:42:d6:70:7b:fe: 96:48:95:a5:ef:b2:d6:e2:14:d0:94:5a:50:6b:79: 45:20:17:b6:ec:b5:1b:97:fc:f3:b1:04:5d:af:d6: 07:68:7c:c2:40:f5:8f:07:d0:4b:b8:c8:bc:2e:4e: c3:78:21:74:d9:95:30:1b:bb:bd:ac:f5:c4:12:59: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C9:33:0B:DF:4F:6C:7C:D9:B0:82:44:5A:8F:05:03:20:22:88:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fb5dc3d-4266-3c71-8955-95f5bfa1e1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:30:ea:01:53:f9:71:d3:a7:2c:fb:24:39:5b:09:b1:1a:91: 84:81:5e:17:8d:85:fc:0b:5f:1a:f8:ad:a9:62:bc:e3:35:dd: 27:a1:1d:92:e4:f2:4a:4e:0f:5a:06:fd:0b:65:43:2f:9c:4f: 70:de:62:7c:be:13:40:0e:1b:ef:29:93:07:64:1a:65:3a:ca: ff:07:44:5f:f8:ae:ed:ad:0c:be:88:6c:bd:78:1d:8a:6a:73: 3f:7a:39:0b:c0:14:75:ea:68:7b:e1:ff:f9:59:e7:8b:3b:0f: 7e:e2:74:27:67:41:4f:b0:57:0a:39:a8:49:89:b4:1c:28:8e: 12:7c:f9:3a:98:ec:f6:ef:2a:c6:f0:da:b5:21:4d:a6:5f:df: 47:d1:a1:ef:17:33:97:7a:ff:60:42:11:3d:0e:3a:df:ec:a3: 53:ad:1e:b1:7a:06:22:3c:cb:be:d1:09:70:04:e5:87:72:3b: 14:17:1c:74:7b:fa:42:58:a1:67:33:ff:5a:6e:7d:c2:97:32: 52:df:3e:23:27:95:11:fe:ad:dd:1c:26:8b:aa:80:30:df:fe: d0:71:bf:ff:5f:4f:0e:2c:5d:a3:61:3c:91:14:6c:91:b3:0c: 95:bb:6a:b3:da:7e:4c:50:56:21:19:6a:4f:c2:f4:08:ad:b1: fe:53:87:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqZXYeiMlKp4MOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZGJmYTM3NDItMzllYi00YWU2LThmNDctMzA2MTMwY2Q5MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWw4l5IVvkHScIPlsSqFI6hAq9pTka2Z0t3/ FINeopEXMiFOGeqCA8JpGkaFydpiv+nt2sZrAnOxtsWgH5pI50yNaLiW3p/ay+IA OBtWqmZdS4z3x2ft5QIdlmkfBh+VUVPKFQZsrt/lK5B+O6iLNaKvmCzXyAGRRy8Y +qbtGCT/7FuqyuU11UCsqeoNDvx2Pe7ace/3LkoLZzU1ilVsYACHneEdZ0ILqaJX 31OPK/xcyrXRE7i7Sh18/XNEQtZwe/6WSJWl77LW4hTQlFpQa3lFIBe27LUbl/zz sQRdr9YHaHzCQPWPB9BLuMi8Lk7DeCF02ZUwG7u9rPXEElnU0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDJMwvfT2x82bCCRFqPBQMgIohkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZiNWRjM2QtNDI2Ni0z YzcxLTg5NTUtOTVmNWJmYTFlMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgw6gFT+XHTpyz7JDlbCbEakYSBXheNhfwLXxr4ralivOM13SehHZLk 8kpOD1oG/QtlQy+cT3DeYny+E0AOG+8pkwdkGmU6yv8HRF/4ru2tDL6IbL14HYpq cz96OQvAFHXqaHvh//lZ54s7D37idCdnQU+wVwo5qEmJtBwojhJ8+TqY7PbvKsbw 2rUhTaZf30fRoe8XM5d6/2BCET0OOt/so1OtHrF6BiI8y77RCXAE5YdyOxQXHHR7 +kJYoWcz/1pufcKXMlLfPiMnlRH+rd0cJouqgDDf/tBxv/9fTw4sXaNhPJEUbJGz DJW7arPafkxQViEZak/C9Aitsf5Th6o= -----END CERTIFICATE-----Generated at Thu Sep 24 01:50:42 2026 by rpki-client