$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cd39d0-ea95-3d58-9d50-b4e12725907d.roa File: 52cd39d0-ea95-3d58-9d50-b4e12725907d.roa (raw, json) Hash identifier: JlfhwutjGrjGgk0JDLsqHAxZvVkh/X7HyqfjbauW6zg= Subject key identifier: 3C:D7:FF:20:F6:16:5B:F3:DA:70:48:7F:DE:78:7E:7A:4F:F9:E0:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD82AB8D7F069B9A4DAF18 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cd39d0-ea95-3d58-9d50-b4e12725907d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:82:ab:8d:7f:06:9b:9a:4d:af:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=14b032a4-6a38-4001-a5fc-2360a66f5c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:4f:37:fe:d9:13:23:44:59:35:5f:8b:c0: dd:c3:9d:c4:7b:13:5f:74:23:41:f7:c8:e2:db:80: 44:02:b1:2b:66:80:92:82:f6:e2:91:ba:5b:1a:73: 63:96:70:9a:cf:ce:c4:60:78:2a:b9:b9:1b:ee:f3: aa:e4:9f:2e:01:84:9b:ac:30:cb:a5:3c:c6:d5:2c: af:68:f0:7a:91:80:db:b3:97:41:42:56:ff:e5:88: 40:ec:eb:1b:e0:91:e2:ab:e3:71:85:27:00:91:54: 0d:77:c8:5f:bc:f4:8e:19:fc:70:1b:9b:3e:03:bf: 90:11:4c:ac:a1:1f:f7:a5:51:7a:dc:98:38:ac:c0: 96:d5:a7:be:b0:4f:8e:81:ab:6f:24:b9:a4:81:b5: 0b:38:ae:de:c4:ac:f6:0a:9a:ed:af:c9:53:bb:2b: ea:01:77:3e:0c:b2:94:31:40:ab:5c:40:60:41:5e: d7:c8:63:be:ec:dc:c8:7f:e6:4a:85:82:c6:66:87: 1a:3c:31:2b:20:6e:ee:52:7e:6e:41:18:70:fc:e3: 3e:81:5c:0d:c6:72:c2:48:64:29:a1:4b:34:3c:72: a1:67:fb:46:c3:20:57:3f:ef:6e:33:b8:f7:44:60: af:10:4c:4f:3f:0a:92:16:0b:ac:67:d3:3a:33:4e: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:FF:20:F6:16:5B:F3:DA:70:48:7F:DE:78:7E:7A:4F:F9:E0:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cd39d0-ea95-3d58-9d50-b4e12725907d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0d:cf:55:3c:99:7b:3c:11:84:76:6b:73:db:9e:55:4c:42: e6:31:57:5f:a4:2c:b0:33:6e:09:96:73:ae:9f:7d:cc:d0:8f: 40:3a:34:0f:5e:d4:65:4d:6f:a3:3b:06:64:a5:d5:3d:0a:54: 68:40:77:32:d8:73:76:9b:af:51:1e:a1:95:1f:10:9c:4e:0f: d8:f0:38:11:85:40:df:13:74:de:53:27:87:c0:3a:2d:42:1e: f4:f4:ee:7a:d3:a0:98:dd:7d:81:a7:4d:e2:1e:52:eb:4b:5f: f1:2f:1f:5d:f0:7f:a4:fe:35:c5:98:9d:21:b3:2c:d2:16:4d: a8:4f:6f:f4:00:13:84:2e:08:1c:3b:a2:7d:b4:90:77:8c:39: 4a:9d:4b:8c:be:b1:18:2a:29:96:23:c2:de:7f:50:c8:a3:e4: be:65:4d:f3:11:2a:2b:36:d3:c2:2e:3b:b6:e5:e9:c9:cc:e3: 0a:26:03:6a:66:13:aa:0e:36:f9:db:49:3c:16:21:7c:2e:19: 51:8a:dc:3e:c9:e0:52:93:a1:21:5a:a1:2a:54:24:f7:f2:c8: a6:5c:60:4d:09:48:3f:8a:47:d5:6a:d9:66:ed:63:46:20:2f: 30:0f:93:06:26:58:89:5c:4a:84:e2:88:d6:aa:5f:1f:91:a6: ec:cd:05:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYKrjX8Gm5pNrxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MTRiMDMyYTQtNmEzOC00MDAxLWE1ZmMtMjM2MGE2NmY1YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkRPN/7ZEyNEWTVfi8Ddw53EexNfdCNB98ji 24BEArErZoCSgvbikbpbGnNjlnCaz87EYHgqubkb7vOq5J8uAYSbrDDLpTzG1Syv aPB6kYDbs5dBQlb/5YhA7Osb4JHiq+NxhScAkVQNd8hfvPSOGfxwG5s+A7+QEUys oR/3pVF63Jg4rMCW1ae+sE+OgatvJLmkgbULOK7exKz2Cprtr8lTuyvqAXc+DLKU MUCrXEBgQV7XyGO+7NzIf+ZKhYLGZocaPDErIG7uUn5uQRhw/OM+gVwNxnLCSGQp oUs0PHKhZ/tGwyBXP+9uM7j3RGCvEExPPwqSFgusZ9M6M06XSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzX/yD2Flvz2nBIf954fnpP+eCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJjZDM5ZDAtZWE5NS0z ZDU4LTlkNTAtYjRlMTI3MjU5MDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcNz1U8mXs8EYR2a3PbnlVMQuYxV1+kLLAzbgmWc66ffczQj0A6NA9e 1GVNb6M7BmSl1T0KVGhAdzLYc3abr1EeoZUfEJxOD9jwOBGFQN8TdN5TJ4fAOi1C HvT07nrToJjdfYGnTeIeUutLX/EvH13wf6T+NcWYnSGzLNIWTahPb/QAE4QuCBw7 on20kHeMOUqdS4y+sRgqKZYjwt5/UMij5L5lTfMRKis208IuO7bl6cnM4womA2pm E6oONvnbSTwWIXwuGVGK3D7J4FKToSFaoSpUJPfyyKZcYE0JSD+KR9Vq2WbtY0Yg LzAPkwYmWIlcSoTiiNaqXx+RpuzNBew= -----END CERTIFICATE-----Generated at Wed Sep 23 12:48:11 2026 by rpki-client