$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5578cce7-0617-3135-8d8e-805deb414c54.roa File: 5578cce7-0617-3135-8d8e-805deb414c54.roa (raw, json) Hash identifier: f45DjKiysCZsOpiHXUoHnTYe43XAXwPNsfrU7woT6y0= Subject key identifier: 49:C7:16:93:69:B0:3C:CA:FD:09:06:6C:72:02:7F:E4:AE:63:8A:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD66D1F2BA340994025580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5578cce7-0617-3135-8d8e-805deb414c54.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.108.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:66:d1:f2:ba:34:09:94:02:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=253b7a09-55e1-4bc1-bd24-85d18577552f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:a4:fe:4c:81:61:01:28:ac:6a:d3:e4:05: cd:0f:22:da:82:fe:6d:8c:ec:8f:a7:3a:90:6e:e5: 73:ef:be:e7:28:9a:96:52:65:dc:49:cb:78:2d:86: 49:83:10:81:5a:2d:57:53:8f:f4:09:bf:22:f7:ab: 78:5a:5a:98:a3:ae:47:c6:58:c2:f5:94:41:8b:4d: 7e:bd:61:2c:16:ae:25:3e:d4:ca:e7:54:b0:58:e3: c2:c6:58:38:83:b2:ba:20:f0:8f:68:58:c8:7b:f7: 68:dc:3b:22:03:b2:7b:b2:4f:be:22:73:16:52:5b: 4e:96:59:8e:21:01:48:8f:8f:b3:84:c2:b1:71:31: f7:d8:b6:e5:a8:f0:a9:64:f7:d1:5a:51:b6:86:8e: 49:e4:08:53:0c:75:39:49:a8:be:9d:6c:41:2e:60: 2b:e9:35:de:e8:d3:49:87:20:c3:63:c0:a6:28:04: 82:1e:07:97:b2:5c:50:43:8f:cd:8d:09:3e:1f:bc: 28:48:7c:4f:7e:23:61:a6:bf:e9:38:24:cc:02:b6: 7a:eb:6d:57:46:fd:ce:4a:f4:45:11:b8:a2:38:c7: 7d:3d:bf:71:1b:57:89:5e:59:29:2c:3f:97:64:91: 83:47:ad:eb:6f:6f:d2:ac:75:39:5e:46:99:48:e2: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:16:93:69:B0:3C:CA:FD:09:06:6C:72:02:7F:E4:AE:63:8A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5578cce7-0617-3135-8d8e-805deb414c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:71:56:ea:72:6e:ff:96:8e:62:4c:06:63:52:85:45:7c:f0: 8e:2b:0a:fb:67:6c:40:9e:1f:df:31:f6:ce:8a:f5:5e:39:f0: e8:d4:f1:04:e0:9f:9f:0d:8a:0f:0f:a2:b4:57:60:0b:7f:b3: eb:43:52:95:dd:a7:d7:4a:e4:73:85:66:13:6d:73:88:3c:5f: c4:30:a7:15:5c:b7:e1:d3:3e:7c:78:19:b9:22:dc:4f:b5:90: 7c:69:c9:35:94:b2:ae:42:75:00:36:3c:47:a3:63:9e:88:2e: a7:10:23:fb:f0:16:a1:ef:81:33:5e:20:b9:49:ef:5e:8a:1f: 25:71:c8:60:6d:d3:12:67:18:15:ac:3c:26:9d:3c:e9:20:70: 92:50:50:47:4b:0c:cb:06:1c:a4:95:45:e9:83:45:20:77:75: 7e:2b:32:55:e6:07:7d:b7:fe:ed:ad:65:c5:21:84:34:35:bf: 3c:92:a6:dd:4a:31:93:74:c3:44:5e:a8:3b:b1:ae:f8:f0:93: 91:35:f2:70:a9:a2:c4:d1:d4:51:3d:14:3d:44:6b:96:15:ce: e3:5f:8d:7e:46:94:dc:d0:b4:00:cf:95:15:8e:71:35:d1:2a: ac:24:a4:00:93:95:8c:2d:91:c5:37:8a:1d:d3:d2:ae:0d:0f: 69:4d:e9:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3WbR8ro0CZQCVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjUzYjdhMDktNTVlMS00YmMxLWJkMjQtODVkMTg1Nzc1NTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDWk/kyBYQEorGrT5AXNDyLagv5tjOyPpzqQ buVz777nKJqWUmXcSct4LYZJgxCBWi1XU4/0Cb8i96t4WlqYo65HxljC9ZRBi01+ vWEsFq4lPtTK51SwWOPCxlg4g7K6IPCPaFjIe/do3DsiA7J7sk++InMWUltOllmO IQFIj4+zhMKxcTH32LblqPCpZPfRWlG2ho5J5AhTDHU5Sai+nWxBLmAr6TXe6NNJ hyDDY8CmKASCHgeXslxQQ4/NjQk+H7woSHxPfiNhpr/pOCTMArZ6621XRv3OSvRF EbiiOMd9Pb9xG1eJXlkpLD+XZJGDR63rb2/SrHU5XkaZSOIxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnHFpNpsDzK/QkGbHICf+SuY4qJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTU3OGNjZTctMDYxNy0z MTM1LThkOGUtODA1ZGViNDE0YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5xVupybv+WjmJMBmNShUV88I4rCvtnbECeH98x9s6K9V458OjU8QTg n58Nig8PorRXYAt/s+tDUpXdp9dK5HOFZhNtc4g8X8QwpxVct+HTPnx4Gbki3E+1 kHxpyTWUsq5CdQA2PEejY56ILqcQI/vwFqHvgTNeILlJ716KHyVxyGBt0xJnGBWs PCadPOkgcJJQUEdLDMsGHKSVRemDRSB3dX4rMlXmB323/u2tZcUhhDQ1vzySpt1K MZN0w0ReqDuxrvjwk5E18nCposTR1FE9FD1Ea5YVzuNfjX5GlNzQtADPlRWOcTXR KqwkpACTlYwtkcU3ih3T0q4ND2lN6Y0= -----END CERTIFICATE-----Generated at Thu Sep 24 23:05:37 2026 by rpki-client