$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/68cdfd1c-7a87-31e4-8eeb-f2f05c6db357.roa File: 68cdfd1c-7a87-31e4-8eeb-f2f05c6db357.roa (raw, json) Hash identifier: EFsRnuEy7Ctu6cWkICGO4gzc7yUL9Zou8INl9WezAoA= Subject key identifier: 24:07:AA:1B:9D:66:77:C5:14:73:F8:D6:CB:D1:E0:FD:E1:6C:33:35 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584F19FCF1E5A44DDCFDA2459780 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/68cdfd1c-7a87-31e4-8eeb-f2f05c6db357.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 2763 IP address blocks: 153.72.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f1:e5:a4:4d:dc:fd:a2:45:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=30e49f7e-2ae4-4179-b0c3-a8fe7fa8078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:7f:75:1d:49:af:5b:82:a0:11:45:48:26: b7:e3:91:f2:07:f3:63:01:06:3b:fb:ed:96:50:7a: f4:1e:54:c3:04:0b:6d:4e:db:0e:4e:e9:74:55:2c: 66:1c:5d:5e:9c:e0:ca:a8:9c:41:2a:99:b4:43:13: 35:a6:e7:71:d0:33:b0:2f:8d:0f:7c:95:04:0e:ab: 0b:1b:26:6a:d1:05:b2:7a:7a:f0:d0:db:32:00:1a: 58:bd:66:94:9a:d0:f6:b5:13:9c:05:70:8c:d2:71: 75:52:44:97:d1:69:f0:aa:b7:e9:aa:e0:1e:af:5d: 8e:3d:b0:38:33:53:fe:c3:9e:92:32:8d:52:d9:a6: 9a:b4:42:ab:ee:ff:db:c1:63:28:cc:5e:fb:82:d3: 05:1a:42:c4:8a:e9:22:0f:1b:f3:6b:f7:43:aa:e0: 48:a6:a9:8a:21:ed:6d:c7:27:6f:11:88:fe:03:a5: d3:61:26:cd:3e:6a:0a:b3:1b:24:c9:7e:79:bb:41: da:b7:7c:b7:bc:2b:8d:34:82:6d:ae:e9:f1:ca:83: ec:63:df:7b:17:ba:2f:2a:2e:01:56:fe:cf:58:40: cb:6e:34:11:18:66:a9:54:05:69:74:96:33:63:89: e7:a8:bd:08:73:84:5b:02:6d:c1:7f:88:bc:da:aa: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:07:AA:1B:9D:66:77:C5:14:73:F8:D6:CB:D1:E0:FD:E1:6C:33:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/68cdfd1c-7a87-31e4-8eeb-f2f05c6db357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 153.72.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4e:f9:97:1f:5c:ca:4c:23:b1:d8:ba:22:d2:b5:62:ac:e8: b7:69:0a:27:d3:b9:53:3b:8e:72:69:04:cd:c8:52:35:26:78: 33:54:dc:cf:74:4e:8c:e6:c2:34:80:43:50:6e:26:d8:85:71: eb:5f:8c:e2:1b:49:1a:be:f0:fc:64:70:df:de:6d:1d:cc:19: c7:a3:18:06:0c:93:c7:16:fd:a2:3c:e6:80:40:24:58:08:c8: eb:00:e2:ff:db:83:c6:78:c7:40:f4:c9:66:c9:0d:cd:ad:5e: 7e:35:98:81:9e:26:35:56:8c:61:dd:b1:66:be:3e:54:03:21: 65:7a:ec:48:6a:b1:8a:8c:83:bd:55:6c:e0:b6:ce:05:c9:23: 91:3c:9c:9e:4a:0e:6b:56:97:be:84:4c:41:8e:18:fa:0d:2f: 89:81:68:de:d4:53:5b:52:57:dd:d4:b6:da:96:3e:1f:67:23: 24:b7:ae:71:23:a4:72:81:f4:43:3e:4f:6f:d5:d3:03:e3:8f: a9:fb:23:2e:74:cd:df:0d:42:06:34:0a:94:cf:22:c0:65:36: 79:67:95:29:75:c5:c9:85:0e:fa:38:dd:c1:6a:8f:f8:35:2a: 64:fe:98:b3:83:02:42:4c:4e:4a:8e:c7:6a:54:27:69:99:39: b3:82:e4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PHlpE3c/aJFl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MzBlNDlmN2UtMmFlNC00MTc5LWIwYzMtYThmZTdmYTgwNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlZ/dR1Jr1uCoBFFSCa345HyB/NjAQY7++2W UHr0HlTDBAttTtsOTul0VSxmHF1enODKqJxBKpm0QxM1pudx0DOwL40PfJUEDqsL GyZq0QWyenrw0NsyABpYvWaUmtD2tROcBXCM0nF1UkSX0WnwqrfpquAer12OPbA4 M1P+w56SMo1S2aaatEKr7v/bwWMozF77gtMFGkLEiukiDxvza/dDquBIpqmKIe1t xydvEYj+A6XTYSbNPmoKsxskyX55u0Hat3y3vCuNNIJtrunxyoPsY997F7ovKi4B Vv7PWEDLbjQRGGapVAVpdJYzY4nnqL0Ic4RbAm3Bf4i82qoVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQHqhudZnfFFHP41svR4P3hbDM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNjhjZGZkMWMtN2E4Ny0z MWU0LThlZWItZjJmMDVjNmRiMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmUjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtO+ZcfXMpMI7HYuiLStWKs6LdpCifTuVM7jnJpBM3IUjUmeDNU3M90 TozmwjSAQ1BuJtiFcetfjOIbSRq+8PxkcN/ebR3MGcejGAYMk8cW/aI85oBAJFgI yOsA4v/bg8Z4x0D0yWbJDc2tXn41mIGeJjVWjGHdsWa+PlQDIWV67EhqsYqMg71V bOC2zgXJI5E8nJ5KDmtWl76ETEGOGPoNL4mBaN7UU1tSV93UttqWPh9nIyS3rnEj pHKB9EM+T2/V0wPjj6n7Iy50zd8NQgY0CpTPIsBlNnlnlSl1xcmFDvo43cFqj/g1 KmT+mLODAkJMTkqOx2pUJ2mZObOC5GQ= -----END CERTIFICATE-----Generated at Sat Sep 26 05:57:55 2026 by rpki-client