$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08b35b9f-924e-3ae3-aebe-76d214bd378e.roa File: 08b35b9f-924e-3ae3-aebe-76d214bd378e.roa (raw, json) Hash identifier: 9Ou3tgMRYrULJ5Ykvpkp9YDMwexM/B9p/cZKbBhXluA= Subject key identifier: A8:6F:B5:5F:2D:6F:49:A0:60:86:EF:63:D8:51:28:D4:95:1A:C8:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F411283F54E0B45932FDB92C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08b35b9f-924e-3ae3-aebe-76d214bd378e.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.231.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:83:f5:4e:0b:45:93:2f:db:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=8669ad91-aac6-4c70-8edd-d4bcc3a896dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:5e:27:2e:35:d4:61:71:c3:11:b9:9b:c7: 21:ec:88:28:9b:3a:f0:7b:0d:63:46:fe:8c:50:c4: eb:8f:0f:79:1a:84:ce:58:a1:74:c7:00:c8:8d:34: e9:7b:a1:79:e6:ee:6d:7b:53:7e:31:2d:5f:ea:05: 11:c3:e5:76:d8:42:bf:5d:7f:bd:e1:16:91:4e:dc: 2e:02:12:bf:be:ea:08:5c:12:13:ee:f1:b9:74:65: 77:4c:ae:eb:91:6f:53:be:9c:8b:50:a3:84:2b:84: 19:b0:e1:7f:75:6f:9b:19:6f:1e:2c:5e:3b:48:57: b4:2f:a0:6f:de:1e:57:c2:36:7b:11:30:43:2f:1f: 5a:f2:48:a4:6f:a4:23:fe:4d:a8:25:2d:f5:1a:54: f4:97:ad:da:f7:32:10:86:27:69:8d:bc:ef:4d:b6: 8f:69:2b:13:dd:95:37:7d:f6:c3:8b:b9:74:14:12: 7c:f1:c0:87:12:b2:a5:d2:b4:74:2b:4c:35:64:88: bc:34:91:6e:7f:2e:cd:56:40:bb:e8:c9:87:32:d0: da:f0:d3:e2:bd:ee:50:1f:a4:35:61:02:75:0d:a6: 01:94:96:3d:d4:65:2c:7b:ec:75:aa:ca:81:6a:9b: 95:25:58:e5:ae:42:18:06:b3:bd:69:a7:91:3d:69: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:B5:5F:2D:6F:49:A0:60:86:EF:63:D8:51:28:D4:95:1A:C8:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08b35b9f-924e-3ae3-aebe-76d214bd378e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:60:8e:15:c7:3d:f3:72:08:a3:91:65:f0:4d:7c:bb:fc:97: 7d:0e:4d:1d:08:df:04:cf:c9:13:32:50:1d:0d:f0:73:be:e0: a6:ea:ab:e3:f0:84:8c:ac:5b:97:c9:bc:8f:0d:e7:5e:64:3c: 65:0f:b4:d6:51:a2:b5:bd:23:b6:f5:4a:dc:6c:d2:a5:df:e9: 79:b2:c4:12:99:55:4f:0f:8c:eb:88:ff:c2:30:39:1e:92:20: af:75:a4:6e:71:c1:00:7b:00:77:21:22:0c:62:eb:7f:58:fd: 55:dd:60:e2:b8:f4:d1:1e:65:36:11:8b:18:26:94:45:14:49: 75:7b:b9:41:ec:41:97:31:d9:e2:4c:39:10:aa:53:03:3d:36: 04:01:82:9c:eb:53:3d:18:dc:3b:0a:7e:a5:16:8b:de:eb:da: fc:52:50:d7:20:09:1d:e7:25:09:84:33:e4:d1:17:76:f9:eb: dd:40:3b:aa:ee:b5:af:a3:ea:89:38:98:c5:98:30:4b:6d:ef: 1f:63:80:fc:b1:7d:66:38:c1:d1:02:59:5d:a5:4f:de:be:0f: ad:dc:23:1c:80:d6:d1:33:d7:9d:32:6c:ad:ae:56:49:1e:bc: 28:34:f0:c2:d7:80:68:44:dc:54:8e:0b:e6:03:43:44:34:e7: 0c:c4:68:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoP1TgtFky/bksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODY2OWFkOTEtYWFjNi00YzcwLThlZGQtZDRiY2MzYTg5NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkndeJy411GFxwxG5m8ch7Igomzrwew1jRv6M UMTrjw95GoTOWKF0xwDIjTTpe6F55u5te1N+MS1f6gURw+V22EK/XX+94RaRTtwu AhK/vuoIXBIT7vG5dGV3TK7rkW9TvpyLUKOEK4QZsOF/dW+bGW8eLF47SFe0L6Bv 3h5XwjZ7ETBDLx9a8kikb6Qj/k2oJS31GlT0l63a9zIQhidpjbzvTbaPaSsT3ZU3 ffbDi7l0FBJ88cCHErKl0rR0K0w1ZIi8NJFufy7NVkC76MmHMtDa8NPive5QH6Q1 YQJ1DaYBlJY91GUse+x1qsqBapuVJVjlrkIYBrO9aaeRPWk8/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhvtV8tb0mgYIbvY9hRKNSVGsgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDhiMzViOWYtOTI0ZS0z YWUzLWFlYmUtNzZkMjE0YmQzNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBgjhXHPfNyCKORZfBNfLv8l30OTR0I3wTPyRMyUB0N8HO+4Kbqq+Pw hIysW5fJvI8N515kPGUPtNZRorW9I7b1Stxs0qXf6XmyxBKZVU8PjOuI/8IwOR6S IK91pG5xwQB7AHchIgxi639Y/VXdYOK49NEeZTYRixgmlEUUSXV7uUHsQZcx2eJM ORCqUwM9NgQBgpzrUz0Y3DsKfqUWi97r2vxSUNcgCR3nJQmEM+TRF3b5691AO6ru ta+j6ok4mMWYMEtt7x9jgPyxfWY4wdECWV2lT96+D63cIxyA1tEz150ybK2uVkke vCg08MLXgGhE3FSOC+YDQ0Q05wzEaMo= -----END CERTIFICATE-----Generated at Tue Sep 22 18:15:39 2026 by rpki-client