$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e2f399-7490-30ce-bf75-07fdd781529e.roa File: 09e2f399-7490-30ce-bf75-07fdd781529e.roa (raw, json) Hash identifier: UaTmd+rlw/r6dqDrNMG7Df1FHPghlZcn2zu9IbgXtJk= Subject key identifier: CD:3F:04:D1:DA:B3:7A:25:49:EE:58:3C:B7:E4:58:EB:BE:14:C3:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD84AF193B6A311697FF20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e2f399-7490-30ce-bf75-07fdd781529e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.0.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:84:af:19:3b:6a:31:16:97:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=409f42d7-7df6-4ae1-9eb3-47c85bde0d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:60:a0:71:74:cd:47:5f:07:5c:60:61:56: 96:a4:8c:5d:0a:5e:56:33:0a:1f:d2:1e:74:ef:67: 2d:7e:1c:bc:f9:15:61:ab:da:d0:75:04:07:e9:8c: ad:d5:73:87:3e:ea:dc:2d:3c:f1:3e:92:19:ea:c3: 75:f9:96:fe:a3:05:72:1a:13:4f:40:94:44:90:af: 46:e9:22:11:23:46:95:82:f6:fe:7c:89:48:86:41: 42:7e:74:e3:a2:cd:f2:ae:71:11:bd:2b:6d:64:67: 77:04:fc:cd:00:da:b0:a1:79:15:9d:cb:10:6e:ce: b9:ad:a0:59:8f:fa:71:62:31:99:d5:0a:b5:02:71: 2d:e9:b5:74:3f:13:1e:ba:47:2a:00:a4:3e:b7:fd: 59:d2:08:e5:9a:cc:7a:55:91:a4:5c:05:83:e0:34: 59:2d:ad:87:7e:de:6b:55:67:c0:49:b7:07:d9:00: b5:bd:45:a2:3f:65:e9:70:5f:46:22:f9:c4:7b:8e: d0:91:6e:f2:97:8c:6d:f6:7a:ec:4e:44:bb:c3:3e: 27:4d:68:52:7f:40:97:c2:89:9a:a2:90:35:d4:11: 11:55:df:26:3e:71:6b:5c:82:ae:b7:7a:ce:08:c1: a5:42:67:b6:67:5d:a9:99:06:3b:d7:7f:5f:14:e0: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:04:D1:DA:B3:7A:25:49:EE:58:3C:B7:E4:58:EB:BE:14:C3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e2f399-7490-30ce-bf75-07fdd781529e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:40:cb:9f:39:48:80:6f:49:c4:3f:9b:5e:2b:08:18:76:28: 4e:63:e5:ed:6d:d8:32:72:dd:d9:37:a8:0e:66:45:ce:a3:70: 45:a6:eb:28:90:09:48:c4:c4:b2:34:4f:ae:bd:eb:91:f7:2d: 84:b0:33:14:fd:48:0d:ca:fe:eb:2a:89:b9:0b:54:7e:e1:58: 9c:f4:ca:58:eb:b6:b0:f4:03:47:7a:5d:c2:af:2e:53:31:1a: 03:49:c3:8d:61:e9:da:27:38:4e:44:b0:2f:e9:04:45:55:4f: f1:22:9f:1c:15:74:45:f0:f1:47:87:6f:c2:4d:f3:94:de:64: b8:32:b1:6c:e7:e9:bf:2f:db:6c:5e:a1:bd:fd:26:66:03:8a: 87:c4:8c:b1:f6:68:4f:05:81:46:1f:b5:2f:64:63:ba:eb:ac: ab:d4:89:17:0b:af:db:12:fa:ad:20:68:0b:de:ed:b4:c2:1b: 4b:4d:86:d4:bb:a0:08:4e:58:52:ba:c1:65:29:20:e1:7d:2d: 9c:22:d4:7a:42:d9:b4:e9:e9:ff:88:e3:fa:3a:d5:29:65:00: 93:10:1d:5d:aa:f0:a8:f0:2d:86:dd:c0:68:81:18:88:56:05: 09:35:58:10:51:e9:04:9a:c4:0f:bd:1c:82:44:65:42:fd:81: d8:70:be:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYSvGTtqMRaX/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NDA5ZjQyZDctN2RmNi00YWUxLTllYjMtNDdjODViZGUwZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDtgoHF0zUdfB1xgYVaWpIxdCl5WMwof0h50 72ctfhy8+RVhq9rQdQQH6Yyt1XOHPurcLTzxPpIZ6sN1+Zb+owVyGhNPQJREkK9G 6SIRI0aVgvb+fIlIhkFCfnTjos3yrnERvSttZGd3BPzNANqwoXkVncsQbs65raBZ j/pxYjGZ1Qq1AnEt6bV0PxMeukcqAKQ+t/1Z0gjlmsx6VZGkXAWD4DRZLa2Hft5r VWfASbcH2QC1vUWiP2XpcF9GIvnEe47QkW7yl4xt9nrsTkS7wz4nTWhSf0CXwoma opA11BERVd8mPnFrXIKut3rOCMGlQme2Z12pmQY7139fFOCOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0/BNHas3olSe5YPLfkWOu+FMOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDllMmYzOTktNzQ5MC0z MGNlLWJmNzUtMDdmZGQ3ODE1MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpAy585SIBvScQ/m14rCBh2KE5j5e1t2DJy3dk3qA5mRc6jcEWm6yiQ CUjExLI0T66965H3LYSwMxT9SA3K/usqibkLVH7hWJz0yljrtrD0A0d6XcKvLlMx GgNJw41h6donOE5EsC/pBEVVT/EinxwVdEXw8UeHb8JN85TeZLgysWzn6b8v22xe ob39JmYDiofEjLH2aE8FgUYftS9kY7rrrKvUiRcLr9sS+q0gaAve7bTCG0tNhtS7 oAhOWFK6wWUpIOF9LZwi1HpC2bTp6f+I4/o61SllAJMQHV2q8KjwLYbdwGiBGIhW BQk1WBBR6QSaxA+9HIJEZUL9gdhwviA= -----END CERTIFICATE-----Generated at Tue Sep 22 21:16:12 2026 by rpki-client