$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa File: 0ca916f1-6d85-3673-b12b-b1116a389d28.roa (raw, json) Hash identifier: jVad8m/cIrYocT77HH/SDjDUUljv8T6ISxtXhpLpX/U= Subject key identifier: DC:35:93:55:FC:2A:7C:CC:0E:D1:03:04:80:E1:3B:E5:41:7A:6E:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A331CB862944CEA738B80C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.9.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:1c:b8:62:94:4c:ea:73:8b:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=2dd0b0c0-d640-4158-939f-6523af8b911d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:e3:a2:49:12:b1:57:f1:dd:82:51:a2:31: ae:50:9a:bd:ec:5e:89:09:1d:5e:17:40:2c:05:08: 82:26:ee:b6:70:05:0a:b3:df:c5:3d:81:dd:a6:02: 06:92:30:18:83:93:2e:a0:0a:35:46:12:5b:40:92: 29:0d:99:72:4d:9b:c1:92:d3:9c:cb:cd:c7:9a:58: f3:1c:1e:cd:80:9d:e7:c3:30:39:6a:80:07:0c:c6: 69:b9:39:ee:87:d6:57:9d:4e:46:b0:e0:63:55:51: 8a:2f:ee:c2:e5:48:12:de:30:a0:96:f1:d8:e2:d5: 69:a2:55:f8:f4:99:8d:e1:3c:7e:01:d2:0a:28:17: ba:64:05:5e:a0:b8:7d:dd:ab:8d:a9:b4:f0:2d:fa: 25:25:07:a8:52:64:e9:25:2b:26:07:f8:b4:68:62: 73:48:e0:18:a7:b1:90:e8:32:a1:bc:2d:72:00:2b: 77:22:b8:78:d4:24:cb:24:5c:88:92:6a:d3:90:22: a4:32:29:25:9f:5b:d3:5f:7c:68:2e:12:0a:bb:5d: 11:64:7f:4a:29:f2:42:61:1c:b3:7c:12:6e:3a:1c: f5:1a:04:c7:0d:a6:a9:e2:68:89:d0:86:31:6f:66: 45:94:e5:be:c4:c4:46:93:01:ac:e4:e2:db:9b:ec: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:35:93:55:FC:2A:7C:CC:0E:D1:03:04:80:E1:3B:E5:41:7A:6E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:88:b1:00:bb:05:2d:3a:7a:a2:15:44:86:96:54:5e:f9:bf: 81:6f:ef:03:d4:fa:17:0b:bd:65:77:6e:85:1f:77:ff:46:01: 3b:b7:ac:19:4c:1a:73:84:f9:81:99:e0:f5:57:08:cb:41:8f: 21:24:8e:f6:19:14:68:ca:fb:a0:86:af:82:ae:5e:f4:5b:34: 39:15:8b:1c:5a:89:96:67:3c:05:3d:b9:75:f4:76:95:f2:fb: ca:c3:65:f1:db:f3:b0:02:f8:79:77:0e:0b:51:ee:41:5c:0f: d6:8c:b4:db:95:bb:6b:ef:6f:8d:af:16:4a:2a:3a:ec:df:11: 3c:a6:c4:fe:23:f6:02:77:48:48:cb:9d:5a:ce:fa:9d:9f:6d: c9:00:fb:54:46:ff:3b:07:85:77:34:2f:75:e1:3e:7d:9f:ff: ce:b7:13:79:dc:e8:b2:6b:e6:03:14:87:5f:c0:6c:e3:d5:c0: 71:2d:8a:aa:06:9e:d4:6f:c7:06:6e:38:45:21:92:a0:40:cf: 42:79:af:e4:79:f7:11:2d:70:25:c8:88:18:89:5e:57:8e:be: 0a:0f:35:b9:b2:6c:d6:48:a3:7b:4f:55:23:48:1d:af:f1:44: e7:f1:6f:32:7c:01:2f:86:d4:2f:db:ff:57:15:8d:33:c5:77: 01:60:ab:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxy4YpRM6nOLgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MmRkMGIwYzAtZDY0MC00MTU4LTkzOWYtNjUyM2FmOGI5MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVfjokkSsVfx3YJRojGuUJq97F6JCR1eF0As BQiCJu62cAUKs9/FPYHdpgIGkjAYg5MuoAo1RhJbQJIpDZlyTZvBktOcy83Hmljz HB7NgJ3nwzA5aoAHDMZpuTnuh9ZXnU5GsOBjVVGKL+7C5UgS3jCglvHY4tVpolX4 9JmN4Tx+AdIKKBe6ZAVeoLh93auNqbTwLfolJQeoUmTpJSsmB/i0aGJzSOAYp7GQ 6DKhvC1yACt3Irh41CTLJFyIkmrTkCKkMikln1vTX3xoLhIKu10RZH9KKfJCYRyz fBJuOhz1GgTHDaap4miJ0IYxb2ZFlOW+xMRGkwGs5OLbm+zbhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw1k1X8KnzMDtEDBIDhO+VBem7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNhOTE2ZjEtNmQ4NS0z NjczLWIxMmItYjExMTZhMzg5ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeIsQC7BS06eqIVRIaWVF75v4Fv7wPU+hcLvWV3boUfd/9GATu3rBlM GnOE+YGZ4PVXCMtBjyEkjvYZFGjK+6CGr4KuXvRbNDkVixxaiZZnPAU9uXX0dpXy +8rDZfHb87AC+Hl3DgtR7kFcD9aMtNuVu2vvb42vFkoqOuzfETymxP4j9gJ3SEjL nVrO+p2fbckA+1RG/zsHhXc0L3XhPn2f/863E3nc6LJr5gMUh1/AbOPVwHEtiqoG ntRvxwZuOEUhkqBAz0J5r+R59xEtcCXIiBiJXleOvgoPNbmybNZIo3tPVSNIHa/x ROfxbzJ8AS+G1C/b/1cVjTPFdwFgq8g= -----END CERTIFICATE-----Generated at Sun Oct 4 11:11:52 2026 by rpki-client