$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/287f2d88-109f-3698-960c-ed5d632b822d.roa File: 287f2d88-109f-3698-960c-ed5d632b822d.roa (raw, json) Hash identifier: oV826aBO/9lezlslAn+JpPuD/00FfY2pY80RjeUi3Yw= Subject key identifier: DA:02:BA:08:B1:35:9B:4E:3C:DE:AF:09:9F:B6:B6:BA:6F:C0:7F:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD8B5DFB3DA029AECDFC40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/287f2d88-109f-3698-960c-ed5d632b822d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:8b:5d:fb:3d:a0:29:ae:cd:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=949e9f75-dbb0-4c68-8f1e-5c43b260a4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:c7:dd:24:67:4e:16:dd:fe:7a:62:d9:fa: 9b:b9:8f:cc:00:77:8e:2f:77:82:91:e3:28:63:76: 05:a3:1b:7a:b3:78:e9:8e:64:2d:a9:3d:6d:1a:7f: e3:d1:a0:d7:1e:c3:9b:b6:19:3f:98:e1:7a:36:f9: 27:2a:f6:95:2c:7e:c0:be:7d:23:0d:82:ba:f8:93: e9:7c:d2:16:77:83:57:da:bb:6e:c8:59:ba:b4:06: 7c:b6:97:55:ee:11:cf:ae:c5:28:4b:4d:45:22:e9: 80:8f:49:83:fe:53:cd:05:1c:a3:67:49:9d:5b:9e: 34:29:5b:20:a3:e4:f9:eb:9d:12:e1:d9:f2:24:38: ec:d7:5b:27:75:1f:e5:08:c2:78:e4:78:b7:e8:81: 5f:0f:2f:08:d6:4b:fb:bc:df:dc:ad:a8:4f:02:48: 56:c1:23:40:c8:c1:f4:7c:71:7f:08:4a:49:02:52: 29:36:6c:e4:39:f9:34:25:90:1e:f5:fc:a7:3b:5b: a1:6b:ea:d8:d3:d0:74:f4:18:10:ed:0a:0c:fd:c3: d6:95:b5:26:21:6b:66:80:8b:48:42:47:f1:61:f5: 37:f8:cc:05:61:e2:b9:85:15:d6:f4:92:66:1a:c7: 19:ac:b8:45:7a:50:36:bd:9d:9a:6e:93:f0:12:98: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:BA:08:B1:35:9B:4E:3C:DE:AF:09:9F:B6:B6:BA:6F:C0:7F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/287f2d88-109f-3698-960c-ed5d632b822d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c1:b2:68:7e:c1:f0:e9:4d:6a:ba:b4:68:45:ed:11:7e:cb: e1:56:20:fa:db:6b:38:ed:81:a3:94:94:78:f0:09:c0:9b:1e: 1d:2f:03:95:51:15:d1:29:9f:7b:b5:90:b8:79:93:46:5e:ec: bc:41:e3:11:28:c8:b6:c2:dd:ce:44:9a:66:f4:1e:e8:e2:6a: 51:60:2d:b2:b7:d3:54:97:c8:a1:e4:d1:38:df:55:23:1b:da: 77:98:82:1b:4e:cb:03:40:60:1c:08:a4:5e:bf:96:9c:93:6b: c6:5a:5b:ed:b2:4d:3e:45:47:63:7d:4b:8d:5b:ab:50:cf:8e: e2:14:70:1a:9f:69:87:72:f7:10:f9:d0:ce:df:b6:1f:39:27: dc:9f:a3:ef:0e:0a:cb:08:ef:db:d2:e9:4b:3a:32:df:44:a6: 92:5d:ad:01:cd:02:eb:8b:62:0d:34:fd:54:ef:a4:95:24:38: d0:44:b5:2a:b2:bc:05:ed:5e:00:2c:7b:ae:bb:1a:05:f4:92: 76:87:49:4c:6f:99:e6:ef:ae:eb:fc:6b:a9:0e:c2:00:25:54: fc:f8:14:5a:61:1f:74:a5:82:3a:c0:e4:dc:cb:ba:36:5c:d0: a9:35:64:8b:38:77:6d:a9:03:0f:49:26:48:a4:ac:cb:5e:85: fb:09:65:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYtd+z2gKa7N/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OTQ5ZTlmNzUtZGJiMC00YzY4LThmMWUtNWM0M2IyNjBhNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndDH3SRnThbd/npi2fqbuY/MAHeOL3eCkeMo Y3YFoxt6s3jpjmQtqT1tGn/j0aDXHsObthk/mOF6NvknKvaVLH7Avn0jDYK6+JPp fNIWd4NX2rtuyFm6tAZ8tpdV7hHPrsUoS01FIumAj0mD/lPNBRyjZ0mdW540KVsg o+T5650S4dnyJDjs11sndR/lCMJ45Hi36IFfDy8I1kv7vN/crahPAkhWwSNAyMH0 fHF/CEpJAlIpNmzkOfk0JZAe9fynO1uha+rY09B09BgQ7QoM/cPWlbUmIWtmgItI QkfxYfU3+MwFYeK5hRXW9JJmGscZrLhFelA2vZ2abpPwEphMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoCugixNZtOPN6vCZ+2trpvwH9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjg3ZjJkODgtMTA5Zi0z Njk4LTk2MGMtZWQ1ZDYzMmI4MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArBsmh+wfDpTWq6tGhF7RF+y+FWIPrbazjtgaOUlHjwCcCbHh0vA5VR FdEpn3u1kLh5k0Ze7LxB4xEoyLbC3c5Emmb0HujialFgLbK301SXyKHk0TjfVSMb 2neYghtOywNAYBwIpF6/lpyTa8ZaW+2yTT5FR2N9S41bq1DPjuIUcBqfaYdy9xD5 0M7fth85J9yfo+8OCssI79vS6Us6Mt9EppJdrQHNAuuLYg00/VTvpJUkONBEtSqy vAXtXgAse667GgX0knaHSUxvmebvruv8a6kOwgAlVPz4FFphH3SlgjrA5NzLujZc 0Kk1ZIs4d22pAw9JJkikrMtehfsJZbU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:43:23 2026 by rpki-client