$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbc1d64-d1a6-3821-ab62-fe2e5dfc1c6f.roa File: 2dbc1d64-d1a6-3821-ab62-fe2e5dfc1c6f.roa (raw, json) Hash identifier: W5H98YQ7fyLi1IhNADCVSHDtQ3pQxd62m10yY1roRIQ= Subject key identifier: 96:B6:C7:6A:5C:B6:12:5A:9A:B8:13:DE:BB:DC:4D:C0:17:20:66:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A64AF326A1C40E3BC100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbc1d64-d1a6-3821-ab62-fe2e5dfc1c6f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a6:4a:f3:26:a1:c4:0e:3b:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=a644f7f1-a025-47c7-8109-9bb987ef81bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:d6:98:85:b4:89:98:18:4f:25:6e:19:f9: 50:fa:15:3b:8a:00:2f:be:97:ea:ae:de:01:bb:3d: 2f:8f:52:70:71:e4:ec:01:1c:21:b8:45:48:9f:90: db:96:b2:64:94:63:27:10:86:fe:fa:f1:2f:30:9c: 1e:6e:5f:97:2e:07:b4:bb:4b:e0:1e:93:5f:04:68: 66:48:2a:b9:66:89:34:82:92:29:88:6d:41:ee:4f: 77:4a:41:98:91:5b:18:bb:2f:4f:27:a0:84:6e:bd: 0c:55:e9:ee:00:7b:e2:db:6c:fd:92:e9:c4:28:63: b9:27:df:b5:58:46:66:6d:96:af:b1:f5:bb:e8:e8: 40:11:50:88:2a:20:09:b6:27:c9:d8:92:cc:1f:79: 9c:c8:94:c9:d3:d2:5e:e3:b0:cc:ce:0d:66:3c:2e: 59:00:fa:39:32:83:39:98:2a:12:96:51:6b:01:03: 27:84:67:bd:01:4a:41:9b:8e:12:ce:b0:06:a8:fd: 7a:49:d1:95:e5:c9:41:4b:b8:b0:e9:73:4e:62:41: 72:85:6f:78:39:31:88:48:0c:23:10:6f:88:e1:3f: 41:a1:f6:14:ad:85:35:be:b3:2b:46:87:b4:d5:21: 43:4a:f8:99:98:fc:76:48:c5:27:84:35:bf:a9:29: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B6:C7:6A:5C:B6:12:5A:9A:B8:13:DE:BB:DC:4D:C0:17:20:66:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbc1d64-d1a6-3821-ab62-fe2e5dfc1c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bb:dc:32:4f:9a:e7:07:b9:0f:87:14:bb:46:e7:5b:9c:dc: fa:2d:56:dc:61:0d:a5:90:f2:a6:9d:96:60:1d:86:b5:78:ee: a5:30:14:4c:54:d6:fb:c7:1f:ad:64:91:39:b9:02:9b:91:57: 72:20:fc:bd:2b:68:09:1e:a5:d1:ba:70:40:d4:75:44:dc:e5: 53:95:f9:7f:9e:6e:8a:63:63:d6:22:2a:bd:b0:71:d6:ac:da: 49:4c:7a:69:f2:e8:60:06:14:f9:88:c7:b7:5f:1a:41:2b:83: 30:ce:64:18:17:10:b5:81:81:52:11:93:e5:a2:54:63:18:d1: ec:39:4b:43:36:c8:29:eb:be:d0:e8:c0:49:91:46:5e:7b:0d: 24:04:3b:37:6f:d7:7d:57:8a:6b:a4:fc:f8:f0:38:df:f1:37: 6a:06:cf:de:25:bb:58:f0:70:ea:71:a4:19:4e:f2:8e:26:80: 0b:4c:27:94:f2:28:2a:dd:5d:30:4c:3b:52:c6:6f:f2:d0:4f: 4d:d2:f1:67:80:92:48:a1:f0:bc:2c:7c:70:c4:c1:82:93:52: 49:77:ac:3d:63:9b:e7:9c:8c:3c:0d:7d:fa:57:be:c1:5c:14: 6c:81:14:e6:db:a1:2c:b5:7c:a6:ed:97:eb:e6:a5:d4:00:9f: c7:5e:38:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqZK8yahxA47wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTY0NGY3ZjEtYTAyNS00N2M3LTgxMDktOWJiOTg3ZWY4MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEPWmIW0iZgYTyVuGflQ+hU7igAvvpfqrt4B uz0vj1JwceTsARwhuEVIn5DblrJklGMnEIb++vEvMJwebl+XLge0u0vgHpNfBGhm SCq5Zok0gpIpiG1B7k93SkGYkVsYuy9PJ6CEbr0MVenuAHvi22z9kunEKGO5J9+1 WEZmbZavsfW76OhAEVCIKiAJtifJ2JLMH3mcyJTJ09Je47DMzg1mPC5ZAPo5MoM5 mCoSllFrAQMnhGe9AUpBm44SzrAGqP16SdGV5clBS7iw6XNOYkFyhW94OTGISAwj EG+I4T9BofYUrYU1vrMrRoe01SFDSviZmPx2SMUnhDW/qSkQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa2x2pcthJamrgT3rvcTcAXIGbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRiYzFkNjQtZDFhNi0z ODIxLWFiNjItZmUyZTVkZmMxYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe73DJPmucHuQ+HFLtG51uc3PotVtxhDaWQ8qadlmAdhrV47qUwFExU 1vvHH61kkTm5ApuRV3Ig/L0raAkepdG6cEDUdUTc5VOV+X+ebopjY9YiKr2wcdas 2klMemny6GAGFPmIx7dfGkErgzDOZBgXELWBgVIRk+WiVGMY0ew5S0M2yCnrvtDo wEmRRl57DSQEOzdv131Ximuk/PjwON/xN2oGz94lu1jwcOpxpBlO8o4mgAtMJ5Ty KCrdXTBMO1LGb/LQT03S8WeAkkih8LwsfHDEwYKTUkl3rD1jm+ecjDwNffpXvsFc FGyBFObboSy1fKbtl+vmpdQAn8deOJE= -----END CERTIFICATE-----Generated at Tue Sep 22 16:16:39 2026 by rpki-client