$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa File: 2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa (raw, json) Hash identifier: 8LUGEsVCMQZhJGxY/CCbUJSN8gTUp7Nrh8V6GoUFgdw= Subject key identifier: FB:A4:21:C3:07:30:46:3D:C1:14:69:00:94:EC:65:3B:C3:1D:39:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD22E5F374168D070205C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:22:e5:f3:74:16:8d:07:02:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a76574b8-d0c9-4a06-98cb-68a8b4c932cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:1b:df:b2:4c:c3:0b:bf:67:13:23:09:3a: 7a:b1:33:80:bf:91:95:c6:19:a6:2d:46:12:14:c3: 78:c4:40:47:9c:a7:fb:2e:ba:45:79:1f:0d:e5:23: 60:e7:3c:32:09:37:f6:8c:60:28:81:81:bd:53:42: b5:82:da:c1:fb:73:91:f6:e9:b2:a0:b4:5a:cc:4f: c3:e3:76:1d:5d:2b:c2:81:35:3c:bf:69:f8:9d:90: 09:fb:6b:b7:34:23:4a:af:c3:b2:09:dd:6c:2d:9e: 30:85:f7:66:4b:29:c2:bd:0a:32:53:9f:f2:b1:12: cf:b1:2f:96:84:27:d3:b5:0d:17:b9:52:9a:4c:66: 5c:f9:c7:7d:07:22:42:cd:7c:0c:bd:4e:69:45:ae: 84:db:6d:a3:e0:2c:84:b5:1d:3e:ac:5e:b6:3a:a0: bc:b9:68:fb:f5:ee:26:d2:a7:a5:d3:d4:6e:41:7a: 01:41:b0:6e:57:0d:00:64:06:90:64:22:f8:bc:fd: 80:36:8d:06:4a:77:69:f2:b7:a8:da:ec:0e:ec:7c: 69:05:a9:a0:47:77:a6:91:5a:02:cb:ac:1b:cd:40: e0:ab:27:e7:7c:7a:26:c6:53:e3:31:e9:fc:9a:39: 37:eb:67:1e:f5:38:a3:2f:c0:98:c8:9b:cf:72:0e: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A4:21:C3:07:30:46:3D:C1:14:69:00:94:EC:65:3B:C3:1D:39:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0e:fb:41:aa:83:cb:3c:fa:0b:53:e8:69:b4:67:fc:32:d6: c5:b1:68:37:52:71:e3:dc:4c:a7:3d:f0:af:6e:97:e1:68:f9: 57:cd:1f:45:2d:8f:ee:fb:01:79:5a:73:05:1e:9b:80:d7:8c: ae:85:5e:d8:41:66:da:94:38:2b:22:7c:1d:ee:b2:3f:46:39: 9a:68:8c:a3:08:63:ec:66:7f:7e:ce:22:45:cf:f6:93:f8:97: dc:8a:57:d1:de:a4:33:a1:98:5e:a3:81:da:85:13:e7:bf:31: 94:8c:e9:c5:01:99:b0:d7:a7:16:9a:54:e6:65:42:75:11:41: 5f:4e:b3:cc:ac:76:76:48:ef:38:d5:03:4c:d5:81:72:e3:d7: 87:02:ec:41:3f:28:94:ff:13:e5:12:e0:9b:d3:70:b8:47:e3: 5f:cf:b5:c7:39:5b:fa:f7:50:89:48:75:38:f3:93:1c:ec:d0: 16:8e:12:1d:5d:44:52:a9:37:c0:1a:4a:01:39:e6:7d:ab:55: d4:da:02:b1:9a:68:82:87:0b:8b:95:41:b8:5a:f9:d0:50:fe: 90:19:9b:14:80:77:18:e6:71:fa:0f:0f:7d:c4:fb:12:0e:09: 4b:68:bd:0b:b0:00:6d:e8:43:5e:10:f8:e8:c3:6a:df:ad:b4: 35:3c:27:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSLl83QWjQcCBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTc2NTc0YjgtZDBjOS00YTA2LTk4Y2ItNjhhOGI0YzkzMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArncb37JMwwu/ZxMjCTp6sTOAv5GVxhmmLUYS FMN4xEBHnKf7LrpFeR8N5SNg5zwyCTf2jGAogYG9U0K1gtrB+3OR9umyoLRazE/D 43YdXSvCgTU8v2n4nZAJ+2u3NCNKr8OyCd1sLZ4whfdmSynCvQoyU5/ysRLPsS+W hCfTtQ0XuVKaTGZc+cd9ByJCzXwMvU5pRa6E222j4CyEtR0+rF62OqC8uWj79e4m 0qel09RuQXoBQbBuVw0AZAaQZCL4vP2ANo0GSndp8reo2uwO7HxpBamgR3emkVoC y6wbzUDgqyfnfHomxlPjMen8mjk362ce9TijL8CYyJvPcg4KFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPukIcMHMEY9wRRpAJTsZTvDHTmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRmZGM1YzMtODcyZi0z MTllLWI2MmUtMmM3ZTliNDYyZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoO+0Gqg8s8+gtT6Gm0Z/wy1sWxaDdScePcTKc98K9ul+Fo+VfNH0Ut j+77AXlacwUem4DXjK6FXthBZtqUOCsifB3usj9GOZpojKMIY+xmf37OIkXP9pP4 l9yKV9HepDOhmF6jgdqFE+e/MZSM6cUBmbDXpxaaVOZlQnURQV9Os8ysdnZI7zjV A0zVgXLj14cC7EE/KJT/E+US4JvTcLhH41/Ptcc5W/r3UIlIdTjzkxzs0BaOEh1d RFKpN8AaSgE55n2rVdTaArGaaIKHC4uVQbha+dBQ/pAZmxSAdxjmcfoPD33E+xIO CUtovQuwAG3oQ14Q+OjDat+ttDU8J8Q= -----END CERTIFICATE-----Generated at Tue Sep 22 08:59:24 2026 by rpki-client