$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3654ec28-ead5-346b-88b7-dc3f809d992d.roa File: 3654ec28-ead5-346b-88b7-dc3f809d992d.roa (raw, json) Hash identifier: vuo80RSmsJOuk10KJZ5TvFJ3lHFte92YQQX4S9ipFko= Subject key identifier: 7A:00:61:2B:64:16:D5:39:75:8B:3D:4A:0D:DF:44:24:AD:C6:7A:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD883DD1C76C9362C1ADF4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3654ec28-ead5-346b-88b7-dc3f809d992d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:88:3d:d1:c7:6c:93:62:c1:ad:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=949292a1-df4d-41e2-8c98-18c7894f957d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c3:f2:29:af:ab:e1:b5:83:ed:af:03:79:8f: 55:20:00:af:7f:cb:21:d4:af:b5:f6:26:d7:e2:8c: 46:66:61:5b:21:46:97:c9:b1:c0:4b:2a:aa:9d:41: 8c:09:02:d9:04:1e:78:30:55:2b:41:1d:4b:15:f2: d8:1b:1f:8e:85:03:74:bb:fd:aa:67:ee:92:cf:05: 52:92:d5:f9:73:a1:b9:8c:75:6c:65:6c:7d:fd:17: 0f:06:1f:45:c1:ab:29:c6:a3:ff:97:ee:82:48:84: 62:6f:fd:da:48:dc:6a:8b:6d:14:64:9d:34:ed:51: 91:39:8f:e0:c6:69:a7:02:55:94:91:84:ef:bf:5d: ce:79:88:7e:80:6f:3d:a5:19:bb:dd:51:07:d9:6d: fd:48:15:ae:07:e9:39:ae:38:37:e9:4f:83:61:b5: f6:69:32:f9:37:86:c6:17:90:b8:88:59:62:a2:51: 7b:f8:f8:f0:75:5b:38:b8:f1:84:6b:a9:63:c0:e5: c2:c6:2f:da:b4:6c:b1:a6:b0:dd:76:93:84:3d:58: 60:bc:39:05:d1:91:e8:70:87:5a:da:c4:f7:67:6a: 4c:98:16:53:6e:b3:c9:19:d7:71:e2:ca:5f:62:a7: c4:d2:e8:80:b1:59:a8:cd:fe:1e:18:b6:11:cc:f7: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:00:61:2B:64:16:D5:39:75:8B:3D:4A:0D:DF:44:24:AD:C6:7A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3654ec28-ead5-346b-88b7-dc3f809d992d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:51:2d:cf:03:40:fd:fd:a1:56:c8:f8:e3:47:86:7c:53:76: 95:ac:93:a5:f2:20:43:f5:96:32:b0:7b:04:ed:18:9f:50:e7: 79:22:81:64:90:ba:23:ba:c8:0f:92:b7:8d:ca:3d:0d:75:3d: 5a:d8:36:a4:f4:e1:f5:c4:56:22:f5:20:59:7f:d5:30:a7:5e: c7:8c:e3:97:18:35:36:88:26:2f:db:5e:33:f9:4f:55:5d:8b: 37:13:da:4b:8e:14:ee:a9:04:5c:df:44:92:d0:b1:04:f3:36: b2:f0:b3:7d:e8:ef:3d:6a:2a:8d:44:f2:cf:e6:a1:7c:5e:55: f2:d9:42:1f:70:b6:6c:45:b8:6e:8d:d9:b5:46:e1:70:f5:60: f0:a8:4d:a2:00:62:b0:60:e2:c0:e2:10:93:77:ee:76:74:b5: 81:01:6b:bb:04:b9:44:01:7c:0e:b1:d5:19:ba:85:a9:24:f1: f9:41:1c:f7:6f:48:da:c7:15:95:93:c4:48:08:58:5b:27:d8: f7:97:29:d0:91:d4:22:8f:1a:bc:98:50:a3:3a:8d:a8:34:c7: 0d:f4:9c:21:a7:06:33:2e:b2:44:90:aa:7c:3c:b9:76:1a:97: 01:83:3e:8f:87:01:13:22:90:be:15:14:3b:d4:f6:e2:d5:be: a4:3a:55:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYg90cdsk2LBrfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OTQ5MjkyYTEtZGY0ZC00MWUyLThjOTgtMThjNzg5NGY5NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cPyKa+r4bWD7a8DeY9VIACvf8sh1K+19ibX 4oxGZmFbIUaXybHASyqqnUGMCQLZBB54MFUrQR1LFfLYGx+OhQN0u/2qZ+6SzwVS ktX5c6G5jHVsZWx9/RcPBh9FwaspxqP/l+6CSIRib/3aSNxqi20UZJ007VGROY/g xmmnAlWUkYTvv13OeYh+gG89pRm73VEH2W39SBWuB+k5rjg36U+DYbX2aTL5N4bG F5C4iFliolF7+PjwdVs4uPGEa6ljwOXCxi/atGyxprDddpOEPVhgvDkF0ZHocIda 2sT3Z2pMmBZTbrPJGddx4spfYqfE0uiAsVmozf4eGLYRzPeKXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoAYStkFtU5dYs9Sg3fRCStxnrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY1NGVjMjgtZWFkNS0z NDZiLTg4YjctZGMzZjgwOWQ5OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9RLc8DQP39oVbI+ONHhnxTdpWsk6XyIEP1ljKwewTtGJ9Q53kigWSQ uiO6yA+St43KPQ11PVrYNqT04fXEViL1IFl/1TCnXseM45cYNTaIJi/bXjP5T1Vd izcT2kuOFO6pBFzfRJLQsQTzNrLws33o7z1qKo1E8s/moXxeVfLZQh9wtmxFuG6N 2bVG4XD1YPCoTaIAYrBg4sDiEJN37nZ0tYEBa7sEuUQBfA6x1Rm6hakk8flBHPdv SNrHFZWTxEgIWFsn2PeXKdCR1CKPGryYUKM6jag0xw30nCGnBjMuskSQqnw8uXYa lwGDPo+HARMikL4VFDvU9uLVvqQ6VVs= -----END CERTIFICATE-----Generated at Tue Sep 22 00:53:03 2026 by rpki-client