$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa File: 36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa (raw, json) Hash identifier: UlOeIL0RXF3zGEcOF3kz0o2KgJyP49AK9Opkbql/kgg= Subject key identifier: 2A:92:9E:9F:21:50:EF:82:48:DE:B5:A3:51:B9:D4:F8:C5:95:04:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD819469B5518AD3778380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.99.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:81:94:69:b5:51:8a:d3:77:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a4536877-9a1d-4a4c-8892-30f9ddd3641d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:3a:4e:03:31:b1:68:a3:e6:71:51:2a:b9: a1:ee:1b:e9:ae:4e:da:73:39:c5:02:73:71:17:4f: 20:e5:81:c2:4b:cd:16:2b:46:8e:30:83:40:98:1e: e2:50:61:91:84:41:61:1b:ff:9e:86:69:94:a4:33: 3e:d3:34:7b:81:98:e7:0f:76:47:6c:52:82:f1:c7: d0:45:39:58:2a:c5:e9:be:f0:34:75:1f:b0:96:24: 72:67:66:bc:33:a1:97:16:5a:dd:0b:31:1d:0b:f2: 42:d0:51:66:ac:b3:09:f3:f4:c1:8b:ee:56:80:c5: 3a:ad:51:70:75:b2:7a:a9:b7:05:d1:97:43:82:77: 6b:e3:d1:2f:c7:c3:53:4d:88:18:ce:55:39:29:cd: 90:04:62:9c:07:0e:b4:40:36:e8:ed:3c:36:d3:9a: 21:f6:b3:89:e6:e7:21:c2:d2:cb:fa:ea:77:30:a7: 29:57:a7:a1:b6:19:29:3d:9a:21:7e:78:d9:78:ff: dc:39:b3:81:54:80:43:cb:98:0a:ed:20:e8:9f:31: 2d:d7:72:af:04:21:4d:2c:7f:81:7d:53:87:ff:e8: ed:62:51:ea:d4:fe:91:1b:21:f3:06:72:29:92:ec: 0d:62:ea:d0:36:0c:f4:fc:ad:ad:f2:68:a6:be:94: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:9E:9F:21:50:EF:82:48:DE:B5:A3:51:B9:D4:F8:C5:95:04:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a9:c9:c0:72:a1:ca:45:e7:7c:1a:b8:c3:b0:00:27:3a:93: 0c:00:64:c3:64:39:25:1d:a8:27:da:d2:90:a8:5d:6c:f1:0e: 80:35:b5:c4:86:93:33:98:43:25:46:48:18:40:cb:ee:94:43: d0:22:eb:85:47:cc:4b:62:a3:64:0e:b1:a6:38:c9:0c:4c:89: e1:d7:76:63:72:d6:28:18:14:5b:46:0c:a7:a7:ae:a6:11:64: 73:04:7d:3f:26:58:8a:86:fd:75:ac:a9:4e:9f:17:02:26:b2: 35:29:7f:e8:a2:20:2a:f0:5a:e4:28:aa:ce:1d:cb:06:a9:43: 4b:28:44:24:c6:96:da:5f:e0:67:2c:55:20:32:cb:4c:11:7c: d8:fa:dd:9a:bc:01:f5:f5:ce:d4:ae:6e:1c:c0:77:fb:f9:12: 53:ee:b5:fb:80:4d:38:0f:f9:a4:8c:92:b0:a4:20:36:17:8c: 5a:50:89:f0:b0:bb:9c:68:7c:ee:d7:53:dc:e7:6a:71:19:2f: de:8d:25:f8:44:81:d5:4a:56:48:a8:cf:b9:ee:8a:40:bd:8d: b9:d5:68:bd:ff:e4:86:9e:fe:10:f6:42:ac:1a:9e:34:99:74: b7:36:67:f3:20:28:3d:90:b5:10:a3:08:6e:22:f2:1e:88:fd: 25:4c:67:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYGUabVRitN3g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTQ1MzY4NzctOWExZC00YTRjLTg4OTItMzBmOWRkZDM2NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyo6TgMxsWij5nFRKrmh7hvprk7acznFAnNx F08g5YHCS80WK0aOMINAmB7iUGGRhEFhG/+ehmmUpDM+0zR7gZjnD3ZHbFKC8cfQ RTlYKsXpvvA0dR+wliRyZ2a8M6GXFlrdCzEdC/JC0FFmrLMJ8/TBi+5WgMU6rVFw dbJ6qbcF0ZdDgndr49Evx8NTTYgYzlU5Kc2QBGKcBw60QDbo7Tw205oh9rOJ5uch wtLL+up3MKcpV6ehthkpPZohfnjZeP/cObOBVIBDy5gK7SDonzEt13KvBCFNLH+B fVOH/+jtYlHq1P6RGyHzBnIpkuwNYurQNgz0/K2t8mimvpSBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqSnp8hUO+CSN61o1G51PjFlQQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZmM2VmZGYtMzNmZC0z MTc2LWI0MTAtZmVmY2M3ZmU1ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACpycByocpF53wauMOwACc6kwwAZMNkOSUdqCfa0pCoXWzxDoA1tcSG kzOYQyVGSBhAy+6UQ9Ai64VHzEtio2QOsaY4yQxMieHXdmNy1igYFFtGDKenrqYR ZHMEfT8mWIqG/XWsqU6fFwImsjUpf+iiICrwWuQoqs4dywapQ0soRCTGltpf4Gcs VSAyy0wRfNj63Zq8AfX1ztSubhzAd/v5ElPutfuATTgP+aSMkrCkIDYXjFpQifCw u5xofO7XU9znanEZL96NJfhEgdVKVkioz7nuikC9jbnVaL3/5Iae/hD2QqwanjSZ dLc2Z/MgKD2QtRCjCG4i8h6I/SVMZ48= -----END CERTIFICATE-----Generated at Tue Sep 22 17:30:28 2026 by rpki-client