$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a411246-2b91-3f46-9667-8746421ce8d1.roa File: 3a411246-2b91-3f46-9667-8746421ce8d1.roa (raw, json) Hash identifier: BQ/9RHG2gX5yOMRhF4dhH0SowUhTHBjCAmObZkEItAQ= Subject key identifier: BA:54:45:62:32:CA:D9:91:4B:A2:52:6D:45:6F:60:8D:1D:74:ED:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD232C721734B9B4AFCA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a411246-2b91-3f46-9667-8746421ce8d1.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:23:2c:72:17:34:b9:b4:af:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=e5aeec3f-0082-4599-9797-eeadf202038c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:6b:f9:78:b2:f4:46:6f:a1:15:f5:86:0a: 5f:ec:9c:b2:b3:64:db:be:74:e9:f9:ca:76:4b:80: dc:47:58:80:11:01:60:90:e9:72:7f:66:73:21:b3: e2:31:99:45:60:dd:b1:b3:2b:27:0a:cb:21:7a:3c: fa:f5:23:70:1f:f1:5a:e1:49:77:2b:63:54:b9:24: af:13:b8:f8:56:21:9b:7b:9a:be:6b:fb:6e:38:6c: f9:74:ab:0d:e1:99:a7:f0:21:09:df:fe:85:ba:dc: ab:07:22:6a:0e:56:d7:5e:9d:3d:17:13:5d:7d:de: 97:e4:ec:a1:c7:9d:fb:4a:6c:27:b4:78:88:17:8e: 5d:7e:54:2e:aa:02:95:6b:45:45:61:19:7d:4d:cb: 2c:76:7f:ee:c9:9f:3a:d3:e5:2c:25:1d:31:42:d8: c5:07:c3:75:db:e8:92:03:58:13:be:1a:c3:d0:24: 0d:b2:0d:02:d2:c0:54:f7:f1:0e:ce:2f:8a:aa:f7: 88:d9:5d:c7:1c:53:4a:87:75:35:72:c4:0e:12:04: 9b:6b:2e:77:ba:76:60:5e:3e:67:cb:f3:e2:01:49: d1:4e:40:00:ec:e2:13:69:36:ec:0b:3e:3f:39:f8: c2:f3:25:0a:e0:14:12:18:18:a2:0e:37:a8:35:12: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:45:62:32:CA:D9:91:4B:A2:52:6D:45:6F:60:8D:1D:74:ED:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a411246-2b91-3f46-9667-8746421ce8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1b:bd:56:1a:e5:a8:55:61:b9:60:8f:4d:8b:65:35:9d:81: 2a:3d:b8:ab:10:cf:75:64:82:64:f7:f7:f4:79:95:11:6a:a6: 7a:1f:39:a8:e8:0b:19:27:64:92:22:fd:7e:13:df:59:b0:95: b9:23:c8:6a:2b:ca:81:b6:3d:65:94:62:bf:50:5c:5d:df:33: a2:7b:b6:cb:b0:df:78:12:cc:4a:d4:8a:d6:06:7c:65:59:2b: 04:56:13:d2:b3:c3:d8:5a:a4:36:07:4a:fe:a9:ec:a2:9e:6d: 72:22:91:fa:d1:a7:ee:0d:c3:cf:09:65:39:cb:ac:1a:26:ef: dc:ee:65:68:7f:29:fd:6c:4a:6f:52:45:1b:b8:27:57:ec:83: 3c:26:a2:4d:9b:39:ce:e6:41:4f:52:20:72:d2:a6:67:d9:63: ce:c9:5b:7b:b8:45:c9:52:e1:89:a8:bc:03:08:d3:33:2c:7f: d5:b9:27:5f:02:74:2f:0b:60:72:93:60:bb:34:bc:bc:1f:42: b3:22:4f:d5:94:aa:4f:2b:1c:21:30:18:e0:29:20:60:e3:5f: d6:aa:55:3f:16:35:a7:32:86:3b:76:2c:bd:2b:61:01:32:6c: 65:8f:d2:ab:6a:c6:70:9b:d7:e3:e4:b5:f5:04:93:1f:59:4c: 02:13:d7:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSMschc0ubSvygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTVhZWVjM2YtMDA4Mi00NTk5LTk3OTctZWVhZGYyMDIwMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKhr+Xiy9EZvoRX1hgpf7Jyys2TbvnTp+cp2 S4DcR1iAEQFgkOlyf2ZzIbPiMZlFYN2xsysnCsshejz69SNwH/Fa4Ul3K2NUuSSv E7j4ViGbe5q+a/tuOGz5dKsN4Zmn8CEJ3/6FutyrByJqDlbXXp09FxNdfd6X5Oyh x537SmwntHiIF45dflQuqgKVa0VFYRl9Tcssdn/uyZ860+UsJR0xQtjFB8N12+iS A1gTvhrD0CQNsg0C0sBU9/EOzi+KqveI2V3HHFNKh3U1csQOEgSbay53unZgXj5n y/PiAUnRTkAA7OITaTbsCz4/OfjC8yUK4BQSGBiiDjeoNRLGrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpURWIyytmRS6JSbUVvYI0ddO3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E0MTEyNDYtMmI5MS0z ZjQ2LTk2NjctODc0NjQyMWNlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIbvVYa5ahVYblgj02LZTWdgSo9uKsQz3VkgmT39/R5lRFqpnofOajo CxknZJIi/X4T31mwlbkjyGoryoG2PWWUYr9QXF3fM6J7tsuw33gSzErUitYGfGVZ KwRWE9Kzw9hapDYHSv6p7KKebXIikfrRp+4Nw88JZTnLrBom79zuZWh/Kf1sSm9S RRu4J1fsgzwmok2bOc7mQU9SIHLSpmfZY87JW3u4RclS4YmovAMI0zMsf9W5J18C dC8LYHKTYLs0vLwfQrMiT9WUqk8rHCEwGOApIGDjX9aqVT8WNacyhjt2LL0rYQEy bGWP0qtqxnCb1+PktfUEkx9ZTAIT13Y= -----END CERTIFICATE-----Generated at Mon Sep 21 20:32:53 2026 by rpki-client