$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c32ea56-07da-3f81-8d1a-a234828a120f.roa File: 3c32ea56-07da-3f81-8d1a-a234828a120f.roa (raw, json) Hash identifier: xfjVCYIkiHvZewSq20hWdTKSprinXJ2kMN7qdM5/GSg= Subject key identifier: 3B:66:C8:04:F7:E8:67:01:02:A8:FC:6C:97:46:9F:95:D7:EA:22:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD834722E5E47E8C9622C8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c32ea56-07da-3f81-8d1a-a234828a120f.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.99.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:83:47:22:e5:e4:7e:8c:96:22:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=365d82c6-7a14-49ff-bb95-8cd98ab7aa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:00:13:d8:0e:4d:75:b2:4f:02:f9:c7:fb: a3:1f:dc:00:a2:48:4b:e6:f3:fa:67:c4:3e:8e:ab: 6c:ae:bc:ff:47:7b:fe:e3:99:ad:71:0a:13:34:cb: c5:26:b6:54:6d:5b:ae:9d:73:d7:ac:df:d4:02:4d: c2:cc:e8:99:5c:84:45:ae:d6:84:1c:79:74:a4:d5: 8e:fa:8e:09:42:d8:e3:d0:69:4b:8d:24:5e:20:16: d2:77:8e:22:9c:4e:ea:13:f6:c1:af:e6:0e:33:bc: 5b:3b:3d:2d:5d:11:0c:90:24:55:97:df:2e:41:16: 07:13:d6:24:25:9d:84:7a:93:16:7b:36:c9:65:96: cf:3e:53:cc:1d:a4:d2:db:5c:d5:65:7e:9d:3d:7f: 41:cc:e1:c0:3e:72:b9:93:a7:4b:ac:f9:ab:1e:d2: fc:70:cb:b8:c4:d3:1c:fc:e4:33:1a:6b:96:d3:63: 58:1b:8a:8a:64:1b:8a:2a:49:67:e5:0b:06:d9:15: a3:2d:21:dc:bd:2c:f4:3b:11:dd:25:49:23:ee:4a: 8a:36:89:8d:0a:7e:da:4e:54:b6:15:09:f2:13:5a: 9a:cd:24:e6:cc:11:c3:10:b6:b9:7c:21:1d:46:51: f2:e2:ce:79:ee:27:96:49:e4:66:c7:c0:55:11:8d: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:C8:04:F7:E8:67:01:02:A8:FC:6C:97:46:9F:95:D7:EA:22:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c32ea56-07da-3f81-8d1a-a234828a120f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d7:eb:ef:ac:f5:cc:d4:a3:73:14:ed:a3:0e:79:95:ad:bf: f7:53:fa:02:e3:72:68:4c:d3:95:f0:63:ce:38:ba:59:d0:27: df:dd:60:59:cf:6b:a7:a1:9d:3d:1d:74:98:9b:dd:d9:aa:58: c6:00:26:c0:e0:95:09:38:f3:fd:c9:50:de:06:2b:c8:6e:62: 75:70:0a:f3:76:09:ac:c3:d2:51:00:19:a1:f1:10:0e:e9:a8: 11:ac:50:ee:46:24:93:90:1c:14:0a:bc:ba:d2:75:e7:c9:e0: ca:2d:7a:4c:1a:af:25:1d:c9:49:96:74:9d:e8:ba:8a:1c:95: fe:95:ca:0d:01:cf:fc:d2:11:32:8a:f5:be:7b:73:4a:29:2f: ee:b6:5c:0e:89:c6:9d:bf:60:52:77:41:b7:2a:bd:60:de:1e: e4:59:68:1b:c3:bb:2b:99:f2:82:99:87:f3:29:82:fb:c3:82: 76:4e:24:10:02:e8:d8:66:a0:61:87:fb:fb:91:33:85:30:da: 0b:af:b1:02:86:43:84:a4:72:03:d2:38:78:11:f3:40:bb:2e: cb:37:6f:58:19:ff:97:99:6e:f9:38:de:8d:b7:b7:af:90:0f: 76:4b:29:51:60:61:90:00:da:04:f6:5c:45:f6:03:9e:d7:38: 6a:5d:ad:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYNHIuXkfoyWIsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MzY1ZDgyYzYtN2ExNC00OWZmLWJiOTUtOGNkOThhYjdhYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDYAE9gOTXWyTwL5x/ujH9wAokhL5vP6Z8Q+ jqtsrrz/R3v+45mtcQoTNMvFJrZUbVuunXPXrN/UAk3CzOiZXIRFrtaEHHl0pNWO +o4JQtjj0GlLjSReIBbSd44inE7qE/bBr+YOM7xbOz0tXREMkCRVl98uQRYHE9Yk JZ2EepMWezbJZZbPPlPMHaTS21zVZX6dPX9BzOHAPnK5k6dLrPmrHtL8cMu4xNMc /OQzGmuW02NYG4qKZBuKKkln5QsG2RWjLSHcvSz0OxHdJUkj7kqKNomNCn7aTlS2 FQnyE1qazSTmzBHDELa5fCEdRlHy4s557ieWSeRmx8BVEY01DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtmyAT36GcBAqj8bJdGn5XX6iJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2MzMmVhNTYtMDdkYS0z ZjgxLThkMWEtYTIzNDgyOGExMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfX6++s9czUo3MU7aMOeZWtv/dT+gLjcmhM05XwY844ulnQJ9/dYFnP a6ehnT0ddJib3dmqWMYAJsDglQk48/3JUN4GK8huYnVwCvN2CazD0lEAGaHxEA7p qBGsUO5GJJOQHBQKvLrSdefJ4MotekwaryUdyUmWdJ3ouooclf6Vyg0Bz/zSETKK 9b57c0opL+62XA6Jxp2/YFJ3QbcqvWDeHuRZaBvDuyuZ8oKZh/MpgvvDgnZOJBAC 6NhmoGGH+/uRM4Uw2guvsQKGQ4SkcgPSOHgR80C7Lss3b1gZ/5eZbvk43o23t6+Q D3ZLKVFgYZAA2gT2XEX2A57XOGpdrUE= -----END CERTIFICATE-----Generated at Mon Sep 21 23:58:41 2026 by rpki-client