$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dafc78b-5dec-3788-b639-031a04492f55.roa File: 3dafc78b-5dec-3788-b639-031a04492f55.roa (raw, json) Hash identifier: ath8O2ZavnneJsq65fbBRxCTP61n3a5Ol76vBW4Jad0= Subject key identifier: 5D:BC:FC:6A:76:BF:59:8E:99:98:E9:B6:57:0E:D9:C1:EB:C4:2D:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41129358C68CD539EF6EE800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dafc78b-5dec-3788-b639-031a04492f55.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.104.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:93:58:c6:8c:d5:39:ef:6e:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=8333df64-3438-4877-8233-2ee3a43368e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a3:5f:42:1b:6c:45:b7:2d:73:eb:1e:c2:53: 6c:75:8e:a2:01:eb:be:8c:e7:91:a7:52:42:1d:2f: f3:20:37:e3:e7:ae:d6:7e:10:92:81:3f:20:ec:00: 46:58:38:c4:61:8c:a9:96:7a:fd:aa:2d:46:ed:77: b6:c7:e9:a8:dd:41:51:57:84:8b:61:6a:b3:e2:d1: 5e:5a:8e:ef:84:6f:c3:ab:97:5b:9c:6a:2f:d0:1b: a2:9b:b3:83:44:44:61:54:de:83:2b:e9:d1:f7:e6: 58:4e:00:f3:1b:2b:e3:2a:ba:9c:e5:5d:b4:eb:cb: 6a:6b:23:95:d2:7d:3e:16:c2:7a:d0:37:a8:fc:4c: 42:49:e7:07:2a:27:1b:00:dd:69:17:06:6e:20:c3: e9:25:07:4a:a1:ad:11:d2:81:2c:d1:cb:a0:c7:e1: 50:a0:d0:96:8d:93:6d:c6:12:2a:e9:ae:1c:1e:d1: 3e:10:a0:90:0f:0e:98:73:ab:02:ab:33:40:6f:f8: b8:9b:82:ee:07:bc:86:c2:aa:34:52:b3:fe:c2:f3: 26:81:8a:57:54:c2:8e:74:95:d6:f5:d9:25:9f:43: 81:24:57:b6:d4:cc:e4:51:fb:51:28:82:2b:e9:d5: 2f:e8:c7:a1:38:41:89:f0:53:f8:08:40:20:d4:a7: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:FC:6A:76:BF:59:8E:99:98:E9:B6:57:0E:D9:C1:EB:C4:2D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dafc78b-5dec-3788-b639-031a04492f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:85:24:48:ac:d8:41:ac:33:fe:7b:60:ba:9a:41:cf:65:3a: 29:b5:0f:b8:4e:ba:38:b4:c5:3b:f9:05:63:db:fd:fa:69:18: 17:11:ad:3c:5f:42:62:51:ee:ef:27:90:52:d9:49:0c:0b:6b: 8e:16:ba:d0:88:2f:a8:10:c3:a5:9b:96:d9:6a:41:27:ce:f4: 30:34:5d:2a:7c:fd:1e:2f:b9:f5:71:d8:c6:f9:2c:9c:93:07: 7f:ec:f9:2f:18:7a:6f:cf:b3:92:51:ce:09:c9:10:0f:43:d5: 73:a3:09:51:cc:b2:19:a5:c4:a8:98:ec:28:60:19:33:7f:28: ed:4b:8c:2a:15:29:c1:ea:3b:79:3c:2f:71:7c:ee:30:f3:a6: 42:9d:fd:a2:6d:6f:20:c2:0a:55:80:4c:dd:70:2d:f8:6c:ed: 2a:43:a3:b9:51:a4:99:a8:8f:13:8c:03:76:dd:72:9b:db:72: 17:50:33:31:93:4a:64:6f:6e:6e:9f:d2:90:40:88:99:a0:96: c6:99:3c:da:63:09:6d:32:f9:3a:b4:d3:23:f9:d1:b8:a8:bc: e2:2e:aa:e2:fa:68:30:a8:43:08:a8:53:bb:2b:34:18:90:10: 28:49:e9:29:4f:aa:5b:d8:34:e3:8f:a8:95:ec:de:d8:23:c8: e8:b6:dd:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEpNYxozVOe9u6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODMzM2RmNjQtMzQzOC00ODc3LTgyMzMtMmVlM2E0MzM2OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKNfQhtsRbctc+sewlNsdY6iAeu+jOeRp1JC HS/zIDfj567WfhCSgT8g7ABGWDjEYYyplnr9qi1G7Xe2x+mo3UFRV4SLYWqz4tFe Wo7vhG/Dq5dbnGov0Buim7ODRERhVN6DK+nR9+ZYTgDzGyvjKrqc5V2068tqayOV 0n0+FsJ60Deo/ExCSecHKicbAN1pFwZuIMPpJQdKoa0R0oEs0cugx+FQoNCWjZNt xhIq6a4cHtE+EKCQDw6Yc6sCqzNAb/i4m4LuB7yGwqo0UrP+wvMmgYpXVMKOdJXW 9dkln0OBJFe21MzkUftRKIIr6dUv6MehOEGJ8FP4CEAg1Ke1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF28/Gp2v1mOmZjptlcO2cHrxC0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RhZmM3OGItNWRlYy0z Nzg4LWI2MzktMDMxYTA0NDkyZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGjlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmFJEis2EGsM/57YLqaQc9lOim1D7hOuji0xTv5BWPb/fppGBcRrTxf QmJR7u8nkFLZSQwLa44WutCIL6gQw6WbltlqQSfO9DA0XSp8/R4vufVx2Mb5LJyT B3/s+S8Yem/Ps5JRzgnJEA9D1XOjCVHMshmlxKiY7ChgGTN/KO1LjCoVKcHqO3k8 L3F87jDzpkKd/aJtbyDCClWATN1wLfhs7SpDo7lRpJmojxOMA3bdcpvbchdQMzGT SmRvbm6f0pBAiJmglsaZPNpjCW0y+Tq00yP50biovOIuquL6aDCoQwioU7srNBiQ EChJ6SlPqlvYNOOPqJXs3tgjyOi23W8= -----END CERTIFICATE-----Generated at Tue Sep 22 16:50:56 2026 by rpki-client