$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa File: 3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa (raw, json) Hash identifier: RZeCX47l9ZIEv3uiAd9KTbSLZbnAnHEhrUacGkilUGA= Subject key identifier: 18:B5:A3:50:F0:94:DC:09:21:65:12:FF:DB:0F:F4:11:3C:18:36:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33275677EC07EF413F5F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.8.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:27:56:77:ec:07:ef:41:3f:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=cffa60e0-136f-459e-9e19-a6460fad130f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:42:b7:da:40:66:bd:33:86:c7:54:8d:e7: ef:4c:65:3a:1a:16:5c:9f:c4:40:2a:9f:0e:50:17: 9b:cc:5e:22:d3:34:06:77:8d:59:bf:a2:0f:1b:45: 4d:fb:0e:29:27:62:f1:1e:b3:e7:f0:fa:33:a5:57: 2e:70:fb:81:39:5a:8b:b3:94:c3:c4:1d:39:e1:f7: 0c:4c:83:86:18:d9:d0:60:a9:d8:81:1d:c9:28:68: c3:78:e5:3e:df:0a:7d:9a:3f:7a:bd:f0:0d:eb:ae: b7:1c:a7:4b:35:1a:66:8b:f4:92:a7:77:63:d0:b9: 19:ba:9b:7c:25:e8:f6:3c:5f:85:e7:a8:b9:01:dd: 4a:4d:cb:54:5b:29:76:c5:18:c7:e1:58:13:fc:11: 8f:b2:0b:38:8e:18:23:c5:c2:66:ac:c8:b8:c0:e2: e5:e4:d5:92:d0:8f:80:21:e3:51:a5:fe:c6:16:bc: 71:78:28:a3:32:94:5a:35:50:e2:7a:cf:67:87:d9: 7a:72:ab:37:ce:53:3e:de:af:eb:c0:d7:78:e7:66: 7e:c6:a6:3b:f2:69:21:7a:aa:d0:a2:f9:f7:cd:43: ce:67:da:78:29:9f:35:be:88:9d:57:96:2b:56:b7: 22:4e:6c:66:00:d4:85:96:3d:96:47:a1:03:fa:fb: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:A3:50:F0:94:DC:09:21:65:12:FF:DB:0F:F4:11:3C:18:36:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:96:87:a8:75:03:42:3e:aa:63:84:13:bc:49:4f:1a:0a:24: b0:34:01:3d:d1:6e:75:d0:bc:37:d7:5a:8e:e4:46:ef:fc:a3: ce:dc:e9:e3:09:3e:e4:ea:9e:65:d0:7f:46:29:46:44:1b:11: 8d:8b:8b:f6:7e:c9:95:ea:6d:c9:02:a1:1e:11:c2:d1:ba:9c: 57:7b:0d:ad:ae:53:de:37:d8:79:b8:20:10:73:64:95:6d:92: 21:f6:e7:dd:f9:5a:94:8d:a2:6a:1a:3a:a3:1f:fe:c4:bb:9c: e9:1c:32:58:9a:c2:94:1a:8e:01:0b:31:d6:fe:e3:2a:46:77: 85:d4:7c:34:99:cc:16:89:87:8c:6c:7b:b3:47:c2:ac:59:e2: 63:36:13:b0:63:c5:61:7f:1a:39:6c:e6:55:48:59:b5:5e:9b: 88:7c:7e:01:ed:e2:d0:2b:27:fb:a6:85:a0:17:02:74:75:7b: 88:8c:1a:19:fe:2c:df:dc:f5:78:eb:c7:42:1c:d7:10:88:73: 7b:4c:b1:cc:ad:14:77:9f:bf:3e:39:73:51:e6:40:4d:34:ed: 15:9a:f2:87:e6:e3:05:87:ff:e2:94:18:8a:0e:0e:1c:42:f4: bf:40:74:57:4f:ff:45:9f:f6:00:89:7a:d9:b9:77:05:04:f3: 47:b0:14:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMydWd+wH70E/XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZmYTYwZTAtMTM2Zi00NTllLTllMTktYTY0NjBmYWQxMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV1Ct9pAZr0zhsdUjefvTGU6GhZcn8RAKp8O UBebzF4i0zQGd41Zv6IPG0VN+w4pJ2LxHrPn8PozpVcucPuBOVqLs5TDxB054fcM TIOGGNnQYKnYgR3JKGjDeOU+3wp9mj96vfAN6663HKdLNRpmi/SSp3dj0LkZupt8 Jej2PF+F56i5Ad1KTctUWyl2xRjH4VgT/BGPsgs4jhgjxcJmrMi4wOLl5NWS0I+A IeNRpf7GFrxxeCijMpRaNVDies9nh9l6cqs3zlM+3q/rwNd452Z+xqY78mkheqrQ ovn3zUPOZ9p4KZ81voidV5YrVrciTmxmANSFlj2WR6ED+vuWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi1o1DwlNwJIWUS/9sP9BE8GDaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RmOWZjYWEtYmVhNi0z YjNkLTliYWItMzJlYTdlMmY1ZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmWh6h1A0I+qmOEE7xJTxoKJLA0AT3RbnXQvDfXWo7kRu/8o87c6eMJ PuTqnmXQf0YpRkQbEY2Li/Z+yZXqbckCoR4RwtG6nFd7Da2uU9432Hm4IBBzZJVt kiH25935WpSNomoaOqMf/sS7nOkcMliawpQajgELMdb+4ypGd4XUfDSZzBaJh4xs e7NHwqxZ4mM2E7BjxWF/Gjls5lVIWbVem4h8fgHt4tArJ/umhaAXAnR1e4iMGhn+ LN/c9Xjrx0Ic1xCIc3tMscytFHefvz45c1HmQE007RWa8ofm4wWH/+KUGIoODhxC 9L9AdFdP/0Wf9gCJetm5dwUE80ewFDo= -----END CERTIFICATE-----Generated at Thu Nov 5 11:26:50 2026 by rpki-client