$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40448d0c-f0b0-3829-86de-399baf0f226d.roa File: 40448d0c-f0b0-3829-86de-399baf0f226d.roa (raw, json) Hash identifier: twcN+c7RHZqsRoaItAQww8M1J2fDU8tqF1Nw0MBNDoc= Subject key identifier: 46:2C:7C:28:86:3A:AE:3B:22:3B:7E:7E:8C:96:06:D8:67:2D:36:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A331099F26F7E99B10E7600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40448d0c-f0b0-3829-86de-399baf0f226d.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.107.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:10:99:f2:6f:7e:99:b1:0e:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=17dfcd16-50ed-49ee-b10f-28e840265c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:d9:d2:61:af:a0:43:7f:66:2b:6b:fc:01: b3:0a:1d:9f:80:be:77:51:d5:95:b5:05:b8:28:6f: e4:4f:03:5c:99:a4:b6:22:55:fe:d3:cf:cc:74:6b: 37:69:8b:c0:61:e7:46:c2:54:3a:c0:7e:ba:b1:aa: 9b:ad:d9:a4:28:f4:b9:8f:bb:8b:72:23:b7:98:7d: 87:9a:1a:45:49:cf:f8:5d:16:15:cf:d9:0a:88:23: 4c:9a:37:34:23:99:51:12:af:0b:01:c6:64:4f:ad: 4c:40:58:f4:10:a3:78:19:f4:ca:eb:4d:8c:6f:72: 2c:37:7d:bd:e2:8c:a9:a9:0d:9e:89:5d:e9:47:c4: 9f:01:95:a6:86:4e:63:6b:8f:7b:54:8c:78:db:aa: 64:63:f8:fd:03:3b:76:d5:87:cf:f6:ec:5d:66:f3: 52:b7:f8:42:38:65:a6:d4:e8:16:de:bd:57:c1:08: 23:83:75:10:7c:0a:c0:a2:4d:a4:ce:3c:75:92:8d: 8e:5d:a0:77:b8:da:52:05:60:30:8a:6e:c0:e5:ae: a7:24:af:91:e0:c1:41:67:69:0e:a6:83:e9:85:90: 64:9c:c4:a8:49:64:85:bc:74:e1:86:9f:cd:54:e0: 69:26:86:38:19:f0:34:bc:68:ac:9b:d0:ac:0a:bc: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:7C:28:86:3A:AE:3B:22:3B:7E:7E:8C:96:06:D8:67:2D:36:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40448d0c-f0b0-3829-86de-399baf0f226d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:77:2c:94:fb:13:c9:7d:2a:a4:81:5b:ff:b7:86:37:fb:4b: d2:09:88:87:8b:18:d1:ed:f3:99:62:ec:20:b1:7f:4b:80:38: 60:dc:52:4a:e0:b9:9f:4f:bb:6a:0c:53:82:6b:10:72:86:90: 34:f4:80:88:95:dd:f2:48:8a:58:d7:79:a7:82:c2:be:69:3e: 24:87:f2:b2:b3:80:92:e2:f2:c1:a8:32:d6:90:15:70:4e:59: 13:b8:a1:65:31:55:0e:bb:30:6b:64:92:19:9f:05:1c:e9:b8: 06:04:2c:dd:8b:d8:81:54:18:a7:0f:1f:34:ff:64:8b:6f:3d: d1:fb:8e:bb:e8:a9:07:e6:d7:d5:22:52:e3:f3:cc:f9:36:17: a3:1a:16:de:5e:aa:55:f2:43:8f:3a:bf:74:71:da:0a:e2:e0: f7:21:0b:02:ed:a8:40:66:d9:90:23:0b:ec:fb:14:98:b2:52: 97:bc:56:9e:c1:f2:87:e1:51:f9:26:e2:c4:1f:a3:4c:47:21: c0:46:93:3a:40:6e:c9:7f:b5:3f:62:64:cc:63:d5:b3:0e:fe: c4:70:c7:9e:5d:70:6c:a8:be:a6:dc:12:54:2e:b3:36:6d:7b: 1f:e9:e4:53:45:c6:94:25:ba:93:24:d9:1c:ee:b2:38:a3:40: 1c:87:a3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxCZ8m9+mbEOdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MTdkZmNkMTYtNTBlZC00OWVlLWIxMGYtMjhlODQwMjY1YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ3Z0mGvoEN/Zitr/AGzCh2fgL53UdWVtQW4 KG/kTwNcmaS2IlX+08/MdGs3aYvAYedGwlQ6wH66saqbrdmkKPS5j7uLciO3mH2H mhpFSc/4XRYVz9kKiCNMmjc0I5lREq8LAcZkT61MQFj0EKN4GfTK602Mb3IsN329 4oypqQ2eiV3pR8SfAZWmhk5ja497VIx426pkY/j9Azt21YfP9uxdZvNSt/hCOGWm 1OgW3r1XwQgjg3UQfArAok2kzjx1ko2OXaB3uNpSBWAwim7A5a6nJK+R4MFBZ2kO poPphZBknMSoSWSFvHThhp/NVOBpJoY4GfA0vGism9CsCrz46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYsfCiGOq47Ijt+foyWBthnLTaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDA0NDhkMGMtZjBiMC0z ODI5LTg2ZGUtMzk5YmFmMGYyMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl3LJT7E8l9KqSBW/+3hjf7S9IJiIeLGNHt85li7CCxf0uAOGDcUkrg uZ9Pu2oMU4JrEHKGkDT0gIiV3fJIiljXeaeCwr5pPiSH8rKzgJLi8sGoMtaQFXBO WRO4oWUxVQ67MGtkkhmfBRzpuAYELN2L2IFUGKcPHzT/ZItvPdH7jrvoqQfm19Ui UuPzzPk2F6MaFt5eqlXyQ486v3Rx2gri4PchCwLtqEBm2ZAjC+z7FJiyUpe8Vp7B 8ofhUfkm4sQfo0xHIcBGkzpAbsl/tT9iZMxj1bMO/sRwx55dcGyovqbcElQuszZt ex/p5FNFxpQlupMk2RzusjijQByHo8M= -----END CERTIFICATE-----Generated at Sun Oct 11 08:40:53 2026 by rpki-client