$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4214f454-3e00-35a5-b9c6-304c46afdc47.roa File: 4214f454-3e00-35a5-b9c6-304c46afdc47.roa (raw, json) Hash identifier: ECMbsHB6664+oWLm8M2mWYV51IcyRbHVrf4F6iBsGGQ= Subject key identifier: F3:82:35:BE:59:B4:77:43:F9:5F:CF:95:1F:40:DF:32:B8:9A:29:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE27B1DF02D748559EBB2D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4214f454-3e00-35a5-b9c6-304c46afdc47.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7b:1d:f0:2d:74:85:59:eb:b2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=cb9eb0c3-de21-41fa-b8d4-f7c2ef1737c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:b1:07:46:05:b8:73:51:59:50:67:8f:fd: 50:41:e7:28:49:88:9f:86:85:4b:b5:ff:ec:bc:56: 6d:07:5d:fc:0b:aa:fc:8a:95:31:a9:95:d0:af:62: 38:aa:de:5f:ea:82:d8:38:c9:8d:62:2a:6a:8d:57: 60:93:dd:57:d8:da:28:96:03:ab:c9:b5:05:79:b6: 3f:7c:ac:3a:e5:6b:28:bf:15:b1:96:5e:86:4a:42: 04:0a:5b:6a:3a:a5:3e:21:34:82:80:e6:e0:61:bc: 75:f9:4a:db:65:7d:61:88:9e:ee:1b:bb:fc:47:48: ef:83:bc:d5:5e:ab:54:5e:78:96:67:a6:73:21:b3: 4c:5a:ce:9b:4e:72:14:9c:9d:6d:9c:3c:15:e8:d2: 98:2c:f2:c3:45:d3:0c:11:02:62:f2:1e:a6:3b:87: b6:79:4d:68:f8:73:7a:aa:ac:a0:64:d5:fc:4d:67: 0c:4e:70:25:61:06:50:75:31:2e:b0:33:8b:d2:0a: 0d:75:55:4d:01:31:38:e6:9b:7b:26:ca:eb:c6:ec: d8:2d:c0:af:4f:a8:66:c3:68:2f:14:b7:30:fb:87: 29:96:b3:cc:22:3f:79:15:53:a5:c1:ad:a1:15:43: 32:70:22:0e:84:c0:aa:83:11:7f:f8:3b:88:0f:f1: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:35:BE:59:B4:77:43:F9:5F:CF:95:1F:40:DF:32:B8:9A:29:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4214f454-3e00-35a5-b9c6-304c46afdc47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:23:1f:fa:80:81:d4:c0:18:3e:38:f6:53:df:98:5b:69:f1: 5a:4e:c6:41:f1:45:c8:d7:f4:ef:f8:20:2f:b6:91:76:de:86: 3b:b8:09:7c:e7:3a:69:cc:f4:c4:a2:c5:7d:43:87:03:69:a7: 2b:1f:50:70:ff:a6:1b:79:ba:d2:61:c8:5f:e3:1a:2a:52:29: ba:e5:ba:37:e2:28:cc:04:fb:5b:5e:c9:2c:98:b9:b8:fd:be: 82:6e:ce:95:e7:0a:f0:df:c0:20:a7:37:7e:b0:28:d4:81:ce: d4:09:f2:7b:b4:e7:f2:9b:88:d9:8c:73:bb:42:60:de:60:5c: aa:a7:84:b5:14:0d:22:29:18:de:3e:f9:7a:eb:9c:5e:79:94: e0:dd:ad:43:a3:30:ba:16:70:30:35:4c:c3:b1:1e:b9:f5:f9: 40:d0:d6:45:a1:3a:ef:56:97:ea:3c:93:05:ca:1a:ec:a1:d9: 15:0a:36:7c:3f:1f:58:aa:98:03:6d:f7:81:86:23:9a:e8:44: da:c2:f8:54:09:bf:c3:a8:31:0f:73:b7:8b:38:70:0c:02:b0: f3:5d:48:ef:5d:77:fb:3d:32:3b:40:ca:82:2a:cc:87:0a:7b: 8f:76:85:d8:45:75:69:e0:dd:2e:9d:80:07:11:dd:ba:b9:4e: f8:f7:95:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nsd8C10hVnrstAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2I5ZWIwYzMtZGUyMS00MWZhLWI4ZDQtZjdjMmVmMTczN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWqxB0YFuHNRWVBnj/1QQecoSYifhoVLtf/s vFZtB138C6r8ipUxqZXQr2I4qt5f6oLYOMmNYipqjVdgk91X2NoolgOrybUFebY/ fKw65WsovxWxll6GSkIECltqOqU+ITSCgObgYbx1+UrbZX1hiJ7uG7v8R0jvg7zV XqtUXniWZ6ZzIbNMWs6bTnIUnJ1tnDwV6NKYLPLDRdMMEQJi8h6mO4e2eU1o+HN6 qqygZNX8TWcMTnAlYQZQdTEusDOL0goNdVVNATE45pt7JsrrxuzYLcCvT6hmw2gv FLcw+4cplrPMIj95FVOlwa2hFUMycCIOhMCqgxF/+DuID/HM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOCNb5ZtHdD+V/PlR9A3zK4mikwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDIxNGY0NTQtM2UwMC0z NWE1LWI5YzYtMzA0YzQ2YWZkYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHojH/qAgdTAGD449lPfmFtp8VpOxkHxRcjX9O/4IC+2kXbehju4CXzn OmnM9MSixX1DhwNppysfUHD/pht5utJhyF/jGipSKbrlujfiKMwE+1teySyYubj9 voJuzpXnCvDfwCCnN36wKNSBztQJ8nu05/KbiNmMc7tCYN5gXKqnhLUUDSIpGN4+ +XrrnF55lODdrUOjMLoWcDA1TMOxHrn1+UDQ1kWhOu9Wl+o8kwXKGuyh2RUKNnw/ H1iqmANt94GGI5roRNrC+FQJv8OoMQ9zt4s4cAwCsPNdSO9dd/s9MjtAyoIqzIcK e492hdhFdWng3S6dgAcR3bq5Tvj3lXc= -----END CERTIFICATE-----Generated at Sun Sep 20 17:47:08 2026 by rpki-client