$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48f784e2-c21b-325f-a52a-c08c50b780bc.roa File: 48f784e2-c21b-325f-a52a-c08c50b780bc.roa (raw, json) Hash identifier: 72hup7Oog15bEKIV1s3U+5Q7VAKeq8dsmue4sU1AExA= Subject key identifier: 3B:0D:49:D4:43:A3:51:29:55:F4:11:6A:80:A2:33:F5:2A:80:AB:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE283AA671138811F648760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48f784e2-c21b-325f-a52a-c08c50b780bc.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:83:aa:67:11:38:81:1f:64:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=9ea544cf-da60-4050-af70-63ed10f74973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8f:00:3e:ab:8d:3e:2e:ed:b9:71:83:ab:e6: 48:93:e3:38:96:f4:5e:eb:e3:fe:dc:5f:a2:9d:89: 92:b6:11:b9:a6:5b:f8:92:1b:c5:8e:50:f7:a8:83: bd:f0:55:da:0f:28:82:1d:75:8a:19:9d:1e:8a:c0: 7d:4d:c5:8b:32:6b:05:e7:dc:52:2f:48:17:0e:04: bf:8b:81:ec:2b:6c:c3:3d:7c:cb:02:6e:bf:c9:7e: 3d:88:75:50:09:78:88:52:e8:d9:80:ea:95:e8:32: da:89:85:e1:cb:5a:2b:ab:f3:2a:42:67:15:5e:94: 84:2e:73:62:3a:ef:7f:c5:f2:fc:5f:fb:0b:c3:65: 86:75:84:4f:86:d4:c5:f0:35:66:f1:35:04:d5:43: 3a:48:ee:14:0b:49:18:52:7a:8f:c1:95:15:69:42: 14:06:ec:39:5c:4b:4c:bd:91:1e:c3:99:c0:7c:be: 6c:b8:88:da:05:e7:df:ac:30:54:4d:29:6b:b1:ca: 23:c7:56:b1:be:da:34:18:f8:5d:ba:cd:01:9e:12: b2:02:ce:05:18:6b:0c:de:f5:ea:fd:43:18:7e:5e: df:9a:33:22:85:65:b7:22:9b:b5:54:68:c3:19:f4: 5e:b0:95:f9:c3:d0:77:ab:6d:f7:02:c1:9a:42:97: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:49:D4:43:A3:51:29:55:F4:11:6A:80:A2:33:F5:2A:80:AB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48f784e2-c21b-325f-a52a-c08c50b780bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:84:12:3b:e3:a1:a2:a6:44:a1:52:11:dc:00:74:fb:39:96: ad:89:30:9e:d5:b8:eb:d0:94:06:0b:9f:0f:c4:90:57:d1:be: dd:e1:91:83:a0:d3:0c:cd:d7:d9:8f:2a:c3:d0:3b:cf:7b:d2: 18:27:5a:75:4e:05:d9:55:e8:86:4a:13:6b:97:43:51:d5:0d: a6:7d:0e:04:7a:23:92:19:cf:0f:69:2b:eb:34:5f:2c:55:ee: ef:b6:49:89:4a:55:04:68:2d:90:4f:f6:aa:35:da:5a:bb:83: 29:b9:ff:22:e3:9d:aa:ca:bf:ee:65:ee:53:e8:7d:2b:17:11: b9:49:76:ba:c8:e1:34:07:e4:d0:57:7d:21:18:8a:75:7b:db: 01:6c:35:33:8b:a2:34:28:dd:c9:81:ef:fa:9c:00:b7:00:65: 7d:29:11:83:ca:82:32:0c:8f:77:69:37:00:43:c5:ae:67:f6: be:54:69:78:a4:43:1c:e2:6d:f3:b7:3a:a8:58:e5:b7:cf:eb: d1:a1:2a:83:9d:0c:15:33:70:a7:bc:a4:c9:3b:32:7c:1f:45: 4a:14:76:7a:b5:89:a9:5e:23:5d:42:21:a5:29:23:1e:9b:be: 7c:a1:61:93:9e:fe:ce:32:67:59:00:e3:96:f1:91:64:de:cd: 9e:9d:09:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oOqZxE4gR9kh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OWVhNTQ0Y2YtZGE2MC00MDUwLWFmNzAtNjNlZDEwZjc0OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh48APquNPi7tuXGDq+ZIk+M4lvRe6+P+3F+i nYmSthG5plv4khvFjlD3qIO98FXaDyiCHXWKGZ0eisB9TcWLMmsF59xSL0gXDgS/ i4HsK2zDPXzLAm6/yX49iHVQCXiIUujZgOqV6DLaiYXhy1orq/MqQmcVXpSELnNi Ou9/xfL8X/sLw2WGdYRPhtTF8DVm8TUE1UM6SO4UC0kYUnqPwZUVaUIUBuw5XEtM vZEew5nAfL5suIjaBeffrDBUTSlrscojx1axvto0GPhdus0BnhKyAs4FGGsM3vXq /UMYfl7fmjMihWW3Ipu1VGjDGfResJX5w9B3q233AsGaQpeTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsNSdRDo1EpVfQRaoCiM/UqgKv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDhmNzg0ZTItYzIxYi0z MjVmLWE1MmEtYzA4YzUwYjc4MGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqEEjvjoaKmRKFSEdwAdPs5lq2JMJ7VuOvQlAYLnw/EkFfRvt3hkYOg 0wzN19mPKsPQO8970hgnWnVOBdlV6IZKE2uXQ1HVDaZ9DgR6I5IZzw9pK+s0XyxV 7u+2SYlKVQRoLZBP9qo12lq7gym5/yLjnarKv+5l7lPofSsXEblJdrrI4TQH5NBX fSEYinV72wFsNTOLojQo3cmB7/qcALcAZX0pEYPKgjIMj3dpNwBDxa5n9r5UaXik QxzibfO3OqhY5bfP69GhKoOdDBUzcKe8pMk7MnwfRUoUdnq1ialeI11CIaUpIx6b vnyhYZOe/s4yZ1kA45bxkWTezZ6dCUM= -----END CERTIFICATE-----Generated at Tue Sep 22 17:34:55 2026 by rpki-client