$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa File: 49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa (raw, json) Hash identifier: 3hcz8o9CzjvDtoAQQDfAvIDyOy1Aac/vVBxC3ZjTVuA= Subject key identifier: 0F:87:5C:3C:F3:4D:DE:9D:36:8E:34:F0:8C:62:A0:7D:0A:49:A4:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE2BB15BF996ADC719B7C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:bb:15:bf:99:6a:dc:71:9b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=cf9a357b-df58-48bc-96b9-9d49b1f4659f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:ee:40:7d:56:70:6b:8e:cb:f6:25:7f:63: 1a:c4:1b:ab:b5:02:09:7a:f4:72:29:09:3b:95:82: e3:e2:0b:8f:f9:1d:87:73:d2:f8:e0:db:07:89:6e: 2f:6c:df:d2:5a:35:d2:8b:e5:cd:f5:23:28:8b:3e: ba:0b:b8:92:6b:40:9d:3a:78:d9:9f:ae:1b:ed:c8: 72:f4:27:0c:42:ae:5d:43:74:0e:07:99:09:ba:67: 17:eb:bd:84:81:58:9a:da:4e:8d:75:33:8f:44:57: 93:68:d0:7f:18:66:82:16:fe:41:1f:a9:9e:ac:9c: b5:84:5f:70:52:ea:57:31:3d:28:c7:0d:0d:74:ff: 5e:53:7d:a8:9a:12:f9:db:d0:bf:a5:ec:40:ce:da: 3c:e3:a9:be:64:f7:29:1a:5b:39:aa:d7:86:5d:02: f4:60:0a:bd:1a:a3:cd:85:ed:ad:82:1e:ad:f4:ba: 6c:0a:50:52:2d:f6:b8:19:73:4f:b3:87:4c:81:22: 44:92:cc:90:e8:90:e5:3f:3b:22:2d:16:37:34:53: da:5a:46:65:fa:e9:94:3a:58:40:36:58:5b:40:73: 72:7e:23:0a:62:e8:18:a4:1c:a3:4c:dc:0f:2a:2a: fa:a1:85:17:09:a8:6f:67:9a:0c:fd:75:f8:3f:fa: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:87:5C:3C:F3:4D:DE:9D:36:8E:34:F0:8C:62:A0:7D:0A:49:A4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:73:6f:be:b3:45:27:f1:94:e3:8c:84:b0:fc:20:81:d0:36: bf:71:d6:7b:e3:74:ca:40:53:74:ef:c8:49:52:58:8b:cc:14: 77:70:3a:1a:19:98:c7:a7:d5:9b:96:86:ca:90:b7:ca:d2:14: ce:5f:fa:94:11:1e:ee:28:8f:59:2c:eb:d1:86:d7:4e:b2:0d: 13:96:8d:e7:77:bf:18:b8:18:fc:43:d5:ed:a8:a4:05:d6:8f: f2:fb:8a:d8:62:bb:ba:b7:a2:39:80:80:98:9f:e1:a1:cf:fc: 30:0e:75:8f:86:de:50:8e:a2:75:e2:40:e5:f0:13:86:60:07: 65:69:cb:69:3b:a8:e5:07:3f:ff:c5:96:33:cd:66:b6:36:82: 0d:1b:9d:9b:48:75:18:81:61:1b:a3:c7:14:c2:80:a8:39:b3: ee:a0:66:83:ad:cc:2b:95:7a:5a:bc:28:54:a6:41:6b:48:d1: 58:e0:3c:61:d3:c8:42:95:af:a2:a8:a1:c3:94:61:11:e6:99: f4:50:ae:20:3d:5c:ff:6f:d3:f9:1c:fa:ad:3c:89:d4:2f:98: 82:10:5a:b4:8e:64:da:07:88:81:45:e7:16:4c:40:08:27:a5: 39:d6:18:ca:94:e5:c4:f9:5f:c9:92:65:5a:72:53:7e:ff:46: 5f:7d:7f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rsVv5lq3HGbfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y5YTM1N2ItZGY1OC00OGJjLTk2YjktOWQ0OWIxZjQ2NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+XuQH1WcGuOy/Ylf2MaxBurtQIJevRyKQk7 lYLj4guP+R2Hc9L44NsHiW4vbN/SWjXSi+XN9SMoiz66C7iSa0CdOnjZn64b7chy 9CcMQq5dQ3QOB5kJumcX672EgVia2k6NdTOPRFeTaNB/GGaCFv5BH6merJy1hF9w UupXMT0oxw0NdP9eU32omhL529C/pexAzto846m+ZPcpGls5qteGXQL0YAq9GqPN he2tgh6t9LpsClBSLfa4GXNPs4dMgSJEksyQ6JDlPzsiLRY3NFPaWkZl+umUOlhA NlhbQHNyfiMKYugYpByjTNwPKir6oYUXCahvZ5oM/XX4P/rJJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+HXDzzTd6dNo408IxioH0KSaRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDlhZmVmN2MtNWFlNi0z NWU4LTkyYzMtYjg5ZjQ2Y2Y4NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVzb76zRSfxlOOMhLD8IIHQNr9x1nvjdMpAU3TvyElSWIvMFHdwOhoZ mMen1ZuWhsqQt8rSFM5f+pQRHu4oj1ks69GG106yDROWjed3vxi4GPxD1e2opAXW j/L7ithiu7q3ojmAgJif4aHP/DAOdY+G3lCOonXiQOXwE4ZgB2Vpy2k7qOUHP//F ljPNZrY2gg0bnZtIdRiBYRujxxTCgKg5s+6gZoOtzCuVelq8KFSmQWtI0VjgPGHT yEKVr6KoocOUYRHmmfRQriA9XP9v0/kc+q08idQvmIIQWrSOZNoHiIFF5xZMQAgn pTnWGMqU5cT5X8mSZVpyU37/Rl99f3w= -----END CERTIFICATE-----Generated at Mon Sep 21 02:35:48 2026 by rpki-client