$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c8f359c-5aaf-3102-973c-cd6e626be4f0.roa File: 4c8f359c-5aaf-3102-973c-cd6e626be4f0.roa (raw, json) Hash identifier: GOSmSs1AeNkSwxUzbsZNw4CPSpHmOD8XktjBr6Sd580= Subject key identifier: A8:16:3E:ED:7C:CB:16:F3:7C:2E:0D:2E:45:EE:69:B7:91:E6:F2:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD26BCCC35B1F79CDBBA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c8f359c-5aaf-3102-973c-cd6e626be4f0.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.99.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:26:bc:cc:35:b1:f7:9c:db:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=caa34e2f-a8d2-440d-a775-8f3c76cdebd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:f0:a4:19:2d:a8:ed:c2:11:53:94:23:2a: 3b:2c:96:49:8e:ec:2f:8a:3c:55:84:d3:30:d2:08: 25:9d:c8:d1:e6:99:e7:ad:01:40:b3:b6:e0:f2:69: 68:fd:e3:bd:5b:60:e0:37:d7:6d:c7:eb:db:c0:c7: 72:b0:7a:f9:a1:33:46:16:f4:9c:d6:8b:29:e6:1b: 25:f5:7a:e5:2a:43:c7:a5:86:f6:49:df:c2:c6:4e: 6d:d9:28:ea:28:f8:63:04:76:1a:9a:4d:7c:c3:51: 81:84:1e:91:36:1d:8f:40:5f:6e:f8:b1:fe:17:ed: b6:a6:73:ac:b9:bb:c1:13:b2:84:4c:fd:84:74:36: 50:8f:cf:bf:70:e5:a4:01:c4:d8:07:f5:e2:19:5d: 68:34:92:91:b7:59:62:93:b2:a1:ed:98:8e:f9:46: f4:a2:cb:45:13:c0:a3:58:ed:ad:2b:ab:10:2a:8f: ba:ab:fd:c7:63:27:73:47:2e:91:d0:b3:58:0f:5f: 5d:11:29:71:8d:e0:6d:4b:b1:ce:5b:54:ef:ef:dd: 21:6d:84:22:e1:9d:55:79:cf:2e:df:c1:02:ba:3c: b5:d4:70:66:cd:7d:f2:52:24:5e:24:70:ca:8e:33: a5:c2:b5:e0:08:c3:3c:c2:c7:40:dc:1f:9b:68:42: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:3E:ED:7C:CB:16:F3:7C:2E:0D:2E:45:EE:69:B7:91:E6:F2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c8f359c-5aaf-3102-973c-cd6e626be4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b1:db:c5:29:50:fe:47:c3:cc:e2:dd:46:5e:94:af:c3:e5: dd:73:b2:17:bd:26:b2:71:5d:c1:24:bf:a2:1d:12:b6:8a:1b: e6:ac:08:13:a4:b8:21:dd:f6:56:54:c8:c7:b9:ca:cf:3e:56: 37:49:b9:ba:a6:78:ca:ef:40:7e:c1:41:36:32:da:3b:e0:32: d6:f8:ff:c5:30:e5:80:35:15:bb:79:85:b2:18:f5:79:7e:ca: 4d:bc:d7:9b:27:74:7f:0c:c4:52:32:2c:eb:0a:4b:18:cc:04: 0b:63:2d:1f:91:a1:cf:79:cd:d7:72:18:cc:de:78:ce:b7:61: eb:ee:f7:66:8a:0d:56:53:88:e7:1a:cd:97:b9:8c:cc:d4:24: 76:c0:2a:6b:fa:10:8f:3c:bb:6c:43:71:ed:33:d6:7f:dd:1d: 32:55:c0:60:36:1d:4f:a9:c7:76:71:af:98:5b:23:c7:db:fe: b1:02:76:2d:f2:45:12:e4:c9:04:46:7f:b3:a8:65:02:d3:fa: 05:a6:de:08:61:58:46:10:4c:3b:58:64:bc:7c:0a:65:f8:43: 63:ec:00:eb:5c:5b:68:20:28:9b:30:cd:4e:86:1a:8b:06:b3: 79:d4:14:cd:70:29:14:04:97:30:fd:e5:5e:b9:4e:31:d8:d5: 39:0d:6b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSa8zDWx95zbuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk Y2FhMzRlMmYtYThkMi00NDBkLWE3NzUtOGYzYzc2Y2RlYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o7wpBktqO3CEVOUIyo7LJZJjuwvijxVhNMw 0gglncjR5pnnrQFAs7bg8mlo/eO9W2DgN9dtx+vbwMdysHr5oTNGFvSc1osp5hsl 9XrlKkPHpYb2Sd/Cxk5t2SjqKPhjBHYamk18w1GBhB6RNh2PQF9u+LH+F+22pnOs ubvBE7KETP2EdDZQj8+/cOWkAcTYB/XiGV1oNJKRt1lik7Kh7ZiO+Ub0ostFE8Cj WO2tK6sQKo+6q/3HYydzRy6R0LNYD19dESlxjeBtS7HOW1Tv790hbYQi4Z1Vec8u 38ECujy11HBmzX3yUiReJHDKjjOlwrXgCMM8wsdA3B+baEJJUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgWPu18yxbzfC4NLkXuabeR5vIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGM4ZjM1OWMtNWFhZi0z MTAyLTk3M2MtY2Q2ZTYyNmJlNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHax28UpUP5Hw8zi3UZelK/D5d1zshe9JrJxXcEkv6IdEraKG+asCBOk uCHd9lZUyMe5ys8+VjdJubqmeMrvQH7BQTYy2jvgMtb4/8Uw5YA1Fbt5hbIY9Xl+ yk2815sndH8MxFIyLOsKSxjMBAtjLR+Roc95zddyGMzeeM63Yevu92aKDVZTiOca zZe5jMzUJHbAKmv6EI88u2xDce0z1n/dHTJVwGA2HU+px3Zxr5hbI8fb/rECdi3y RRLkyQRGf7OoZQLT+gWm3ghhWEYQTDtYZLx8CmX4Q2PsAOtcW2ggKJswzU6GGosG s3nUFM1wKRQElzD95V65TjHY1TkNa0A= -----END CERTIFICATE-----Generated at Thu Sep 24 11:09:23 2026 by rpki-client