$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa File: 4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa (raw, json) Hash identifier: r9ul6/U3FDtCK1pbTH6zeUfH3OeFJKMCbBSqswSxc1A= Subject key identifier: 3F:5F:A8:13:1C:87:26:0E:07:8F:2C:DF:33:C5:BF:62:9D:ED:4F:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112D7933AD2CB8CEBA33440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.231.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:d7:93:3a:d2:cb:8c:eb:a3:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=9af111a6-6df6-4944-931c-89fa38230caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:0a:b4:ba:2f:e2:e4:d4:10:70:ea:8a:22: 3f:a5:25:b8:38:77:a2:b8:14:64:55:39:75:fc:d2: 5c:de:e7:0f:da:7f:9f:02:e1:90:ff:22:22:b8:31: ea:12:3b:e5:59:78:54:ea:14:a7:5d:50:f0:a2:9a: 62:56:cf:f6:7e:52:04:db:a7:3b:97:8d:7e:4d:45: 03:65:31:3f:af:b5:f0:de:7f:1e:90:ae:2a:97:98: e9:df:46:eb:4d:3f:16:c6:d7:ac:55:dd:7f:2a:a2: a5:a0:0d:5c:db:b5:93:01:f1:e4:af:1d:ad:06:72: 66:11:f6:d2:c3:75:78:23:16:50:1d:21:8b:6a:1b: a1:89:3d:62:95:95:5d:41:00:39:a0:4b:42:37:96: b4:e5:fd:b8:93:a8:19:65:b2:7c:a9:56:9c:c5:62: e2:c1:1b:f9:45:25:a7:9c:72:2f:e5:13:56:bf:6d: 4e:07:a3:db:9e:ad:6d:10:aa:35:af:30:18:89:fa: 55:70:d5:95:77:a6:3d:ec:ee:0c:36:b3:48:c3:20: e3:93:d5:85:4a:a7:89:78:8f:b7:ec:10:92:78:2c: 8c:d1:59:61:f2:85:fc:e6:d9:28:3f:93:4b:f9:dc: b4:bd:4f:fc:5d:6a:d8:88:5a:57:45:da:18:79:b8: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5F:A8:13:1C:87:26:0E:07:8F:2C:DF:33:C5:BF:62:9D:ED:4F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:73:55:2b:8d:38:77:f2:5c:19:47:21:46:e4:c6:2c:44:d3: 51:76:b1:89:0a:c3:47:97:48:39:ad:89:93:40:37:7a:9f:07: 07:32:df:56:55:31:c7:d1:d7:fe:e4:42:d3:93:24:6b:81:91: 04:0a:b7:26:b2:a6:0d:6b:d8:24:ac:5d:5b:22:03:1f:e2:37: 18:d4:ad:9c:d8:20:e6:05:f8:e0:8d:d8:36:f6:fc:72:2a:25: 82:ab:59:a1:77:5f:37:45:e8:d1:7b:56:97:89:c0:8c:2a:00: 92:17:03:b3:0d:47:0c:33:a7:e9:4e:96:b8:74:5d:b9:57:8d: f0:bf:71:ff:4d:a8:90:be:ba:1f:0e:16:3d:98:73:04:78:b8: 4b:48:ae:3f:ef:c2:ab:b1:0b:c5:9e:9c:7b:b0:9f:14:eb:5d: 2d:20:4d:4c:f0:d4:ad:a0:f5:5a:f5:49:0d:0b:b1:94:d8:74: 19:65:52:52:2f:90:f8:a7:ba:26:d5:05:58:f4:05:2c:3c:5f: 34:2f:03:c7:16:d2:b1:a9:09:f8:9f:34:fb:3a:d0:18:75:27: 06:92:0d:9a:51:e4:6d:44:a2:f6:e7:fa:ae:fa:86:5d:23:44: 63:2e:0d:64:cd:65:2c:3c:ef:1a:b1:86:b3:55:67:5c:7b:72: a2:c9:7b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEteTOtLLjOujNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk OWFmMTExYTYtNmRmNi00OTQ0LTkzMWMtODlmYTM4MjMwY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbwKtLov4uTUEHDqiiI/pSW4OHeiuBRkVTl1 /NJc3ucP2n+fAuGQ/yIiuDHqEjvlWXhU6hSnXVDwoppiVs/2flIE26c7l41+TUUD ZTE/r7Xw3n8ekK4ql5jp30brTT8WxtesVd1/KqKloA1c27WTAfHkrx2tBnJmEfbS w3V4IxZQHSGLahuhiT1ilZVdQQA5oEtCN5a05f24k6gZZbJ8qVacxWLiwRv5RSWn nHIv5RNWv21OB6Pbnq1tEKo1rzAYifpVcNWVd6Y97O4MNrNIwyDjk9WFSqeJeI+3 7BCSeCyM0Vlh8oX85tkoP5NL+dy0vU/8XWrYiFpXRdoYebixNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9fqBMchyYOB48s3zPFv2Kd7U+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGYxNTY4ZTMtODZhZC0z ZTRhLWJkM2QtM2FjN2M2MTcwZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpzVSuNOHfyXBlHIUbkxixE01F2sYkKw0eXSDmtiZNAN3qfBwcy31ZV McfR1/7kQtOTJGuBkQQKtyaypg1r2CSsXVsiAx/iNxjUrZzYIOYF+OCN2Db2/HIq JYKrWaF3XzdF6NF7VpeJwIwqAJIXA7MNRwwzp+lOlrh0XblXjfC/cf9NqJC+uh8O Fj2YcwR4uEtIrj/vwquxC8WenHuwnxTrXS0gTUzw1K2g9Vr1SQ0LsZTYdBllUlIv kPinuibVBVj0BSw8XzQvA8cW0rGpCfifNPs60Bh1JwaSDZpR5G1Eovbn+q76hl0j RGMuDWTNZSw87xqxhrNVZ1x7cqLJe10= -----END CERTIFICATE-----Generated at Tue Sep 22 22:39:01 2026 by rpki-client