$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa File: 7a53c42f-d7af-3299-b028-af7e5432e3dd.roa (raw, json) Hash identifier: PmULIvC9jvxM0YgD+oD/QRy8WnBh98lR6rUMTxyFEaw= Subject key identifier: 39:A1:5D:EA:FA:14:8E:E6:E1:DD:9A:BD:6A:2F:43:99:7C:65:D7:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD3A6381F5EA8172C1B180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3a:63:81:f5:ea:81:72:c1:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a3e74d03-5e39-4381-b24b-eb5401c5e125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:65:12:0f:0d:f2:f0:e5:29:46:bf:72:17: 68:05:e8:86:f6:ff:39:ab:2c:df:b9:07:37:56:00: 8a:cd:55:77:00:ac:7a:4e:7b:e7:36:3f:6e:0f:e9: ed:7a:28:b2:a8:ef:f5:26:6d:0d:3f:78:9b:47:ea: 19:4d:56:83:01:89:22:27:99:b0:7f:d8:23:57:2c: cc:4d:95:8f:d3:09:e5:ee:cf:a5:34:18:ea:b0:6c: 37:08:6c:78:b1:34:fe:f7:a4:b3:ad:f5:98:20:a4: a4:0d:47:8d:e9:d2:c9:f5:65:78:62:eb:fb:18:b9: 23:3a:e7:ce:f7:35:14:93:2f:76:77:1b:c3:25:89: 5d:26:98:db:5c:ac:36:3c:e3:ca:0c:d0:c6:eb:0b: 12:07:16:ec:75:b5:eb:8b:cf:73:d5:d9:98:a2:35: 2a:1e:ce:d7:5d:ac:c0:9b:1e:ce:d6:3b:50:0b:cd: ae:bc:e5:8f:09:00:dc:a6:32:1f:61:5c:19:a5:e2: c1:f0:ae:81:3d:7a:75:52:49:fb:b5:15:14:4f:2d: 80:f4:e6:a2:7c:7d:81:eb:ba:bf:e6:dc:af:18:68: 9b:66:c5:2b:af:67:ae:5a:1d:88:a4:2a:24:b1:5d: c6:f2:e9:1a:c0:8f:55:4a:01:ba:75:2d:da:fd:95: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A1:5D:EA:FA:14:8E:E6:E1:DD:9A:BD:6A:2F:43:99:7C:65:D7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b3:b2:e8:a0:90:c3:2d:e0:75:d5:b6:db:fd:8d:9c:6c:28: f7:14:e3:ac:5a:c6:44:91:3a:f8:15:e9:8c:00:06:ad:03:b9: e9:19:10:03:18:87:fa:5e:38:ee:ef:3c:06:a8:e9:30:06:dd: 09:32:e4:5b:d9:ef:91:eb:0c:d7:11:d5:c5:81:82:ed:40:d4: 59:1d:17:ed:52:6b:ab:3f:af:81:ef:b9:62:de:d2:62:07:66: 31:68:a4:82:3b:ef:b0:80:aa:d4:09:de:6e:41:33:c9:ce:b0: 7d:84:74:12:5c:27:f7:c0:05:ca:fb:16:67:8b:38:34:d7:c0: 0c:3f:e4:d1:77:6f:2d:90:7f:40:36:f2:98:da:5e:9b:79:ac: 2f:c8:89:70:de:5c:e0:e3:ba:89:13:7f:1c:4a:3a:15:01:37: 69:2c:d8:42:20:2a:08:42:44:dd:7f:bd:c8:86:5f:f7:be:fa: 44:2b:f8:51:0f:6b:84:ba:09:f7:c1:78:3e:28:5e:e1:b3:a0: 4b:80:64:61:c4:b8:39:c9:5c:f7:7d:2a:2e:d6:ef:5b:df:04: 2d:3c:b2:39:4a:90:e4:08:42:1a:54:91:18:3a:b6:89:89:90: 4b:fd:35:a2:31:ea:42:50:f1:a1:a9:d6:52:2d:55:5f:a1:91: 1c:d9:65:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTpjgfXqgXLBsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTNlNzRkMDMtNWUzOS00MzgxLWIyNGItZWI1NDAxYzVlMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfBlEg8N8vDlKUa/chdoBeiG9v85qyzfuQc3 VgCKzVV3AKx6TnvnNj9uD+nteiiyqO/1Jm0NP3ibR+oZTVaDAYkiJ5mwf9gjVyzM TZWP0wnl7s+lNBjqsGw3CGx4sTT+96SzrfWYIKSkDUeN6dLJ9WV4Yuv7GLkjOufO 9zUUky92dxvDJYldJpjbXKw2POPKDNDG6wsSBxbsdbXri89z1dmYojUqHs7XXazA mx7O1jtQC82uvOWPCQDcpjIfYVwZpeLB8K6BPXp1Ukn7tRUUTy2A9OaifH2B67q/ 5tyvGGibZsUrr2euWh2IpCoksV3G8ukawI9VSgG6dS3a/ZXHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmhXer6FI7m4d2avWovQ5l8ZdekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E1M2M0MmYtZDdhZi0z Mjk5LWIwMjgtYWY3ZTU0MzJlM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGzsuigkMMt4HXVttv9jZxsKPcU46xaxkSROvgV6YwABq0DuekZEAMY h/peOO7vPAao6TAG3Qky5FvZ75HrDNcR1cWBgu1A1FkdF+1Sa6s/r4HvuWLe0mIH ZjFopII777CAqtQJ3m5BM8nOsH2EdBJcJ/fABcr7FmeLODTXwAw/5NF3by2Qf0A2 8pjaXpt5rC/IiXDeXODjuokTfxxKOhUBN2ks2EIgKghCRN1/vciGX/e++kQr+FEP a4S6CffBeD4oXuGzoEuAZGHEuDnJXPd9Ki7W71vfBC08sjlKkOQIQhpUkRg6tomJ kEv9NaIx6kJQ8aGp1lItVV+hkRzZZTM= -----END CERTIFICATE-----Generated at Thu Nov 5 19:57:45 2026 by rpki-client