$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d51ee9d-3bf2-32ad-9cb1-f0767f65e47a.roa File: 7d51ee9d-3bf2-32ad-9cb1-f0767f65e47a.roa (raw, json) Hash identifier: I/fRltmQbIUEkqea0H1t2D+/1ZCcy7favO1K3LcD1LY= Subject key identifier: 92:57:AE:0D:73:EF:5B:82:B8:79:5C:F3:44:F8:49:87:71:35:3F:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EB8470DC78B48A1F36E1AB794 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d51ee9d-3bf2-32ad-9cb1-f0767f65e47a.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.9.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:0d:c7:8b:48:a1:f3:6e:1a:b7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=e4f7d824-5bb5-4299-ae56-7c019332824b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:53:80:98:8a:84:d1:ba:aa:49:bc:63:bb: 53:6e:e6:1b:8a:fb:db:ef:1d:03:7f:9e:2d:34:08: 43:30:48:f3:ee:4f:8a:d9:56:06:57:15:8a:f0:3e: cd:6c:61:cc:58:86:03:8d:0d:5d:34:af:c7:c3:c2: 25:93:0e:df:67:21:15:62:98:5e:e9:7b:d3:1d:17: 2a:b6:f2:1e:21:2e:ff:bb:fb:ce:7f:82:f6:ee:b0: b5:d2:fc:b2:7c:3e:63:88:fc:6a:3f:05:ec:ac:55: 47:c7:64:d0:0e:fd:10:93:36:17:5a:96:3f:bc:84: 08:af:3c:3d:dd:c6:e6:c3:9a:21:fd:e2:9f:5d:2b: ab:1a:b6:7d:57:50:5b:c8:2d:94:f0:1b:95:c3:81: 6f:67:7b:be:7a:96:bb:4b:3e:6a:50:83:b4:8c:5b: 35:fe:67:5b:1a:49:f6:bb:01:69:ed:9b:69:f2:40: 41:bd:47:55:56:8b:92:64:27:b6:9d:85:b6:25:5f: ef:d3:ca:45:b8:d8:d7:af:50:cc:d2:9d:0f:b9:8b: 18:61:b5:e1:7f:4a:34:2c:24:3a:ea:79:e9:fb:1a: 80:fb:5f:59:4e:01:53:b4:de:91:26:d3:dc:ba:f7: c4:49:f2:22:19:16:51:a4:0e:58:f6:2e:52:85:59: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:57:AE:0D:73:EF:5B:82:B8:79:5C:F3:44:F8:49:87:71:35:3F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d51ee9d-3bf2-32ad-9cb1-f0767f65e47a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5a:25:8a:8f:51:f3:6c:66:f5:75:53:a2:26:f5:f6:c5:6c: 2f:7d:22:f6:7c:a4:79:47:20:0b:b5:85:fc:e5:62:67:ec:06: c4:31:0d:1d:d0:ad:ce:33:10:07:29:ae:95:cd:9e:7c:99:eb: af:5f:0b:c4:e1:30:7f:89:31:9c:0e:ea:66:d4:a3:26:97:5d: db:46:e1:22:04:1f:fb:e8:7b:a2:6f:54:31:42:c1:f1:3b:de: 04:01:df:81:63:91:67:b4:49:fb:7d:67:c3:0f:d3:12:ba:cd: 72:53:b4:be:b2:53:4b:3d:88:4b:e0:f5:6f:21:b2:41:73:93: e0:14:c7:95:b6:fb:3b:7d:20:ba:af:2c:2e:f4:45:28:ef:08: 28:31:4c:c3:ff:4e:82:cb:7f:e9:80:3c:56:d9:03:a4:92:1f: 6b:e3:9f:1c:e1:d9:36:07:62:37:fc:51:81:3a:94:eb:55:e8: 3d:c0:0b:80:de:af:06:17:57:6b:22:29:6e:7e:1a:ef:70:9c: c1:c2:c0:df:2c:37:86:b2:61:21:4b:cb:98:12:fd:28:b2:4f: 3a:24:91:45:5e:a3:2e:58:bf:28:aa:72:f0:36:f3:0a:35:2c: 42:bc:fc:40:43:f1:dc:da:da:78:0a:04:ec:9a:da:72:8f:ce: 40:e8:42:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rw3Hi0ih824at5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTRmN2Q4MjQtNWJiNS00Mjk5LWFlNTYtN2MwMTkzMzI4MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5TgJiKhNG6qkm8Y7tTbuYbivvb7x0Df54t NAhDMEjz7k+K2VYGVxWK8D7NbGHMWIYDjQ1dNK/Hw8Ilkw7fZyEVYphe6XvTHRcq tvIeIS7/u/vOf4L27rC10vyyfD5jiPxqPwXsrFVHx2TQDv0QkzYXWpY/vIQIrzw9 3cbmw5oh/eKfXSurGrZ9V1BbyC2U8BuVw4FvZ3u+epa7Sz5qUIO0jFs1/mdbGkn2 uwFp7Ztp8kBBvUdVVouSZCe2nYW2JV/v08pFuNjXr1DM0p0PuYsYYbXhf0o0LCQ6 6nnp+xqA+19ZTgFTtN6RJtPcuvfESfIiGRZRpA5Y9i5ShVkiBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJXrg1z71uCuHlc80T4SYdxNT/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2Q1MWVlOWQtM2JmMi0z MmFkLTljYjEtZjA3NjdmNjVlNDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElaJYqPUfNsZvV1U6Im9fbFbC99IvZ8pHlHIAu1hfzlYmfsBsQxDR3Q rc4zEAcprpXNnnyZ669fC8ThMH+JMZwO6mbUoyaXXdtG4SIEH/voe6JvVDFCwfE7 3gQB34FjkWe0Sft9Z8MP0xK6zXJTtL6yU0s9iEvg9W8hskFzk+AUx5W2+zt9ILqv LC70RSjvCCgxTMP/ToLLf+mAPFbZA6SSH2vjnxzh2TYHYjf8UYE6lOtV6D3AC4De rwYXV2siKW5+Gu9wnMHCwN8sN4ayYSFLy5gS/SiyTzokkUVeoy5YvyiqcvA28wo1 LEK8/EBD8dza2ngKBOya2nKPzkDoQlA= -----END CERTIFICATE-----Generated at Sat Sep 26 17:01:08 2026 by rpki-client