$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa File: 7df12012-1386-3a47-89db-6c4f1b6aa143.roa (raw, json) Hash identifier: FyhrIO+JLbLlMBZkM440WwxSih+0HrUU+My1bhiO6/U= Subject key identifier: CE:10:7A:EE:26:36:3B:FA:22:12:CD:C2:C2:E6:2A:98:C7:17:59:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EBC770D69DCF050E80F121E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.228.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:0d:69:dc:f0:50:e8:0f:12:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=97cdce76-4507-4cd7-9b27-3bc64a46c536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:19:91:9f:1c:de:c4:10:af:e0:a6:fc:ed: c7:84:cc:b9:5e:db:48:40:05:56:a3:3b:86:06:ef: a3:cf:70:e1:3a:9a:b0:11:da:d4:30:05:9f:69:d9: 68:f2:a2:ff:ee:7b:c8:6d:63:e4:c5:8a:22:0f:a8: 44:bd:c6:27:86:46:68:e7:19:84:32:fb:2e:17:cc: ce:93:6f:a4:94:d4:ed:61:90:b6:17:bd:20:76:e4: 0f:bc:1c:c0:f0:29:37:2e:40:94:86:71:25:1e:a9: ec:d8:e2:9b:de:ff:ca:b4:d3:1c:6b:4d:94:a7:f5: da:bd:31:fc:f9:bc:e9:e3:4e:0c:a7:dc:e6:7c:a8: 96:20:78:49:83:f8:29:50:38:82:ff:3c:76:90:ad: 19:8e:65:7f:fd:32:12:ca:1e:18:7b:af:2e:64:ed: df:0c:c0:b8:24:20:6e:f2:ab:e3:46:2f:6a:35:31: 1f:43:90:9a:f9:3e:71:ff:95:ad:d4:b4:25:33:af: 45:c9:8e:9a:19:26:cd:e1:3e:cc:91:b6:73:2b:b4: 37:2b:c6:23:92:23:0f:8f:89:0a:89:43:31:09:2f: 04:db:d8:89:f0:88:ce:0d:63:7e:56:8c:40:89:a9: ae:15:42:b8:95:c2:97:db:cd:8c:27:3b:a9:64:fd: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:10:7A:EE:26:36:3B:FA:22:12:CD:C2:C2:E6:2A:98:C7:17:59:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7d:9f:03:06:cb:09:6d:17:a3:f4:01:25:02:d8:59:87:d3: e9:9c:c6:d6:97:33:78:fa:f6:19:36:e5:f9:03:85:6f:3c:88: e9:ed:25:e2:35:ec:28:af:a3:8d:c6:4a:05:86:92:bf:a5:04: f2:c5:6a:fe:e2:ab:a1:38:d4:83:df:4f:4c:67:5b:5b:92:f4: 2c:98:f3:57:28:e3:e9:af:23:e8:26:56:8c:92:be:b0:16:cb: 4e:e8:cd:a9:1d:cc:f2:44:fe:2c:28:82:b7:8a:73:92:06:4b: a9:f2:09:b6:ce:a9:57:c2:8a:06:8e:de:6f:3f:23:da:5c:9d: 1e:76:41:fa:01:84:de:28:30:33:84:48:a4:34:21:56:17:8c: e5:01:25:37:1a:a0:3d:0b:d7:8c:d8:a0:af:e0:f5:e9:63:1a: b5:77:e8:b0:f8:67:05:66:36:47:9e:5d:bd:27:c4:24:7f:b3: 9e:36:e3:65:8f:ea:84:d1:3c:11:7f:d1:aa:a1:83:68:5b:43: be:8d:19:82:ba:7f:88:be:a5:48:9a:a1:fa:26:e5:fa:c1:b3: 69:b6:e7:60:be:dd:11:9f:88:80:69:67:7a:2e:fe:df:1f:ba: 8c:d2:8e:77:a8:98:23:24:a1:53:6f:f2:3f:85:91:35:4b:d9: 21:00:47:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dw1p3PBQ6A8SHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk OTdjZGNlNzYtNDUwNy00Y2Q3LTliMjctM2JjNjRhNDZjNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2cZkZ8c3sQQr+Cm/O3HhMy5XttIQAVWozuG Bu+jz3DhOpqwEdrUMAWfadlo8qL/7nvIbWPkxYoiD6hEvcYnhkZo5xmEMvsuF8zO k2+klNTtYZC2F70gduQPvBzA8Ck3LkCUhnElHqns2OKb3v/KtNMca02Up/XavTH8 +bzp404Mp9zmfKiWIHhJg/gpUDiC/zx2kK0ZjmV//TISyh4Ye68uZO3fDMC4JCBu 8qvjRi9qNTEfQ5Ca+T5x/5Wt1LQlM69FyY6aGSbN4T7MkbZzK7Q3K8YjkiMPj4kK iUMxCS8E29iJ8IjODWN+VoxAiamuFUK4lcKX282MJzupZP12nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4Qeu4mNjv6IhLNwsLmKpjHF1kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RmMTIwMTItMTM4Ni0z YTQ3LTg5ZGItNmM0ZjFiNmFhMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARORvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp9nwMGywltF6P0ASUC2FmH0+mcxtaXM3j69hk25fkDhW88iOntJeI1 7Civo43GSgWGkr+lBPLFav7iq6E41IPfT0xnW1uS9CyY81co4+mvI+gmVoySvrAW y07ozakdzPJE/iwogreKc5IGS6nyCbbOqVfCigaO3m8/I9pcnR52QfoBhN4oMDOE SKQ0IVYXjOUBJTcaoD0L14zYoK/g9eljGrV36LD4ZwVmNkeeXb0nxCR/s54242WP 6oTRPBF/0aqhg2hbQ76NGYK6f4i+pUiaofom5frBs2m252C+3RGfiIBpZ3ou/t8f uozSjneomCMkoVNv8j+FkTVL2SEAR6k= -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:51 2026 by rpki-client