$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82059c03-aa4a-37e7-92c7-dbaa3747f007.roa File: 82059c03-aa4a-37e7-92c7-dbaa3747f007.roa (raw, json) Hash identifier: B9GgyQCQ1nUFgYBE4KIFCkPqOFlZWs5RP7+J9DQjBgg= Subject key identifier: C3:1F:2E:6E:D3:89:5C:ED:7D:FE:82:EC:D0:0A:0A:20:42:1C:79:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFCA3781B87611435F6100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82059c03-aa4a-37e7-92c7-dbaa3747f007.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 68.230.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:ca:37:81:b8:76:11:43:5f:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=d18c1645-d628-4782-888e-2548631c03b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:9a:7d:24:80:58:53:9b:96:b4:f6:ea:5a: 3d:bf:e5:59:7e:bc:2f:19:77:4b:f2:8e:c9:cc:6f: d2:25:eb:f2:d6:9b:9b:2a:02:56:43:8b:1f:14:af: b9:67:c7:33:65:7d:3c:69:2e:7b:e6:48:4d:a5:28: a3:8a:6e:90:ca:a7:50:d3:5b:3e:3c:a7:8b:cd:23: ac:80:39:41:a3:fd:8f:82:c3:ae:24:e0:a2:ed:db: 33:00:59:c1:62:8b:2a:b1:01:34:8d:2c:ef:ae:44: d1:97:54:95:ec:41:38:1a:f5:f6:82:93:d3:6c:36: ce:0c:f5:7c:8f:e9:af:61:0e:12:d8:7a:34:48:2f: 11:52:0a:c9:14:63:e8:4f:91:a3:0d:9d:75:00:6f: e7:a9:54:02:5f:de:a5:c0:82:6b:68:98:0a:c5:38: e1:42:a6:c1:14:9d:6d:4d:dc:78:a2:ab:98:43:8e: 02:28:26:11:08:ad:b1:a5:6a:b5:47:0e:37:64:6b: 6c:ee:d6:11:8d:63:f1:31:84:a3:5c:b4:42:cd:46: ac:83:e7:cd:46:4f:d2:53:e3:78:e1:4b:7f:fc:94: a0:cf:c0:f8:4c:5c:73:e1:e7:91:95:c1:84:39:58: 3a:b6:3b:20:42:98:4e:34:8e:3e:cb:68:f4:fb:9b: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1F:2E:6E:D3:89:5C:ED:7D:FE:82:EC:D0:0A:0A:20:42:1C:79:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82059c03-aa4a-37e7-92c7-dbaa3747f007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6a:2b:60:1b:d5:d5:84:a9:eb:e4:e1:35:15:e8:3a:85:31: ab:64:e6:82:5c:2a:b1:a2:97:5f:ac:73:6c:de:a5:0a:ee:e6: f2:09:a0:97:9d:99:41:ad:8b:f6:76:67:7b:6c:e0:59:1c:0e: 94:af:6c:d2:6c:07:5c:3e:96:86:e0:c2:7d:3c:b2:2a:70:7c: c1:b6:ac:92:04:86:d9:d5:09:08:17:70:ff:a6:a2:d2:0c:e0: ad:af:48:71:18:f0:a7:a9:19:5a:c8:6c:77:c3:ec:89:d6:4b: c9:56:e0:9b:d4:e2:ea:02:36:23:1d:cf:66:8f:ab:86:03:94: 19:19:76:2b:b6:2d:d7:ad:db:8c:dc:c2:10:e1:23:56:19:8e: df:0c:09:2f:d2:9e:43:f1:db:0b:8a:7e:0c:e9:14:c7:cb:a6: 39:e9:b0:04:24:c3:78:b2:3a:1f:b2:b0:45:25:3b:61:03:8a: 1e:74:91:4a:0c:8e:67:75:e6:0f:5f:ab:20:9e:d7:45:3e:f6: 36:dc:3f:ad:3a:ab:f2:dc:d2:d0:77:89:bc:67:5b:d4:3a:d5: 8b:65:75:95:69:b5:2e:51:d5:e5:17:ec:16:4f:1f:48:22:04: ee:84:27:63:68:07:89:f4:ae:e6:4e:44:4d:76:d7:82:73:a8: 7c:e4:e3:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er8o3gbh2EUNfYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZDE4YzE2NDUtZDYyOC00NzgyLTg4OGUtMjU0ODYzMWMwM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW6afSSAWFOblrT26lo9v+VZfrwvGXdL8o7J zG/SJevy1pubKgJWQ4sfFK+5Z8czZX08aS575khNpSijim6QyqdQ01s+PKeLzSOs gDlBo/2PgsOuJOCi7dszAFnBYosqsQE0jSzvrkTRl1SV7EE4GvX2gpPTbDbODPV8 j+mvYQ4S2Ho0SC8RUgrJFGPoT5GjDZ11AG/nqVQCX96lwIJraJgKxTjhQqbBFJ1t Tdx4oquYQ44CKCYRCK2xpWq1Rw43ZGts7tYRjWPxMYSjXLRCzUasg+fNRk/SU+N4 4Ut//JSgz8D4TFxz4eeRlcGEOVg6tjsgQphONI4+y2j0+5vxdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMfLm7TiVztff6C7NAKCiBCHHl8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODIwNTljMDMtYWE0YS0z N2U3LTkyYzctZGJhYTM3NDdmMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtqK2Ab1dWEqevk4TUV6DqFMatk5oJcKrGil1+sc2zepQru5vIJoJed mUGti/Z2Z3ts4FkcDpSvbNJsB1w+lobgwn08sipwfMG2rJIEhtnVCQgXcP+motIM 4K2vSHEY8KepGVrIbHfD7InWS8lW4JvU4uoCNiMdz2aPq4YDlBkZdiu2Ldet24zc whDhI1YZjt8MCS/SnkPx2wuKfgzpFMfLpjnpsAQkw3iyOh+ysEUlO2EDih50kUoM jmd15g9fqyCe10U+9jbcP606q/Lc0tB3ibxnW9Q61YtldZVptS5R1eUX7BZPH0gi BO6EJ2NoB4n0ruZORE1214JzqHzk45k= -----END CERTIFICATE-----Generated at Sun Sep 20 23:39:25 2026 by rpki-client