$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/067271f1-43f1-3e06-a806-7f97010d6046.roa File: 067271f1-43f1-3e06-a806-7f97010d6046.roa (raw, json) Hash identifier: 64M25WonKXuGi4AT7FIHZLP4m5QvnCteeE/YgVD0VPw= Subject key identifier: D5:AC:2E:76:7C:3F:51:6B:71:52:8A:D8:CA:84:43:8E:DD:8E:AC:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539E975A4DBFAC57208A4370 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/067271f1-43f1-3e06-a806-7f97010d6046.roa Signing time: Mon 28 Sep 2026 16:27:05 +0000 ROA not before: Mon 28 Sep 2026 16:27:05 +0000 ROA not after: Sun 27 Dec 2026 17:27:05 +0000 asID: 22773 IP address blocks: 68.1.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:97:5a:4d:bf:ac:57:20:8a:43:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:27:05 2026 GMT Not After : Dec 27 17:27:05 2026 GMT Subject: CN=c3bf5246-32c5-4711-a627-2da2d4dc3f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:17:41:f8:19:38:e5:6c:46:62:b0:95:32: 65:66:af:a1:87:b1:ea:aa:ce:89:2d:c9:6d:03:b3: cf:3e:f2:ad:fe:85:ca:4f:1a:33:a8:b7:cf:17:71: 46:8d:82:e9:ce:62:64:ed:08:b9:9a:fc:96:ae:68: a0:01:2c:bb:9d:1c:a1:63:bf:16:2b:08:a6:c1:3b: 56:6d:c3:7d:ba:b6:f7:49:35:d7:73:bb:36:d4:97: 8e:9f:c0:7e:6b:62:4b:b9:aa:e1:24:36:cc:77:ac: 18:29:9f:a1:0f:6b:6f:08:8f:70:3d:61:ec:e3:2b: 12:03:2e:3c:ec:0a:f9:bb:40:76:10:1e:7e:2e:dd: 0c:27:61:ec:34:cb:b3:96:1e:74:6b:c2:ff:dc:15: 9f:f6:f2:4c:5c:a9:d7:62:f6:9c:ca:89:34:0d:14: fd:2b:8f:62:56:49:20:a6:5b:95:b3:b4:15:fa:28: fc:d2:09:fc:6c:4b:f4:ee:d7:c7:ee:f7:57:78:12: 1e:b5:c4:8f:96:1c:9c:38:5b:2c:99:b8:0a:fe:83: cb:39:2f:b7:59:99:37:fe:fc:95:cb:37:df:4a:1d: 1a:34:e4:49:53:66:99:9c:01:67:2a:b6:a5:ba:98: 2c:96:d0:03:0c:ea:2f:4b:46:e1:ca:27:2e:cd:a7: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AC:2E:76:7C:3F:51:6B:71:52:8A:D8:CA:84:43:8E:DD:8E:AC:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/067271f1-43f1-3e06-a806-7f97010d6046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f7:37:9f:c7:c8:c6:1b:98:58:4c:4f:c3:a5:f8:62:66:78: b1:cb:51:1a:62:dc:40:e1:c7:a8:b1:00:fe:81:ba:1e:8a:48: d6:34:99:de:74:76:df:f5:30:8e:a6:06:2a:7c:fb:f7:75:af: 49:1d:85:63:2f:37:7b:a0:a1:48:da:f6:db:0f:b9:87:d1:80: 56:e1:45:f7:f6:35:fe:b3:5d:ac:8d:44:0f:cd:93:90:94:aa: e4:aa:90:ba:d3:bc:7a:88:38:64:0b:98:62:b9:18:b3:29:1a: 9c:02:8e:d3:7a:c3:8a:7d:e1:31:1f:bb:84:5d:e8:68:82:9f: 1c:ee:f8:b4:18:54:15:89:05:cf:fe:86:7b:8c:70:86:43:1e: 8a:3b:89:b1:c8:4d:d4:89:5f:93:b4:35:73:ad:9b:fb:a6:ae: bd:22:52:85:f1:03:3f:35:85:5f:2d:cd:f9:43:d2:6f:15:76: 56:c0:5c:e2:c3:50:ba:42:d5:53:04:45:7c:09:7e:81:1d:82: 43:58:48:b6:0f:0c:cf:7f:c0:65:05:ca:76:d4:ea:4e:1c:ea: 8d:84:39:32:fb:29:90:d5:a0:71:b1:1c:2b:f6:60:c3:fc:00: a0:44:6c:96:20:7e:0b:c9:ed:b1:36:95:4c:e0:5d:df:af:be: 33:38:0f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnpdaTb+sVyCKQ3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjcwNVoXDTI2MTIyNzE3MjcwNVowLzEtMCsGA1UEAxMk YzNiZjUyNDYtMzJjNS00NzExLWE2MjctMmRhMmQ0ZGMzZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT4XQfgZOOVsRmKwlTJlZq+hh7Hqqs6JLclt A7PPPvKt/oXKTxozqLfPF3FGjYLpzmJk7Qi5mvyWrmigASy7nRyhY78WKwimwTtW bcN9urb3STXXc7s21JeOn8B+a2JLuarhJDbMd6wYKZ+hD2tvCI9wPWHs4ysSAy48 7Ar5u0B2EB5+Lt0MJ2HsNMuzlh50a8L/3BWf9vJMXKnXYvacyok0DRT9K49iVkkg pluVs7QV+ij80gn8bEv07tfH7vdXeBIetcSPlhycOFssmbgK/oPLOS+3WZk3/vyV yzffSh0aNORJU2aZnAFnKralupgsltADDOovS0bhyicuzaewoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWsLnZ8P1FrcVKK2MqEQ47djqz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDY3MjcxZjEtNDNmMS0z ZTA2LWE4MDYtN2Y5NzAxMGQ2MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRAFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr3N5/HyMYbmFhMT8Ol+GJmeLHLURpi3EDhx6ixAP6Buh6KSNY0md50 dt/1MI6mBip8+/d1r0kdhWMvN3ugoUja9tsPuYfRgFbhRff2Nf6zXayNRA/Nk5CU quSqkLrTvHqIOGQLmGK5GLMpGpwCjtN6w4p94TEfu4Rd6GiCnxzu+LQYVBWJBc/+ hnuMcIZDHoo7ibHITdSJX5O0NXOtm/umrr0iUoXxAz81hV8tzflD0m8VdlbAXOLD ULpC1VMERXwJfoEdgkNYSLYPDM9/wGUFynbU6k4c6o2EOTL7KZDVoHGxHCv2YMP8 AKBEbJYgfgvJ7bE2lUzgXd+vvjM4D50= -----END CERTIFICATE-----Generated at Tue Sep 29 19:17:57 2026 by rpki-client