$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a458b75-676e-3d1e-9e50-be826593350f.roa File: 2a458b75-676e-3d1e-9e50-be826593350f.roa (raw, json) Hash identifier: TnEo9r39JjeGASldQfYx1SF6idN4M5FeAKk+xoJQQ7E= Subject key identifier: 84:09:57:CF:76:F9:EC:EB:4F:17:E0:B5:B8:1E:56:3C:6E:74:2D:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A566BDCCBAA36B0790A440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a458b75-676e-3d1e-9e50-be826593350f.roa Signing time: Mon 28 Sep 2026 16:40:48 +0000 ROA not before: Mon 28 Sep 2026 16:40:48 +0000 ROA not after: Sun 27 Dec 2026 17:40:48 +0000 asID: 22773 IP address blocks: 174.68.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a5:66:bd:cc:ba:a3:6b:07:90:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:40:48 2026 GMT Not After : Dec 27 17:40:48 2026 GMT Subject: CN=d4f6f1ce-d8f4-4ff7-9cc8-d1c2646eaf06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:03:2b:c3:c3:a5:47:4a:ea:db:23:78:ed: e7:ce:82:76:32:f8:f4:7f:ed:d6:32:68:cb:84:61: 92:ed:b0:15:9b:b0:e7:56:93:c0:4a:65:29:76:04: c8:0f:76:6a:7f:24:b9:14:2b:d3:65:da:a3:71:79: d2:06:3d:25:4f:73:23:08:bc:43:9f:7d:a8:42:77: 14:b5:0b:9f:2e:96:72:08:4f:82:d4:26:45:2d:64: df:49:fc:82:ed:0d:88:98:8a:d0:a9:b4:9c:1d:a0: 39:68:60:bd:e5:8d:c9:ca:ae:48:5f:38:94:a0:d5: 82:8c:46:b3:21:82:ce:ec:55:52:3e:b6:08:bf:2e: 4d:aa:ce:08:90:75:04:ba:05:ce:da:58:08:2f:d5: 80:be:2d:0d:2c:05:73:6d:6e:75:14:2a:5c:cb:1d: b0:4f:b1:9c:c5:3e:09:92:fc:73:3e:fe:2c:42:a4: 8c:a9:1d:6c:38:79:55:d8:be:b0:27:fe:3b:d4:39: c2:c5:00:7c:a0:b7:61:29:21:cf:c7:65:eb:50:82: b4:b8:fa:f1:2c:c6:81:91:4b:64:5b:d0:0f:cb:fd: 36:ee:e2:61:cd:19:49:48:70:de:47:a1:cf:da:be: ec:c7:15:3e:28:ef:54:91:43:ba:cf:40:68:3a:04: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:57:CF:76:F9:EC:EB:4F:17:E0:B5:B8:1E:56:3C:6E:74:2D:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a458b75-676e-3d1e-9e50-be826593350f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c5:f3:de:c8:85:88:c6:b6:1f:80:05:4a:1c:6b:0c:3b:1f: 3b:43:6b:1f:e1:83:14:7d:4f:fb:31:fd:8e:c8:9c:1a:2e:5b: b2:31:57:30:ab:f7:d5:07:34:43:f0:a0:3d:e1:20:a0:6d:50: 1d:da:e7:4f:5b:ea:f6:a2:1e:64:f0:65:22:8b:23:eb:03:c4: 56:69:82:8e:8f:0f:de:44:e5:0c:4c:64:a9:cf:05:42:12:b4: 35:15:f5:d0:c7:e6:69:2b:b8:40:16:9c:bb:ac:ab:eb:d1:2f: 6b:80:95:58:cc:36:e0:7b:72:01:bd:5e:d6:78:ac:33:15:cb: 3e:a1:f5:a2:d3:80:5f:57:87:64:55:a6:5d:86:d2:88:66:86: c3:c7:6e:32:0e:0d:dd:51:3f:18:9f:0e:af:b0:a2:36:d0:fb: 5e:8d:72:7a:8b:d6:95:0c:d3:60:15:97:d1:69:98:47:1e:81: 6a:60:a9:3c:68:1a:0b:34:ab:03:1f:b2:6f:03:43:d2:fe:cf: 84:ef:ba:9b:0f:29:f0:df:59:37:d1:ae:a3:68:61:52:9d:03: 83:6a:91:23:f3:c5:e9:13:ec:ba:77:06:a7:d6:7c:6d:c7:d4: fb:f5:38:39:7d:3b:e2:ab:70:74:7a:0e:c8:7b:b2:ff:4d:51: 0a:e1:2e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpWa9zLqjaweQpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDA0OFoXDTI2MTIyNzE3NDA0OFowLzEtMCsGA1UEAxMk ZDRmNmYxY2UtZDhmNC00ZmY3LTljYzgtZDFjMjY0NmVhZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4DK8PDpUdK6tsjeO3nzoJ2Mvj0f+3WMmjL hGGS7bAVm7DnVpPASmUpdgTID3ZqfyS5FCvTZdqjcXnSBj0lT3MjCLxDn32oQncU tQufLpZyCE+C1CZFLWTfSfyC7Q2ImIrQqbScHaA5aGC95Y3Jyq5IXziUoNWCjEaz IYLO7FVSPrYIvy5Nqs4IkHUEugXO2lgIL9WAvi0NLAVzbW51FCpcyx2wT7GcxT4J kvxzPv4sQqSMqR1sOHlV2L6wJ/471DnCxQB8oLdhKSHPx2XrUIK0uPrxLMaBkUtk W9APy/027uJhzRlJSHDeR6HP2r7sxxU+KO9UkUO6z0BoOgRyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQJV892+ezrTxfgtbgeVjxudC16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmE0NThiNzUtNjc2ZS0z ZDFlLTllNTAtYmU4MjY1OTMzNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLF897IhYjGth+ABUocaww7HztDax/hgxR9T/sx/Y7InBouW7IxVzCr 99UHNEPwoD3hIKBtUB3a509b6vaiHmTwZSKLI+sDxFZpgo6PD95E5QxMZKnPBUIS tDUV9dDH5mkruEAWnLusq+vRL2uAlVjMNuB7cgG9XtZ4rDMVyz6h9aLTgF9Xh2RV pl2G0ohmhsPHbjIODd1RPxifDq+wojbQ+16NcnqL1pUM02AVl9FpmEcegWpgqTxo Ggs0qwMfsm8DQ9L+z4TvupsPKfDfWTfRrqNoYVKdA4NqkSPzxekT7Lp3BqfWfG3H 1Pv1ODl9O+KrcHR6Dsh7sv9NUQrhLrg= -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:43 2026 by rpki-client