$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ff3e005-9b38-35d4-846d-15943c76949d.roa File: 2ff3e005-9b38-35d4-846d-15943c76949d.roa (raw, json) Hash identifier: V5679q02J9wXXn+lrdhPfyj5BKLraoXp3HzgWXh3xH4= Subject key identifier: 45:5E:10:36:74:8B:4B:43:EC:7B:2E:E1:40:AD:83:E1:16:47:A2:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539EEDE22E69353AA75DD160 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ff3e005-9b38-35d4-846d-15943c76949d.roa Signing time: Mon 28 Sep 2026 16:27:46 +0000 ROA not before: Mon 28 Sep 2026 16:27:46 +0000 ROA not after: Sun 27 Dec 2026 17:27:46 +0000 asID: 22773 IP address blocks: 68.98.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:ed:e2:2e:69:35:3a:a7:5d:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:27:46 2026 GMT Not After : Dec 27 17:27:46 2026 GMT Subject: CN=9a6bcad4-1762-4b09-8ce8-bc697515fdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:dc:b8:71:eb:48:40:45:f3:47:6f:a0:99: b3:66:0b:e3:07:50:49:52:df:b0:cb:d9:a3:e0:c9: db:c5:fc:4b:18:92:5d:8b:9e:a8:72:73:3d:9b:af: f1:49:8e:16:63:62:4c:81:db:25:6c:47:a7:78:b0: d7:19:38:c4:dc:74:77:e8:a3:f1:cc:7e:50:87:80: 8c:91:ae:ab:0d:92:6c:fa:74:09:9b:63:e2:fa:71: 2a:69:ea:77:7c:13:24:ad:36:c5:34:32:58:a0:ad: 6e:51:da:02:10:57:52:69:b7:30:73:34:a6:d3:a4: 3e:86:a8:95:0c:94:a1:7f:2d:2e:72:7a:f3:36:df: a5:7f:8e:1e:45:c9:0e:a1:bf:5a:80:03:fc:b7:ca: e7:c5:92:7b:9b:01:07:dc:48:30:5b:d1:a8:9e:5e: 86:80:67:aa:6e:af:41:c3:56:fd:fb:71:2b:ce:f1: 55:a8:d4:01:1e:18:53:20:d3:e6:a9:e8:ef:ac:34: 38:c2:08:d4:69:7e:9f:cb:c1:5c:3a:eb:cc:1b:cf: dd:66:24:d6:72:e5:ec:37:9f:c2:d5:de:b7:bb:00: c2:7d:fd:fb:35:9d:62:ec:30:2e:2b:62:01:98:06: 98:55:0a:7e:39:1f:28:b3:20:1c:a4:10:81:a6:f5: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:10:36:74:8B:4B:43:EC:7B:2E:E1:40:AD:83:E1:16:47:A2:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ff3e005-9b38-35d4-846d-15943c76949d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:83:55:0d:aa:d7:53:52:d4:63:52:55:0c:e0:33:44:d4:63: 1d:37:68:13:36:ef:1e:7b:04:a7:e7:5d:e6:41:ec:77:3b:cd: 87:96:ec:c8:d7:6c:8a:d0:c7:91:48:61:61:fd:0c:93:96:da: 4f:25:fc:01:d7:bd:9b:4b:c9:f5:3a:19:b6:5d:85:86:c8:13: 92:81:04:38:b3:e3:9b:6c:29:fb:0c:66:53:b3:63:8e:67:4f: 1a:83:5d:17:47:ec:2a:3b:fc:5c:46:16:03:e0:c9:93:73:d4: e2:41:a2:d7:ab:9c:c8:1c:d9:1d:e1:41:c2:b8:f8:ef:6a:d9: a7:41:17:56:18:b1:3a:84:9b:a1:37:6c:17:db:b6:de:bf:80: cf:30:38:2b:6e:52:f2:86:bf:c0:48:eb:7a:0e:8e:f1:e5:c4: c2:8a:98:ed:c1:ae:ca:92:a0:87:d4:20:24:6c:4a:5c:5a:81: 75:92:83:17:40:d6:fc:53:1a:6f:a1:8d:e1:b6:e2:9f:31:e8: a9:5b:10:56:bf:36:cd:5b:f8:88:23:58:e1:d5:68:ed:14:c1: fd:a6:9d:99:c5:a6:ec:fd:6d:74:1f:d5:bf:4e:a2:f6:51:22: c4:cd:08:2e:78:70:2d:43:87:f5:cd:b4:67:e8:28:5d:11:2d: 0d:50:31:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tnu3iLmk1Oqdd0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjc0NloXDTI2MTIyNzE3Mjc0NlowLzEtMCsGA1UEAxMk OWE2YmNhZDQtMTc2Mi00YjA5LThjZTgtYmM2OTc1MTVmZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlabcuHHrSEBF80dvoJmzZgvjB1BJUt+wy9mj 4MnbxfxLGJJdi56ocnM9m6/xSY4WY2JMgdslbEeneLDXGTjE3HR36KPxzH5Qh4CM ka6rDZJs+nQJm2Pi+nEqaep3fBMkrTbFNDJYoK1uUdoCEFdSabcwczSm06Q+hqiV DJShfy0ucnrzNt+lf44eRckOob9agAP8t8rnxZJ7mwEH3EgwW9Gonl6GgGeqbq9B w1b9+3ErzvFVqNQBHhhTINPmqejvrDQ4wgjUaX6fy8FcOuvMG8/dZiTWcuXsN5/C 1d63uwDCff37NZ1i7DAuK2IBmAaYVQp+OR8osyAcpBCBpvVuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVeEDZ0i0tD7Hsu4UCtg+EWR6KvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmZmM2UwMDUtOWIzOC0z NWQ0LTg0NmQtMTU5NDNjNzY5NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRGLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWDVQ2q11NS1GNSVQzgM0TUYx03aBM27x57BKfnXeZB7Hc7zYeW7MjX bIrQx5FIYWH9DJOW2k8l/AHXvZtLyfU6GbZdhYbIE5KBBDiz45tsKfsMZlOzY45n TxqDXRdH7Co7/FxGFgPgyZNz1OJBoternMgc2R3hQcK4+O9q2adBF1YYsTqEm6E3 bBfbtt6/gM8wOCtuUvKGv8BI63oOjvHlxMKKmO3BrsqSoIfUICRsSlxagXWSgxdA 1vxTGm+hjeG24p8x6KlbEFa/Ns1b+IgjWOHVaO0Uwf2mnZnFpuz9bXQf1b9OovZR IsTNCC54cC1Dh/XNtGfoKF0RLQ1QMZk= -----END CERTIFICATE-----Generated at Fri Oct 2 06:18:30 2026 by rpki-client