$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3389bb82-25fc-3446-96ae-c3a1c7fb749c.roa File: 3389bb82-25fc-3446-96ae-c3a1c7fb749c.roa (raw, json) Hash identifier: HQCTc3voqXnWqRQtZ70mqrOPAkYz+fEd1AwMTKyyweo= Subject key identifier: 93:EE:36:C7:73:0C:88:D8:13:42:54:32:49:CF:30:11:78:54:FE:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539F027BC91C027974679C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3389bb82-25fc-3446-96ae-c3a1c7fb749c.roa Signing time: Mon 28 Sep 2026 16:27:56 +0000 ROA not before: Mon 28 Sep 2026 16:27:56 +0000 ROA not after: Sun 27 Dec 2026 17:27:56 +0000 asID: 22773 IP address blocks: 68.99.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:02:7b:c9:1c:02:79:74:67:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:27:56 2026 GMT Not After : Dec 27 17:27:56 2026 GMT Subject: CN=fcaf0c2b-f70d-4701-80c8-16e15aed79c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:41:ec:05:82:08:63:58:b7:71:c5:3b:a1: 03:c4:50:6f:48:10:94:a8:22:dd:31:a7:00:80:81: 51:18:8c:8b:ee:78:03:e3:88:e8:bb:a2:a6:ad:73: 76:21:37:e3:41:80:3d:dc:02:30:ae:e2:b9:32:97: cd:7f:5b:5d:ad:75:13:32:25:2b:23:9d:7d:c3:e3: 24:e7:f6:e1:28:0d:3e:58:8d:69:6b:cb:b3:28:ea: b7:05:3d:49:e2:c7:fd:dd:0c:90:21:6b:4a:14:2b: a3:e9:4e:8d:0e:b3:22:b6:58:a6:e3:e3:73:85:e1: dc:1a:49:f6:f6:cb:be:d7:a4:ca:f8:31:a3:4a:4d: 89:f0:c2:fe:65:06:87:64:25:a2:6b:bb:61:d4:37: 14:dc:4c:b9:1d:30:af:c8:89:bf:97:a6:8a:04:06: 8d:36:f9:c8:e3:cc:06:c4:f5:19:21:d8:47:08:0c: a6:7e:00:20:7a:52:b5:17:b8:b2:5d:41:c0:36:30: 51:6e:67:ca:78:fb:f5:5e:f0:8a:9b:f6:e1:d3:1d: e7:20:58:1c:09:de:44:af:cb:d3:f6:ac:ff:10:82: 26:38:26:cf:91:0a:12:45:a8:03:67:99:07:90:89: 8d:67:9c:4e:b1:76:d5:97:27:5e:46:80:f0:d5:78: 87:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EE:36:C7:73:0C:88:D8:13:42:54:32:49:CF:30:11:78:54:FE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3389bb82-25fc-3446-96ae-c3a1c7fb749c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:34:57:41:52:38:1f:0e:aa:bf:42:db:28:a3:97:30:a6:ea: 40:e8:fe:65:39:96:8d:4f:f9:fb:ad:33:dd:44:28:49:a0:4a: d9:28:f8:60:1a:fb:f0:3e:a0:7e:bb:90:5b:70:70:4a:ff:61: 9f:77:45:82:e0:3b:fc:87:97:71:d6:67:94:7f:4e:fc:b9:7a: 1f:03:12:15:1d:30:0c:62:52:d2:47:6d:ad:1c:23:17:a7:9e: 07:e1:8c:1d:93:65:7b:75:7f:3b:6f:52:09:bd:7c:79:82:84: aa:17:2a:ef:f0:fa:f4:2b:74:9a:e4:c4:21:42:60:24:c3:6b: 25:e2:b0:2e:d1:a8:13:d7:c2:47:ac:3f:5a:02:17:45:05:ab: bd:36:d7:9a:2d:21:d1:26:2b:bd:3a:65:c6:c8:f5:b5:b6:04: 5a:52:c0:21:bc:57:ef:70:d4:c2:39:c0:d5:76:71:e7:12:96: 16:4f:b5:e0:a3:ed:f6:41:9d:a7:1c:46:d8:f1:50:14:b1:2d: c4:cf:69:3a:74:f1:94:3c:72:bd:93:bc:62:7e:62:a6:63:9a: f2:0d:71:01:73:0d:1c:6f:f2:a9:0e:61:4f:99:80:26:d8:96: 0f:ef:0a:c4:39:6f:bc:58:0b:54:31:8d:3e:df:02:84:d0:e0: 42:9f:a1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnwJ7yRwCeXRnnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjc1NloXDTI2MTIyNzE3Mjc1NlowLzEtMCsGA1UEAxMk ZmNhZjBjMmItZjcwZC00NzAxLTgwYzgtMTZlMTVhZWQ3OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1RB7AWCCGNYt3HFO6EDxFBvSBCUqCLdMacA gIFRGIyL7ngD44jou6KmrXN2ITfjQYA93AIwruK5MpfNf1tdrXUTMiUrI519w+Mk 5/bhKA0+WI1pa8uzKOq3BT1J4sf93QyQIWtKFCuj6U6NDrMitlim4+NzheHcGkn2 9su+16TK+DGjSk2J8ML+ZQaHZCWia7th1DcU3Ey5HTCvyIm/l6aKBAaNNvnI48wG xPUZIdhHCAymfgAgelK1F7iyXUHANjBRbmfKePv1XvCKm/bh0x3nIFgcCd5Er8vT 9qz/EIImOCbPkQoSRagDZ5kHkImNZ5xOsXbVlydeRoDw1XiHYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPuNsdzDIjYE0JUMknPMBF4VP59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzM4OWJiODItMjVmYy0z NDQ2LTk2YWUtYzNhMWM3ZmI3NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU0V0FSOB8Oqr9C2yijlzCm6kDo/mU5lo1P+futM91EKEmgStko+GAa +/A+oH67kFtwcEr/YZ93RYLgO/yHl3HWZ5R/Tvy5eh8DEhUdMAxiUtJHba0cIxen ngfhjB2TZXt1fztvUgm9fHmChKoXKu/w+vQrdJrkxCFCYCTDayXisC7RqBPXwkes P1oCF0UFq70215otIdEmK706ZcbI9bW2BFpSwCG8V+9w1MI5wNV2cecSlhZPteCj 7fZBnaccRtjxUBSxLcTPaTp08ZQ8cr2TvGJ+YqZjmvINcQFzDRxv8qkOYU+ZgCbY lg/vCsQ5b7xYC1QxjT7fAoTQ4EKfoRM= -----END CERTIFICATE-----Generated at Wed Sep 30 22:38:35 2026 by rpki-client