$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33da87ab-32ef-376b-9cac-f0ce5b1c9ad2.roa File: 33da87ab-32ef-376b-9cac-f0ce5b1c9ad2.roa (raw, json) Hash identifier: vnlREjmttEbQCUhWwFftuCSMqCuxmCWihbAxJSQbnB4= Subject key identifier: 31:35:AD:71:C1:BB:D2:41:8A:91:14:B2:68:15:F8:14:68:E2:81:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539EFB7B98BA0A0114151180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33da87ab-32ef-376b-9cac-f0ce5b1c9ad2.roa Signing time: Mon 28 Sep 2026 16:27:52 +0000 ROA not before: Mon 28 Sep 2026 16:27:52 +0000 ROA not after: Sun 27 Dec 2026 17:27:52 +0000 asID: 22773 IP address blocks: 68.99.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:fb:7b:98:ba:0a:01:14:15:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:27:52 2026 GMT Not After : Dec 27 17:27:52 2026 GMT Subject: CN=ffdec024-3c18-4ce5-b048-e600f02f0780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:6f:df:3e:0d:35:0a:bb:43:09:7c:67:b9: e8:6f:5d:f7:ad:e3:3a:52:01:27:1a:74:55:98:81: a3:6b:44:18:5e:34:88:c1:cb:73:f2:7e:4f:09:68: fb:16:0b:8b:ca:de:22:16:c6:ff:a4:ad:cc:50:57: 54:96:25:49:05:ff:5d:04:a6:22:17:fe:ec:f3:eb: 2b:25:ac:b1:4e:cb:75:c3:55:82:99:b7:9d:9c:d8: 82:7c:e6:bb:24:ed:a0:be:3d:9e:09:2f:fa:41:99: f1:52:2c:5c:8e:04:c4:fb:df:42:ae:fd:83:94:01: 01:ab:2e:7b:59:8c:ac:f6:fd:f5:45:49:cf:bc:ea: 2f:18:be:d5:70:58:f6:e9:f5:e1:b4:7b:41:88:a2: 53:ed:c4:e2:8d:fd:6f:a3:3c:70:76:08:ee:0d:b0: e9:2a:db:22:77:0c:ce:df:30:6a:df:0e:f1:2c:4a: 90:14:9a:40:50:7f:d0:8b:ea:f5:cc:bd:c1:81:19: 6f:de:7f:e6:39:a0:4c:be:9b:2e:3c:3a:3a:2d:e8: fd:64:8d:f7:07:5b:88:c2:e8:95:93:63:4a:25:57: 10:16:58:c5:81:bc:d3:5e:56:ad:a6:69:36:74:57: 9b:97:d7:44:10:0d:e8:0c:fd:56:af:be:fd:a0:6f: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:35:AD:71:C1:BB:D2:41:8A:91:14:B2:68:15:F8:14:68:E2:81:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33da87ab-32ef-376b-9cac-f0ce5b1c9ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6e:84:83:81:b7:64:43:e2:a9:2c:55:75:14:da:5a:69:e9: a1:81:66:4f:bf:8c:22:07:c2:29:82:d3:91:97:9a:20:b3:39: dd:7e:ab:5f:61:d9:ae:38:8e:a7:12:8a:02:10:78:4f:22:a1: 2d:2e:aa:cb:5f:ba:47:a9:25:85:ea:57:6b:91:09:24:12:a2: 80:25:7b:dd:e8:51:f9:23:2e:ed:0b:22:98:ca:fe:44:b4:0d: 80:38:d4:f8:b7:72:eb:c8:7d:da:64:0f:ba:6c:55:65:dc:22: 8f:72:6e:86:b0:8f:e8:80:84:37:02:89:7e:5e:bc:7e:43:fd: de:8f:2c:09:9f:46:0d:37:8d:98:83:6c:6d:8d:c9:c6:84:3b: 94:e1:f9:37:0d:08:9d:96:2e:99:2c:8e:ab:84:dd:25:ce:10: c1:fb:da:9f:75:19:14:8e:7d:f4:b3:ab:ca:98:f1:b4:d9:cc: 80:ef:b6:4d:c7:2f:3d:e9:c4:61:38:88:4f:31:22:77:3b:6e: 89:cd:53:ed:82:ac:16:ad:ec:d5:55:f6:1b:09:da:80:ff:21: 3d:bb:7d:9f:24:ff:42:f3:af:4a:43:a4:75:32:17:f5:2f:ce: e8:57:6c:06:4c:a2:99:0b:cd:ee:61:25:21:23:b5:21:02:e9: e9:ef:fd:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tnvt7mLoKARQVEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjc1MloXDTI2MTIyNzE3Mjc1MlowLzEtMCsGA1UEAxMk ZmZkZWMwMjQtM2MxOC00Y2U1LWIwNDgtZTYwMGYwMmYwNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQBv3z4NNQq7Qwl8Z7nob133reM6UgEnGnRV mIGja0QYXjSIwctz8n5PCWj7FguLyt4iFsb/pK3MUFdUliVJBf9dBKYiF/7s8+sr JayxTst1w1WCmbednNiCfOa7JO2gvj2eCS/6QZnxUixcjgTE+99Crv2DlAEBqy57 WYys9v31RUnPvOovGL7VcFj26fXhtHtBiKJT7cTijf1vozxwdgjuDbDpKtsidwzO 3zBq3w7xLEqQFJpAUH/Qi+r1zL3BgRlv3n/mOaBMvpsuPDo6Lej9ZI33B1uIwuiV k2NKJVcQFljFgbzTXlatpmk2dFebl9dEEA3oDP1Wr779oG9UewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE1rXHBu9JBipEUsmgV+BRo4oHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNkYTg3YWItMzJlZi0z NzZiLTljYWMtZjBjZTViMWM5YWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRGNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5uhIOBt2RD4qksVXUU2lpp6aGBZk+/jCIHwimC05GXmiCzOd1+q19h 2a44jqcSigIQeE8ioS0uqstfukepJYXqV2uRCSQSooAle93oUfkjLu0LIpjK/kS0 DYA41Pi3cuvIfdpkD7psVWXcIo9yboawj+iAhDcCiX5evH5D/d6PLAmfRg03jZiD bG2NycaEO5Th+TcNCJ2WLpksjquE3SXOEMH72p91GRSOffSzq8qY8bTZzIDvtk3H Lz3pxGE4iE8xInc7bonNU+2CrBat7NVV9hsJ2oD/IT27fZ8k/0Lzr0pDpHUyF/Uv zuhXbAZMopkLze5hJSEjtSEC6env/cM= -----END CERTIFICATE-----Generated at Wed Sep 30 22:45:02 2026 by rpki-client