$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34689d15-bb7f-3428-918a-1a8e7317f59b.roa File: 34689d15-bb7f-3428-918a-1a8e7317f59b.roa (raw, json) Hash identifier: fyTgX7DJCFjI8DELcQ0PbyC/IiABh0Y5FhzcrGgRiaI= Subject key identifier: 65:3C:C3:81:81:A4:41:1B:D1:26:D8:CB:DE:F6:9D:5F:15:82:69:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539F6BA735AB04D49E8BF180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34689d15-bb7f-3428-918a-1a8e7317f59b.roa Signing time: Mon 28 Sep 2026 16:28:45 +0000 ROA not before: Mon 28 Sep 2026 16:28:45 +0000 ROA not after: Sun 27 Dec 2026 17:28:45 +0000 asID: 22773 IP address blocks: 68.224.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:6b:a7:35:ab:04:d4:9e:8b:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:28:45 2026 GMT Not After : Dec 27 17:28:45 2026 GMT Subject: CN=ca57a807-23f5-4107-84f6-1f723783e204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:af:4a:44:a1:2f:13:67:a4:4b:d1:a2:54: c2:fa:27:36:fd:f9:d3:d7:93:58:19:cb:d8:d9:e4: a9:4b:1c:d6:17:b2:40:f8:57:f8:f3:e4:c8:ad:34: 96:55:7f:84:6b:19:42:f0:a8:55:82:51:11:77:33: 7e:e8:a6:78:89:47:04:7c:0f:6b:35:3f:73:e5:6c: 97:04:24:8d:32:de:3b:6d:57:90:c5:fc:b8:51:c1: dc:24:6b:53:49:0a:fc:1b:47:02:39:54:3a:1e:99: be:3f:54:b7:92:b1:36:22:d2:89:3c:6f:f8:67:4c: 29:df:88:1c:b9:1a:1f:eb:71:bb:e3:34:01:b7:0d: c4:91:97:5c:e0:d3:aa:3b:a8:bb:dd:a7:08:55:18: d6:d7:76:d6:65:e9:b1:83:f3:77:39:c5:15:f2:66: c8:d5:fb:36:fd:ba:7f:8e:bf:ae:25:5a:3a:95:85: 39:de:82:7c:cc:17:06:73:80:c3:dd:59:40:15:8f: e9:cd:73:ef:dc:6a:7a:71:5c:b1:18:a9:86:ef:ae: 63:75:16:6b:bf:ac:d3:b2:2a:34:40:24:12:2a:58: 6e:b5:e0:c3:c4:94:12:11:a2:09:83:d4:c3:06:d3: d5:10:7c:2d:85:d4:51:6d:96:71:ca:92:ba:57:b3: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:C3:81:81:A4:41:1B:D1:26:D8:CB:DE:F6:9D:5F:15:82:69:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34689d15-bb7f-3428-918a-1a8e7317f59b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:da:11:cd:e2:4d:f6:1d:42:61:ff:0c:1c:c0:12:7c:d3:aa: 22:f3:90:c0:5d:a7:1e:a6:96:a1:fd:2a:38:bf:8f:62:83:b0: fa:bf:ab:f7:d7:1f:bf:e8:68:a2:75:a4:e2:01:08:43:42:5f: a3:bc:ab:e4:63:d7:7a:32:1e:76:fb:31:ba:90:d1:bf:6f:f9: 7e:0e:14:7c:d5:a7:70:97:fb:56:51:3e:b4:15:2c:4b:d7:84: d5:0b:35:d6:c0:d3:29:28:f9:7d:82:78:3b:e4:cc:a3:d8:51: 59:41:e1:69:84:ff:f4:ef:8b:67:cb:7e:79:72:0c:c1:07:c4: bc:e6:bc:c7:ba:e7:fb:b1:04:1d:f8:d3:8b:c5:3b:ad:78:9b: 4b:9f:72:bc:eb:42:89:dc:4b:c7:20:9b:0b:13:84:49:58:74: d8:70:7b:ef:7b:95:02:e2:bd:65:05:f0:d4:c9:d4:f3:3a:fe: b8:e8:63:eb:7a:f2:71:b2:c1:03:91:92:5b:6f:e1:b2:c0:97: 79:2c:7f:88:b1:3d:04:1f:bb:58:24:9d:5b:56:7c:33:e9:c7: fa:95:3a:3d:07:ae:6b:65:e7:d2:9c:29:4b:6b:10:8f:bc:cb: 40:d1:3d:36:b5:b3:7e:2f:aa:c3:c4:91:39:82:b8:d2:0e:15: 3a:b4:5f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tn2unNasE1J6L8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjg0NVoXDTI2MTIyNzE3Mjg0NVowLzEtMCsGA1UEAxMk Y2E1N2E4MDctMjNmNS00MTA3LTg0ZjYtMWY3MjM3ODNlMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL6vSkShLxNnpEvRolTC+ic2/fnT15NYGcvY 2eSpSxzWF7JA+Ff48+TIrTSWVX+EaxlC8KhVglERdzN+6KZ4iUcEfA9rNT9z5WyX BCSNMt47bVeQxfy4UcHcJGtTSQr8G0cCOVQ6Hpm+P1S3krE2ItKJPG/4Z0wp34gc uRof63G74zQBtw3EkZdc4NOqO6i73acIVRjW13bWZemxg/N3OcUV8mbI1fs2/bp/ jr+uJVo6lYU53oJ8zBcGc4DD3VlAFY/pzXPv3Gp6cVyxGKmG765jdRZrv6zTsio0 QCQSKlhuteDDxJQSEaIJg9TDBtPVEHwthdRRbZZxypK6V7OLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU8w4GBpEEb0SbYy972nV8VgmmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ2ODlkMTUtYmI3Zi0z NDI4LTkxOGEtMWE4ZTczMTdmNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbaEc3iTfYdQmH/DBzAEnzTqiLzkMBdpx6mlqH9Kji/j2KDsPq/q/fX H7/oaKJ1pOIBCENCX6O8q+Rj13oyHnb7MbqQ0b9v+X4OFHzVp3CX+1ZRPrQVLEvX hNULNdbA0yko+X2CeDvkzKPYUVlB4WmE//Tvi2fLfnlyDMEHxLzmvMe65/uxBB34 04vFO614m0ufcrzrQoncS8cgmwsThElYdNhwe+97lQLivWUF8NTJ1PM6/rjoY+t6 8nGywQORkltv4bLAl3ksf4ixPQQfu1gknVtWfDPpx/qVOj0Hrmtl59KcKUtrEI+8 y0DRPTa1s34vqsPEkTmCuNIOFTq0X/o= -----END CERTIFICATE-----Generated at Tue Sep 29 19:17:43 2026 by rpki-client