$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa File: 35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa (raw, json) Hash identifier: FngU9bd2TW5d2RN8pEo0cVm3DOV7sRQgCKWsXT5k17M= Subject key identifier: E4:49:DE:00:E4:DC:B6:E3:37:C5:85:98:16:8E:CE:B9:29:27:1E:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32D41B32D43CC8480A3E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.6.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:d4:1b:32:d4:3c:c8:48:0a:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9a12bd05-80ba-4244-8893-109ec9fad00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:97:c6:a9:54:d5:ac:04:fd:42:97:96:e1: 26:3f:34:7b:db:50:15:47:a8:b1:d7:8e:89:a3:b9: 61:d6:6b:f5:58:de:f1:da:b4:bb:ea:18:e3:46:2e: 53:08:7b:b4:f5:af:12:a2:a3:9d:df:6b:d3:de:7d: 78:36:09:36:12:a1:04:17:6f:a3:4d:73:05:d2:0c: 2e:5e:87:44:94:9d:fa:da:ed:1e:6d:fe:d6:c2:fa: 08:ec:d4:2f:dc:7c:c3:b4:eb:57:f9:5d:21:95:d6: 6f:40:31:80:da:44:6c:fb:13:f3:09:37:35:db:55: 58:90:d7:60:9e:6e:d9:0c:39:52:30:da:b8:ca:4e: 0c:50:cc:1c:d2:a8:17:7d:bb:02:e7:44:f9:21:63: a4:11:6f:d1:1a:38:a6:39:5d:ce:06:b6:7b:ab:cb: d3:5e:88:7a:2d:d5:af:b6:d8:64:31:5b:84:db:97: 72:fc:4b:d4:96:85:fb:51:0f:90:e1:df:4b:8f:49: f1:8d:6d:37:7d:20:94:50:ed:ac:28:dd:2c:70:d7: d9:23:8e:43:e7:72:63:fc:53:6c:3b:9d:c3:23:65: 38:d3:75:38:95:aa:a9:17:ef:71:ad:9c:54:08:ea: 33:5c:17:6d:0c:81:04:9d:16:3f:fb:c2:22:53:1d: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:49:DE:00:E4:DC:B6:E3:37:C5:85:98:16:8E:CE:B9:29:27:1E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d3:d2:4e:a4:0a:3e:b7:20:1b:a7:0f:38:27:b2:aa:b2:86: 65:b1:53:21:8c:a2:56:43:87:04:0b:21:b7:75:45:18:eb:53: 13:44:26:ac:0a:d3:b5:46:45:dc:18:cc:1f:d2:97:b0:35:52: fb:9c:e0:c7:4c:e8:34:74:88:c2:2f:d2:11:cf:c7:06:54:4b: 82:d3:87:e4:ec:2c:66:1b:e7:ce:df:19:ce:45:1a:92:d0:f9: cd:13:2e:53:43:b9:db:9b:59:91:d3:f9:08:45:81:16:56:ea: e7:14:3d:0a:81:67:7b:49:40:bb:e4:c7:af:b1:9d:36:3d:59: a0:f0:ee:f3:44:d2:10:d7:a4:2a:f1:95:27:28:bb:47:b8:1d: 6d:5b:4e:4f:2f:8a:dc:94:b9:03:52:47:bc:89:d9:3b:39:b5: 2c:ca:19:06:48:0d:a9:9d:ce:fa:ef:85:0b:d4:69:c8:b4:76: 1d:e6:92:39:06:c9:4a:7d:64:3f:cc:2e:d3:49:15:8f:5f:41: e3:b1:ee:d6:0a:0b:c8:ce:82:91:5a:e5:b8:5e:81:d9:7f:1e: 6e:3f:40:2f:6c:11:59:70:67:d6:5b:b0:e1:89:b5:96:02:cb: 13:3b:53:95:7c:c6:27:5a:3c:c0:96:b5:88:e7:99:6e:a7:1e: 38:c2:e8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtQbMtQ8yEgKPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWExMmJkMDUtODBiYS00MjQ0LTg4OTMtMTA5ZWM5ZmFkMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JuXxqlU1awE/UKXluEmPzR721AVR6ix146J o7lh1mv1WN7x2rS76hjjRi5TCHu09a8SoqOd32vT3n14Ngk2EqEEF2+jTXMF0gwu XodElJ362u0ebf7WwvoI7NQv3HzDtOtX+V0hldZvQDGA2kRs+xPzCTc121VYkNdg nm7ZDDlSMNq4yk4MUMwc0qgXfbsC50T5IWOkEW/RGjimOV3OBrZ7q8vTXoh6LdWv tthkMVuE25dy/EvUloX7UQ+Q4d9Lj0nxjW03fSCUUO2sKN0scNfZI45D53Jj/FNs O53DI2U403U4laqpF+9xrZxUCOozXBdtDIEEnRY/+8IiUx1JnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORJ3gDk3LbjN8WFmBaOzrkpJx68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVmMjAwZmQtODZhNy0z OGM5LTk1ZDctMTM5M2RkZmU5YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHT0k6kCj63IBunDzgnsqqyhmWxUyGMolZDhwQLIbd1RRjrUxNEJqwK 07VGRdwYzB/Sl7A1Uvuc4MdM6DR0iMIv0hHPxwZUS4LTh+TsLGYb587fGc5FGpLQ +c0TLlNDudubWZHT+QhFgRZW6ucUPQqBZ3tJQLvkx6+xnTY9WaDw7vNE0hDXpCrx lScou0e4HW1bTk8vityUuQNSR7yJ2Ts5tSzKGQZIDamdzvrvhQvUaci0dh3mkjkG yUp9ZD/MLtNJFY9fQeOx7tYKC8jOgpFa5bhegdl/Hm4/QC9sEVlwZ9ZbsOGJtZYC yxM7U5V8xidaPMCWtYjnmW6nHjjC6O4= -----END CERTIFICATE-----Generated at Thu Nov 5 09:19:51 2026 by rpki-client