$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3be26e91-2b53-34bd-803a-40eddbe347b0.roa File: 3be26e91-2b53-34bd-803a-40eddbe347b0.roa (raw, json) Hash identifier: fJoNVqcGIYC2AroaMnYes/b+iDTVZCh5Llu59MUGwtA= Subject key identifier: F6:71:95:99:1B:AD:C0:E6:41:B2:6F:35:A0:28:93:9F:6E:AE:CE:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539F848CB0AEE66F47D09940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3be26e91-2b53-34bd-803a-40eddbe347b0.roa Signing time: Mon 28 Sep 2026 16:28:57 +0000 ROA not before: Mon 28 Sep 2026 16:28:57 +0000 ROA not after: Sun 27 Dec 2026 17:28:57 +0000 asID: 22773 IP address blocks: 68.225.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:84:8c:b0:ae:e6:6f:47:d0:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:28:57 2026 GMT Not After : Dec 27 17:28:57 2026 GMT Subject: CN=050d0859-a17f-4d5e-b5dd-5f7e9e0d3218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:64:39:22:41:b2:4f:ee:7d:83:7c:d7:85: 6e:e5:6c:4f:58:37:fc:84:ba:3a:cb:71:83:57:34: ab:25:44:b3:39:63:aa:27:ad:d7:05:9d:26:b3:64: de:4c:dd:4a:b1:76:22:e2:5e:fb:e7:86:d2:d9:b0: 0b:f7:21:7b:6d:ab:66:9b:36:04:8c:c6:e5:0f:76: 1b:58:6c:7b:fd:40:b6:0a:a5:4b:eb:1a:51:9d:d6: 27:5a:2d:ea:b9:e1:70:19:95:2c:a0:84:88:38:f9: 0a:d4:5b:34:9d:2a:4a:45:cc:d8:1c:90:ed:b0:8a: 25:68:40:f2:d5:f4:c8:71:98:7d:6c:78:7c:49:4b: 5d:3a:21:9a:ac:2d:d9:90:48:8f:d3:c5:a1:66:57: cb:57:ee:d2:85:8f:57:98:c0:9c:24:cd:f4:cd:04: ae:fd:16:5d:d0:76:71:2a:7a:b4:5c:8e:a5:d8:7d: 07:5f:86:6f:ed:73:62:9f:a1:ca:85:b0:0c:e7:b2: 9e:00:c2:a7:c9:8d:d4:cf:a7:61:6c:79:d8:cb:63: 29:38:28:34:11:96:85:b1:e4:3d:a0:b7:e7:f2:67: e3:1d:f0:4b:f0:e0:f3:8e:2c:e3:1f:8b:c4:07:93: 5e:87:3f:7b:8d:67:0e:ec:a2:f9:6c:ec:f5:60:91: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:95:99:1B:AD:C0:E6:41:B2:6F:35:A0:28:93:9F:6E:AE:CE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3be26e91-2b53-34bd-803a-40eddbe347b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:43:12:13:5a:94:36:7b:1f:db:f0:ca:c8:6e:bb:82:d3:5c: f7:ef:da:a6:72:f4:4a:16:79:5b:33:19:5e:8a:41:c4:88:0c: 65:7e:7b:27:3b:9f:07:da:ee:2d:eb:08:cd:8d:e2:1d:c0:20: 4f:7d:f3:f8:b6:9b:02:81:59:69:15:9a:4b:92:c1:a5:43:1e: fa:7c:17:ac:6b:37:ef:5d:d7:51:7b:73:0b:64:66:87:69:ed: c0:23:bf:ac:3d:9f:a0:39:49:9b:05:d8:1e:43:4d:c2:63:8a: 63:2d:9e:0a:f0:96:a9:3f:d8:5f:72:d3:fa:6f:61:a7:a3:84: d8:2a:e8:1d:53:d2:9f:3f:78:19:b7:72:cf:d8:6b:a6:f5:cb: cf:2d:d5:a1:82:8b:94:49:32:78:f1:25:f8:02:b0:9f:49:db: 16:22:ab:27:51:5d:d3:b5:0d:1b:67:e3:9a:79:da:ce:ae:f6: 41:bf:6d:5e:8c:f8:47:15:b7:27:09:60:de:06:a7:82:6c:af: a9:d9:69:8a:06:bb:ac:ff:f1:c6:97:3b:3f:7c:a5:98:8e:a7: 7d:dd:99:50:e9:e4:5c:ff:29:c6:19:40:51:39:76:ac:e9:c4: 4f:28:4c:c9:62:97:e2:4e:b4:9d:45:3c:42:e8:7b:10:a3:68: 11:e5:22:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tn4SMsK7mb0fQmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjg1N1oXDTI2MTIyNzE3Mjg1N1owLzEtMCsGA1UEAxMk MDUwZDA4NTktYTE3Zi00ZDVlLWI1ZGQtNWY3ZTllMGQzMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCZkOSJBsk/ufYN814Vu5WxPWDf8hLo6y3GD VzSrJUSzOWOqJ63XBZ0ms2TeTN1KsXYi4l7754bS2bAL9yF7batmmzYEjMblD3Yb WGx7/UC2CqVL6xpRndYnWi3queFwGZUsoISIOPkK1Fs0nSpKRczYHJDtsIolaEDy 1fTIcZh9bHh8SUtdOiGarC3ZkEiP08WhZlfLV+7ShY9XmMCcJM30zQSu/RZd0HZx Knq0XI6l2H0HX4Zv7XNin6HKhbAM57KeAMKnyY3Uz6dhbHnYy2MpOCg0EZaFseQ9 oLfn8mfjHfBL8ODzjizjH4vEB5Nehz97jWcO7KL5bOz1YJG6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZxlZkbrcDmQbJvNaAok59urs4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2JlMjZlOTEtMmI1My0z NGJkLTgwM2EtNDBlZGRiZTM0N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlDEhNalDZ7H9vwyshuu4LTXPfv2qZy9EoWeVszGV6KQcSIDGV+eyc7 nwfa7i3rCM2N4h3AIE998/i2mwKBWWkVmkuSwaVDHvp8F6xrN+9d11F7cwtkZodp 7cAjv6w9n6A5SZsF2B5DTcJjimMtngrwlqk/2F9y0/pvYaejhNgq6B1T0p8/eBm3 cs/Ya6b1y88t1aGCi5RJMnjxJfgCsJ9J2xYiqydRXdO1DRtn45p52s6u9kG/bV6M +EcVtycJYN4Gp4Jsr6nZaYoGu6z/8caXOz98pZiOp33dmVDp5Fz/KcYZQFE5dqzp xE8oTMlil+JOtJ1FPELoexCjaBHlIl8= -----END CERTIFICATE-----Generated at Wed Sep 30 21:54:05 2026 by rpki-client