$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa File: 438125ea-62d3-37b8-8d16-432d8d0b72b2.roa (raw, json) Hash identifier: y3OqZUQlk5YpH3a1ynmJSD1/WYzXkX32vRkMoj1LZVM= Subject key identifier: 8D:81:79:66:EC:98:A5:72:09:8D:54:E3:92:FD:0D:92:DB:A4:32:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F331D31857C4D0F72447E8580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 22773 IP address blocks: 68.227.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:31:85:7c:4d:0f:72:44:7e:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=b093194e-dd8c-4e35-89a0-cdec8d5ccd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:11:00:b4:e6:1a:fa:3c:af:f0:2d:13:99: 71:f4:51:8c:bf:10:0f:fe:08:4f:85:b2:e0:cd:6c: 88:67:a4:69:52:5b:1f:a4:76:e8:e7:b3:da:78:5d: 04:8c:5c:d8:c0:0e:54:d2:3b:9e:eb:d6:66:ec:d2: 98:13:7b:a0:2b:3b:68:28:a9:0b:8e:43:eb:90:5b: 5a:8d:1e:df:18:cf:c6:8a:9a:ac:96:16:04:77:cd: ea:be:b6:b7:e8:f9:f8:1f:41:c4:fb:6c:19:44:02: 4d:90:7a:6c:f4:d5:34:88:66:f0:5b:d5:56:a3:54: 7f:d9:39:32:5d:71:1f:ba:a7:05:f7:92:05:a2:9a: ad:b4:3b:c5:a8:fd:be:e7:39:7e:87:6f:54:a6:60: 8a:30:e1:43:cd:af:67:5f:28:1a:55:1e:5e:2c:9f: 70:81:8b:ba:44:b1:5c:ad:dd:c2:a2:31:a0:cf:c3: 9f:b8:16:a9:69:3f:51:af:6d:74:27:f9:f5:42:d0: 5c:2f:3c:29:6d:71:a4:93:31:3d:ab:2a:c5:9d:35: 62:97:2e:de:9f:fa:a5:24:a5:cc:50:77:e8:af:cf: a5:66:bc:3c:05:5d:ee:49:50:ed:57:7a:65:7e:a6: ab:24:72:c4:24:2f:14:c5:c3:03:c0:ee:48:74:30: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:81:79:66:EC:98:A5:72:09:8D:54:E3:92:FD:0D:92:DB:A4:32:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fe:2f:c3:dc:a5:39:eb:b6:50:02:2d:f2:7b:a4:41:b3:c2: bd:dc:e7:75:24:bd:41:c7:7a:d1:02:53:1e:5f:40:ea:a5:45: 21:0d:93:b1:9a:2a:8d:24:b5:30:a8:9f:10:8c:28:47:2c:af: fe:5f:ac:5d:64:15:a5:d2:2b:fa:6c:f0:bc:7f:55:b9:57:03: 90:0d:8d:ba:8d:bb:55:af:4f:30:98:e1:9e:dd:1a:fd:5f:af: 60:a7:cf:d2:8b:ec:72:58:35:e4:a4:4e:d1:74:96:1d:5e:5f: bf:83:1c:23:65:2d:df:9b:5e:2e:1b:48:21:26:b5:8c:9f:c0: aa:89:73:4e:77:78:fa:d6:14:51:00:2f:d8:d9:e5:20:2d:67: d4:75:ea:33:9b:d6:4b:8c:30:9c:9c:ce:e6:da:87:4f:aa:cf: 12:1c:09:d2:c8:14:8a:c6:7f:a4:bf:70:ca:13:52:76:e8:57: fb:db:32:e2:a6:5b:88:d1:5e:c6:ba:57:53:2a:78:af:e4:1c: 27:d0:c1:7f:75:75:a0:98:c2:e3:18:4a:e6:79:96:a1:05:dc: cf:35:9d:cc:7f:ab:f2:c8:ee:bc:b7:4d:e9:85:c7:c5:4d:ca: f7:83:4d:47:5e:c0:04:38:07:0e:2c:55:b7:74:1f:db:64:d7: 2b:ef:5f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHTGFfE0PckR+hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YjA5MzE5NGUtZGQ4Yy00ZTM1LTg5YTAtY2RlYzhkNWNjZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtMRALTmGvo8r/AtE5lx9FGMvxAP/ghPhbLg zWyIZ6RpUlsfpHbo57PaeF0EjFzYwA5U0jue69Zm7NKYE3ugKztoKKkLjkPrkFta jR7fGM/GipqslhYEd83qvra36Pn4H0HE+2wZRAJNkHps9NU0iGbwW9VWo1R/2Tky XXEfuqcF95IFopqttDvFqP2+5zl+h29UpmCKMOFDza9nXygaVR5eLJ9wgYu6RLFc rd3CojGgz8OfuBapaT9Rr210J/n1QtBcLzwpbXGkkzE9qyrFnTVily7en/qlJKXM UHfor8+lZrw8BV3uSVDtV3plfqarJHLEJC8UxcMDwO5IdDAvUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2BeWbsmKVyCY1U45L9DZLbpDJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4MTI1ZWEtNjJkMy0z N2I4LThkMTYtNDMyZDhkMGI3MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7+L8PcpTnrtlACLfJ7pEGzwr3c53UkvUHHetECUx5fQOqlRSENk7Ga Ko0ktTConxCMKEcsr/5frF1kFaXSK/ps8Lx/VblXA5ANjbqNu1WvTzCY4Z7dGv1f r2Cnz9KL7HJYNeSkTtF0lh1eX7+DHCNlLd+bXi4bSCEmtYyfwKqJc053ePrWFFEA L9jZ5SAtZ9R16jOb1kuMMJyczubah0+qzxIcCdLIFIrGf6S/cMoTUnboV/vbMuKm W4jRXsa6V1MqeK/kHCfQwX91daCYwuMYSuZ5lqEF3M81ncx/q/LI7ry3TemFx8VN yveDTUdewAQ4Bw4sVbd0H9tk1yvvX0A= -----END CERTIFICATE-----Generated at Fri Sep 18 15:52:23 2026 by rpki-client