$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024aa133-7d33-33b4-a3da-46d0e2d6363c.roa File: 024aa133-7d33-33b4-a3da-46d0e2d6363c.roa (raw, json) Hash identifier: 26GbqBk+BX50wWolYS4JLU+mTYqBqQYC+AnBtB326UY= Subject key identifier: D2:94:66:C3:B4:65:B2:67:8B:B6:D0:57:A9:8B:6C:F2:A9:4E:5D:0E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33223C8C4DEA64D9FBAF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024aa133-7d33-33b4-a3da-46d0e2d6363c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.229.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:22:3c:8c:4d:ea:64:d9:fb:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=1d6792b6-4ef8-4051-b241-be5f77eb3061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:b8:cc:47:07:02:cb:b8:e4:36:9a:c9:46: 8c:66:5b:2c:7d:51:1e:8c:1d:b3:73:08:7c:14:ec: d3:4d:f6:33:e4:18:81:eb:57:f7:d6:be:1a:08:e2: 6f:45:10:8d:ba:eb:d6:c7:4c:bd:6b:09:46:54:8f: b5:e3:53:f8:63:b9:5e:22:f9:d7:ae:b7:7f:13:3c: 8c:46:5a:32:48:31:24:27:31:26:2c:6e:e6:f3:f3: fa:70:46:c3:67:c6:41:6b:d7:fd:f8:8a:f8:4d:e4: d8:95:d6:2d:13:64:91:44:5d:a5:6c:75:ee:6c:a3: 6e:41:74:4a:d6:d7:b5:d9:32:e9:93:dd:59:36:99: 6f:a6:45:66:85:4c:9c:90:ed:96:4f:44:e2:b7:89: 99:0c:9c:0c:de:77:a4:e3:9a:d1:72:8b:2f:f6:33: a5:79:99:f6:1a:31:da:45:9b:8f:05:90:eb:7b:dc: 80:ed:be:9b:9f:8f:85:a8:e1:05:8e:79:a4:b6:5a: e3:63:0f:ab:1e:7d:cd:2d:fb:a4:1c:cf:8f:6c:51: 99:2f:15:3f:ad:7e:88:73:ac:f4:f6:89:19:a4:c2: 6b:8e:26:81:49:29:2f:0b:f8:11:64:62:77:36:38: 12:41:13:38:05:a0:78:e8:08:21:2b:ca:95:fc:92: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:66:C3:B4:65:B2:67:8B:B6:D0:57:A9:8B:6C:F2:A9:4E:5D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/024aa133-7d33-33b4-a3da-46d0e2d6363c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:98:2f:5f:08:1f:a6:12:f4:bd:e4:f6:27:58:9e:fd:08:dd: fd:5b:82:2f:70:40:b6:ab:38:3d:ad:29:0d:8d:5b:14:7a:88: 36:9b:e5:2c:83:1f:ce:e1:c4:ee:37:23:71:bc:61:65:3e:ed: 14:3b:68:58:f7:aa:ab:07:de:2b:92:dc:00:28:9e:cf:0c:62: 45:68:c7:72:b1:4f:73:04:83:d0:62:29:b3:65:5a:2f:90:3f: 06:2d:23:08:77:08:90:aa:84:54:71:94:26:30:28:db:82:c0: 20:a6:83:59:cd:a2:61:7e:16:19:d7:1a:1c:11:e1:5a:2d:e5: 4f:42:1c:0d:66:6c:96:7f:e4:6b:14:2b:a1:f7:71:07:d3:6d: 40:bf:2e:64:d7:e8:c3:51:ff:10:ee:0c:fe:e4:e6:9c:50:ed: 49:33:28:83:d8:b1:59:1c:d3:e6:ca:1b:17:c7:a0:74:59:3a: 38:98:d7:ee:4c:3c:ca:40:ee:40:db:62:a6:44:76:72:ab:dc: ac:b6:41:d6:cd:7d:9c:de:41:cb:8f:81:95:b7:97:63:5d:20: 15:ec:55:27:60:09:f4:66:7a:ac:92:1a:2c:50:4c:85:ee:7a: f3:07:3a:c6:fa:7d:0d:99:e7:72:e0:63:b5:1e:ae:3a:17:32: 20:d0:bc:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMyI8jE3qZNn7r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MWQ2NzkyYjYtNGVmOC00MDUxLWIyNDEtYmU1Zjc3ZWIzMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPy4zEcHAsu45DaayUaMZlssfVEejB2zcwh8 FOzTTfYz5BiB61f31r4aCOJvRRCNuuvWx0y9awlGVI+141P4Y7leIvnXrrd/EzyM RloySDEkJzEmLG7m8/P6cEbDZ8ZBa9f9+Ir4TeTYldYtE2SRRF2lbHXubKNuQXRK 1te12TLpk91ZNplvpkVmhUyckO2WT0Tit4mZDJwM3nek45rRcosv9jOleZn2GjHa RZuPBZDre9yA7b6bn4+FqOEFjnmktlrjYw+rHn3NLfukHM+PbFGZLxU/rX6Ic6z0 9okZpMJrjiaBSSkvC/gRZGJ3NjgSQRM4BaB46AghK8qV/JK+YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKUZsO0ZbJni7bQV6mLbPKpTl0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI0YWExMzMtN2QzMy0z M2I0LWEzZGEtNDZkMGUyZDYzNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiYL18IH6YS9L3k9idYnv0I3f1bgi9wQLarOD2tKQ2NWxR6iDab5SyD H87hxO43I3G8YWU+7RQ7aFj3qqsH3iuS3AAons8MYkVox3KxT3MEg9BiKbNlWi+Q PwYtIwh3CJCqhFRxlCYwKNuCwCCmg1nNomF+FhnXGhwR4Vot5U9CHA1mbJZ/5GsU K6H3cQfTbUC/LmTX6MNR/xDuDP7k5pxQ7UkzKIPYsVkc0+bKGxfHoHRZOjiY1+5M PMpA7kDbYqZEdnKr3Ky2QdbNfZzeQcuPgZW3l2NdIBXsVSdgCfRmeqySGixQTIXu evMHOsb6fQ2Z53LgY7UerjoXMiDQvEY= -----END CERTIFICATE-----Generated at Thu Nov 5 05:53:30 2026 by rpki-client