$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028963cf-ea06-3c7b-8fd2-cda2a0690253.roa File: 028963cf-ea06-3c7b-8fd2-cda2a0690253.roa (raw, json) Hash identifier: 09OfmhhZ4GIqJWgz8AjVHyZvogxVLXuKFkQF/7Qsisc= Subject key identifier: CE:4F:60:D3:AE:E7:94:69:B6:31:9C:49:B8:68:09:06:05:8B:FA:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3308888AC083B0B4356380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028963cf-ea06-3c7b-8fd2-cda2a0690253.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.9.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:08:88:8a:c0:83:b0:b4:35:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9716c1dc-9798-4acb-a7a0-e65a9554a061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:b2:68:f1:80:18:51:0b:64:ce:ce:71:53: 70:0b:c7:8a:b6:7a:5b:96:7b:6d:6b:e8:65:40:ce: c0:19:19:dd:89:c7:50:3e:d7:1f:5a:0a:01:da:16: 00:6f:a6:06:49:76:9b:d3:8b:12:4f:e4:4f:d7:c3: b8:48:22:e2:cf:00:5f:70:b7:c5:7e:5b:dc:21:e9: e2:c0:fd:cc:fc:60:fb:27:a0:66:ed:72:50:49:47: 6e:f9:4d:4b:8e:74:ef:c8:2f:a6:c0:ae:19:71:06: 99:95:6a:fd:66:94:3b:de:17:71:21:0f:85:fc:2a: 02:fa:26:31:0e:98:1c:38:39:3f:db:5d:5a:5d:15: 27:14:ec:18:80:2f:2a:32:e5:e3:c9:51:f4:a1:c9: 1d:d9:29:cd:12:84:b9:55:9d:80:63:a1:7c:f6:22: ba:c7:53:62:73:b9:e9:38:3a:e7:a9:c4:a8:d6:1a: db:b3:39:ea:ea:15:0e:56:e0:c1:8b:d5:b4:b0:bc: da:53:06:7b:fd:31:8c:6f:02:eb:2d:f9:62:e5:5e: 42:bd:4a:73:c3:4a:37:67:52:a3:b5:60:52:4d:37: ed:33:48:4a:70:f7:fa:e4:6b:5b:de:c5:9c:1d:c0: f5:47:68:a4:db:6c:38:f1:52:58:48:0b:13:55:cb: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:60:D3:AE:E7:94:69:B6:31:9C:49:B8:68:09:06:05:8B:FA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028963cf-ea06-3c7b-8fd2-cda2a0690253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fd:76:5a:58:1d:a0:85:b9:76:b4:ab:dd:a0:48:dc:64:b4: 91:65:9a:a3:e8:dc:89:ba:b3:e2:b9:02:2f:a8:3e:92:71:62: d4:c9:b2:fb:2c:1f:e4:02:7d:73:75:6c:af:72:64:f6:48:da: 91:dd:e5:fe:79:08:93:15:fc:da:b9:d4:04:4a:4b:01:1f:40: 85:1d:37:d5:93:1d:bd:39:3a:b4:5d:95:af:f5:28:c4:44:c0: 1b:90:f1:a0:6f:78:cd:d0:d9:b6:ac:15:14:2c:33:11:39:39: fe:35:7a:a3:31:a3:25:53:4a:cc:17:8e:b4:a7:3a:d7:90:22: 6d:76:eb:82:82:aa:9d:7b:86:e9:06:9d:99:84:35:b8:4a:cd: fe:a2:2d:27:6a:a3:47:da:21:d4:74:3e:3b:b5:42:37:dd:25: 79:f5:a8:54:0a:88:b0:a6:92:b5:cc:b6:4c:b9:65:0e:57:64: 28:fa:19:bf:1b:8e:45:cc:ff:a4:21:50:ad:5a:e4:b9:d0:20: ab:0c:e2:cc:81:4b:f1:9a:bc:c4:82:3c:3d:a4:1b:dc:c1:d3: 72:d4:16:c1:67:dd:fb:76:c2:3c:09:39:10:6e:55:80:57:4a: 71:89:3c:0a:8c:9e:82:4d:16:b2:d0:3e:d4:0b:02:36:a2:34: f2:d7:eb:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwiIisCDsLQ1Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTcxNmMxZGMtOTc5OC00YWNiLWE3YTAtZTY1YTk1NTRhMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5myaPGAGFELZM7OcVNwC8eKtnpblntta+hl QM7AGRndicdQPtcfWgoB2hYAb6YGSXab04sST+RP18O4SCLizwBfcLfFflvcIeni wP3M/GD7J6Bm7XJQSUdu+U1LjnTvyC+mwK4ZcQaZlWr9ZpQ73hdxIQ+F/CoC+iYx DpgcODk/211aXRUnFOwYgC8qMuXjyVH0ockd2SnNEoS5VZ2AY6F89iK6x1Nic7np ODrnqcSo1hrbsznq6hUOVuDBi9W0sLzaUwZ7/TGMbwLrLfli5V5CvUpzw0o3Z1Kj tWBSTTftM0hKcPf65Gtb3sWcHcD1R2ik22w48VJYSAsTVcsK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5PYNOu55RptjGcSbhoCQYFi/qyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI4OTYzY2YtZWEwNi0z YzdiLThmZDItY2RhMmEwNjkwMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj9dlpYHaCFuXa0q92gSNxktJFlmqPo3Im6s+K5Ai+oPpJxYtTJsvss H+QCfXN1bK9yZPZI2pHd5f55CJMV/Nq51ARKSwEfQIUdN9WTHb05OrRdla/1KMRE wBuQ8aBveM3Q2basFRQsMxE5Of41eqMxoyVTSswXjrSnOteQIm1264KCqp17hukG nZmENbhKzf6iLSdqo0faIdR0Pju1QjfdJXn1qFQKiLCmkrXMtky5ZQ5XZCj6Gb8b jkXM/6QhUK1a5LnQIKsM4syBS/GavMSCPD2kG9zB03LUFsFn3ft2wjwJORBuVYBX SnGJPAqMnoJNFrLQPtQLAjaiNPLX674= -----END CERTIFICATE-----Generated at Tue Nov 3 16:20:48 2026 by rpki-client