$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa File: 08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa (raw, json) Hash identifier: CSEQhmFeWgwbjdgdndS6uyLUj+aKc4gOggKXB8NMuiI= Subject key identifier: AA:63:C8:96:A9:83:C6:D5:9F:B0:21:00:D8:AD:F6:3B:1A:C7:B5:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A330F4FCEECBC85A81A5B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.101.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:0f:4f:ce:ec:bc:85:a8:1a:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=f31975b0-c43f-4797-b51c-200a831097ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:36:ae:5f:4a:a9:78:85:21:ad:dc:bf:08:de: 4e:4d:66:8a:25:8e:11:0b:36:98:f5:50:12:db:9a: 52:36:68:91:ef:2f:c5:0b:39:ad:f6:23:cc:45:7b: 8c:93:c7:40:e7:f7:c2:ea:52:91:29:e9:44:45:d6: d5:d9:5d:68:b2:87:b8:bf:78:51:39:15:18:da:b9: ca:13:41:57:72:c0:7e:a5:d2:bb:63:58:53:01:f3: a5:05:d1:bf:f6:d9:24:86:62:c1:13:25:79:49:17: f1:96:08:46:ef:c6:34:60:f7:8a:2d:c0:db:84:44: 15:91:76:7e:f5:9f:21:85:4d:e2:ab:fd:54:6b:6d: ce:c0:d4:8e:37:81:73:50:49:00:c9:88:0d:11:a9: 76:ff:1c:d6:1b:d4:41:d8:6b:0e:da:b6:94:70:84: 96:7e:ae:46:c2:91:20:c2:1c:9f:bc:ef:1b:83:bf: 7e:de:a7:ed:cc:6b:c0:92:6f:07:be:ef:a7:62:2a: df:31:de:e2:b6:f4:68:99:b6:c8:c2:a6:62:06:e6: 7d:ad:b4:8f:85:62:7c:c7:ad:21:a6:4f:bb:01:45: c4:82:d9:72:9a:e6:62:c2:6b:b6:6c:4f:05:2d:f5: cf:4c:0d:89:a6:ab:f6:30:1c:85:08:bf:f7:8e:f5: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:C8:96:A9:83:C6:D5:9F:B0:21:00:D8:AD:F6:3B:1A:C7:B5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d5:47:9e:63:88:a4:72:ec:4e:f6:7c:31:51:6c:69:ee:ea: 53:e8:7f:4f:a8:9b:0a:55:22:19:7e:93:ba:73:6a:18:e9:c9: db:b7:2f:45:4c:36:6e:a9:a9:14:b3:27:b3:1b:d9:a3:6f:19: da:f4:4a:04:9e:d9:ba:cd:2c:d2:45:9d:2f:83:af:85:c9:09: 87:72:26:c1:3f:b0:02:f4:6a:c0:e0:35:b3:4f:34:97:c4:f3: 61:08:1c:da:74:e5:8e:ee:35:3d:1a:f2:2b:aa:b6:02:13:70: 12:c0:67:2e:05:d0:06:71:36:59:af:d2:61:f6:74:96:9d:cb: 29:58:1c:52:aa:5d:e9:8a:0a:0c:0e:99:05:81:52:6b:4d:4a: 3a:69:4f:65:f8:38:d4:b4:48:8f:1e:02:4a:79:fb:02:12:0f: 13:bb:05:f7:f5:fe:53:e1:42:3a:1c:04:8b:01:04:85:73:38: cb:d2:01:4d:48:82:fc:2a:aa:fc:e9:a3:84:1a:2e:29:d6:19: 33:b2:65:fd:34:c6:29:94:2e:38:0c:7b:5d:4a:97:47:86:35: d7:ba:0d:d9:aa:d0:a3:bd:f1:c0:aa:cd:99:1f:08:ad:66:d1: 85:3a:a6:36:07:0b:f4:d4:bb:1f:99:8d:37:ba:08:fb:14:14: c0:44:48:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMw9Pzuy8hagaWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjMxOTc1YjAtYzQzZi00Nzk3LWI1MWMtMjAwYTgzMTA5N2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zauX0qpeIUhrdy/CN5OTWaKJY4RCzaY9VAS 25pSNmiR7y/FCzmt9iPMRXuMk8dA5/fC6lKRKelERdbV2V1osoe4v3hRORUY2rnK E0FXcsB+pdK7Y1hTAfOlBdG/9tkkhmLBEyV5SRfxlghG78Y0YPeKLcDbhEQVkXZ+ 9Z8hhU3iq/1Ua23OwNSON4FzUEkAyYgNEal2/xzWG9RB2GsO2raUcISWfq5GwpEg whyfvO8bg79+3qftzGvAkm8Hvu+nYirfMd7itvRombbIwqZiBuZ9rbSPhWJ8x60h pk+7AUXEgtlymuZiwmu2bE8FLfXPTA2Jpqv2MByFCL/3jvVh2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpjyJapg8bVn7AhANit9jsax7VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDhhMmIzMjEtZDk0Yy0z MzhlLThkZGQtYTJmYTdmMmMzNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/VR55jiKRy7E72fDFRbGnu6lPof0+omwpVIhl+k7pzahjpydu3L0VM Nm6pqRSzJ7Mb2aNvGdr0SgSe2brNLNJFnS+Dr4XJCYdyJsE/sAL0asDgNbNPNJfE 82EIHNp05Y7uNT0a8iuqtgITcBLAZy4F0AZxNlmv0mH2dJadyylYHFKqXemKCgwO mQWBUmtNSjppT2X4ONS0SI8eAkp5+wISDxO7Bff1/lPhQjocBIsBBIVzOMvSAU1I gvwqqvzpo4QaLinWGTOyZf00ximULjgMe11Kl0eGNde6Ddmq0KO98cCqzZkfCK1m 0YU6pjYHC/TUux+ZjTe6CPsUFMBESEg= -----END CERTIFICATE-----Generated at Tue Nov 3 08:23:30 2026 by rpki-client