$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09c0f2fa-effc-332b-959a-2460899c51dc.roa File: 09c0f2fa-effc-332b-959a-2460899c51dc.roa (raw, json) Hash identifier: /9J1bhyYrLOx53ABN6HnghCL24gg0paXZrql+FsoxhY= Subject key identifier: D2:64:75:8F:B5:A7:59:FD:B0:CC:E8:D7:CF:ED:C7:3B:C5:69:46:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32EF2E832699359017B780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09c0f2fa-effc-332b-959a-2460899c51dc.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:ef:2e:83:26:99:35:90:17:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=d8ba8600-1516-45a3-8773-50aacb5794f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:d7:e4:59:51:9b:04:cd:c8:2d:f6:d8:22: 3a:5b:db:2c:af:e2:28:e1:e7:37:ec:54:ea:02:14: d9:7d:60:da:2f:13:95:55:0b:2b:70:91:f6:01:61: 7c:fe:d5:f2:86:eb:7d:25:56:c4:e0:e9:17:f3:fc: 96:a0:14:e2:c6:ac:22:a8:e6:23:47:37:7e:46:df: c8:dc:41:b6:c0:cc:c3:b0:67:f7:b6:24:59:1e:a2: b2:7d:76:13:cc:8f:59:33:f2:75:f6:eb:ae:65:53: 03:e8:23:d4:2c:b6:27:4e:42:78:47:5a:7c:48:06: dc:06:81:a0:0e:d7:cd:82:45:f5:49:ca:6d:e6:0e: 5a:b9:dc:35:2f:6f:04:94:1c:5a:7c:ec:41:fe:4e: 7f:1d:90:ed:c1:52:a1:49:75:5f:88:2f:6f:db:cd: ce:00:38:77:a7:ad:3f:a3:b6:c7:89:78:4f:ff:6a: 3b:13:08:80:9a:2e:11:da:0e:dd:04:2e:ed:0b:b8: 3c:38:06:34:35:d0:e0:3f:b3:ee:79:f7:62:6c:12: 77:84:69:c7:22:1e:65:89:45:6b:94:9c:8d:43:0d: 84:87:db:8f:30:45:0e:75:8e:73:3e:62:5e:5a:db: ee:e9:41:8d:31:09:90:d0:b0:c8:19:3d:f4:3a:50: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:64:75:8F:B5:A7:59:FD:B0:CC:E8:D7:CF:ED:C7:3B:C5:69:46:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09c0f2fa-effc-332b-959a-2460899c51dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5c:a8:59:55:93:10:ec:b3:7b:7f:58:39:65:ba:3d:e9:d8: 32:b3:c9:8b:d4:59:88:bc:5c:6c:69:4b:9f:ea:61:9e:40:96: 22:4a:5c:a6:61:c8:ec:4d:43:0c:61:36:7d:34:59:81:8b:02: 02:e5:94:fa:84:ab:1f:7c:7a:14:1b:b6:bc:91:01:bc:12:20: 25:71:3a:37:5c:a4:09:20:5c:da:3d:9e:68:d2:bf:67:8b:ab: 4d:1d:5a:5d:21:26:bb:8e:1c:f6:d6:cc:eb:c9:c4:ae:17:15: 4b:2f:eb:7c:56:ad:e5:eb:56:12:67:c0:73:e7:41:35:65:48: c7:f3:08:4e:56:60:33:b6:c2:ba:c4:f7:57:9d:3f:41:86:dc: c4:7e:46:07:7a:e9:f9:d9:e7:3e:5d:8f:2b:7d:54:48:8b:58: 77:91:6e:f0:4f:1b:d2:1b:54:60:70:90:e6:ca:1f:92:94:12: d6:97:56:c7:1b:b6:f4:20:90:98:95:3e:9f:54:96:33:3e:0f: f3:21:70:12:f4:d5:24:b7:e9:74:74:7a:da:c8:61:d4:83:4e: bb:3b:88:c5:cc:cc:4f:20:3c:b0:40:f5:e1:17:6d:ab:64:58: 2f:43:4d:c9:5b:0d:0c:6e:29:d9:e1:07:bd:8e:7e:5f:fe:eb: 46:c6:22:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMu8ugyaZNZAXt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhiYTg2MDAtMTUxNi00NWEzLTg3NzMtNTBhYWNiNTc5NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguvX5FlRmwTNyC322CI6W9ssr+Io4ec37FTq AhTZfWDaLxOVVQsrcJH2AWF8/tXyhut9JVbE4OkX8/yWoBTixqwiqOYjRzd+Rt/I 3EG2wMzDsGf3tiRZHqKyfXYTzI9ZM/J19uuuZVMD6CPULLYnTkJ4R1p8SAbcBoGg DtfNgkX1Scpt5g5audw1L28ElBxafOxB/k5/HZDtwVKhSXVfiC9v283OADh3p60/ o7bHiXhP/2o7EwiAmi4R2g7dBC7tC7g8OAY0NdDgP7PuefdibBJ3hGnHIh5liUVr lJyNQw2Eh9uPMEUOdY5zPmJeWtvu6UGNMQmQ0LDIGT30OlBxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJkdY+1p1n9sMzo18/txzvFaUaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDljMGYyZmEtZWZmYy0z MzJiLTk1OWEtMjQ2MDg5OWM1MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNcqFlVkxDss3t/WDlluj3p2DKzyYvUWYi8XGxpS5/qYZ5AliJKXKZh yOxNQwxhNn00WYGLAgLllPqEqx98ehQbtryRAbwSICVxOjdcpAkgXNo9nmjSv2eL q00dWl0hJruOHPbWzOvJxK4XFUsv63xWreXrVhJnwHPnQTVlSMfzCE5WYDO2wrrE 91edP0GG3MR+Rgd66fnZ5z5djyt9VEiLWHeRbvBPG9IbVGBwkObKH5KUEtaXVscb tvQgkJiVPp9UljM+D/MhcBL01SS36XR0etrIYdSDTrs7iMXMzE8gPLBA9eEXbatk WC9DTclbDQxuKdnhB72Ofl/+60bGIuw= -----END CERTIFICATE-----Generated at Tue Nov 3 16:23:10 2026 by rpki-client