$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f581cd8-3c9d-30a3-801e-f0dc5b6c5917.roa File: 0f581cd8-3c9d-30a3-801e-f0dc5b6c5917.roa (raw, json) Hash identifier: QdKX6NGGLA2qpkP3dnIZfgd5Fe7r6HSupWj+8gqnLp4= Subject key identifier: 7B:6D:40:A0:0F:E1:39:4A:4A:B1:81:C4:28:D9:DD:C7:99:1A:9C:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32D61FD474C64092677B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f581cd8-3c9d-30a3-801e-f0dc5b6c5917.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.14.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:d6:1f:d4:74:c6:40:92:67:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=af6e4a7d-5043-4c8b-b500-fe3ac0d558b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:90:3b:30:5e:a8:c3:74:b8:74:13:25:33: 4d:43:98:08:bd:9e:c6:c1:0a:36:8e:cd:bb:70:f6: 7c:4e:d2:f7:fe:b3:2e:8c:1f:29:71:ab:d6:40:a7: db:53:fc:f0:94:83:69:d7:a1:cb:a0:42:9a:39:b2: 64:43:b6:b0:32:c8:cd:e4:0b:c6:37:f8:a7:d9:7f: ea:b1:53:1c:5f:ad:fe:e7:4f:6c:25:16:0d:88:1b: 2b:00:92:7d:d9:0d:2b:f7:9a:0a:f2:f7:b1:ff:c0: 11:9f:e4:cb:bb:9e:6b:33:40:20:38:8e:40:33:fe: d8:0e:7c:43:93:9b:6f:ab:2d:84:1e:5f:e9:a3:2c: 52:e0:ad:95:69:d1:69:0c:99:a9:63:11:a5:45:d0: d6:78:97:68:14:d8:66:6a:06:5e:a0:b9:08:92:c3: 4e:2a:ee:58:e9:d3:11:97:c1:0b:2a:fd:61:d5:f6: 84:21:0c:0c:03:4d:12:11:bd:f4:89:62:a4:cf:e6: 8b:32:45:67:f4:c1:cd:35:e4:e0:c7:fe:26:a7:1f: c0:fa:bb:f0:44:61:66:53:73:46:aa:15:ad:ea:62: d4:e5:32:d0:28:fd:0e:69:ea:53:a6:a7:d5:45:30: 57:e1:02:02:96:b7:5e:5c:8b:07:62:52:f5:75:fa: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6D:40:A0:0F:E1:39:4A:4A:B1:81:C4:28:D9:DD:C7:99:1A:9C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f581cd8-3c9d-30a3-801e-f0dc5b6c5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7a:3a:29:81:b1:57:ba:f3:84:9f:11:dd:94:b8:0d:89:b5: bc:de:a8:c8:57:fc:c8:1f:8d:ee:2d:06:14:46:aa:52:ef:19: 71:14:89:c8:cb:58:33:7d:79:94:ba:54:97:db:1f:ab:6f:07: c9:c8:21:67:83:6f:11:c2:e2:2d:8d:e9:eb:ad:30:85:d2:c6: 06:58:27:7c:3b:b1:1c:5f:8a:be:91:83:c7:a3:01:34:08:67: f5:09:33:39:55:b3:06:ac:09:bf:02:eb:a7:a2:59:17:a2:b0: f2:ef:20:3e:e8:a2:05:c4:f6:41:2b:93:c5:e7:a6:1b:75:c5: a2:55:0f:6d:c4:bc:d7:4d:88:48:e0:20:bb:8c:99:b6:b7:af: b8:57:c5:98:d3:7c:dd:5c:b2:74:ab:dd:01:94:05:b3:6c:24: 34:f3:3c:ec:3a:10:f1:92:78:57:14:9c:32:b0:69:5e:fc:e1: 61:58:ab:51:ae:e5:d6:d2:5f:06:24:b8:25:bf:d6:e0:b3:0a: 89:7a:25:4a:9c:8a:a1:2a:61:01:db:ad:29:6c:cb:3d:87:7b: 0d:e0:b2:13:ac:54:43:35:70:55:6e:3f:a4:0d:1b:37:3e:ac: 22:83:54:40:a0:5c:d2:81:de:a1:15:21:e7:63:9e:c9:30:24: c4:a0:72:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtYf1HTGQJJne4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YWY2ZTRhN2QtNTA0My00YzhiLWI1MDAtZmUzYWMwZDU1OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbeQOzBeqMN0uHQTJTNNQ5gIvZ7GwQo2js27 cPZ8TtL3/rMujB8pcavWQKfbU/zwlINp16HLoEKaObJkQ7awMsjN5AvGN/in2X/q sVMcX63+509sJRYNiBsrAJJ92Q0r95oK8vex/8ARn+TLu55rM0AgOI5AM/7YDnxD k5tvqy2EHl/poyxS4K2VadFpDJmpYxGlRdDWeJdoFNhmagZeoLkIksNOKu5Y6dMR l8ELKv1h1faEIQwMA00SEb30iWKkz+aLMkVn9MHNNeTgx/4mpx/A+rvwRGFmU3NG qhWt6mLU5TLQKP0OaepTpqfVRTBX4QIClrdeXIsHYlL1dfo/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHttQKAP4TlKSrGBxCjZ3ceZGpylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGY1ODFjZDgtM2M5ZC0z MGEzLTgwMWUtZjBkYzViNmM1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG16OimBsVe684SfEd2UuA2JtbzeqMhX/Mgfje4tBhRGqlLvGXEUicjL WDN9eZS6VJfbH6tvB8nIIWeDbxHC4i2N6eutMIXSxgZYJ3w7sRxfir6Rg8ejATQI Z/UJMzlVswasCb8C66eiWReisPLvID7oogXE9kErk8Xnpht1xaJVD23EvNdNiEjg ILuMmba3r7hXxZjTfN1csnSr3QGUBbNsJDTzPOw6EPGSeFcUnDKwaV784WFYq1Gu 5dbSXwYkuCW/1uCzCol6JUqciqEqYQHbrSlsyz2Hew3gshOsVEM1cFVuP6QNGzc+ rCKDVECgXNKB3qEVIedjnskwJMSgcvA= -----END CERTIFICATE-----Generated at Wed Nov 4 17:02:28 2026 by rpki-client