$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c987ca-a073-3f89-95b4-583a378dacb2.roa File: 12c987ca-a073-3f89-95b4-583a378dacb2.roa (raw, json) Hash identifier: SyJUfCfFLkVrAZWguO3HoME4eD/86damOdUNCaZ78tk= Subject key identifier: D3:9A:4B:13:12:81:A9:54:CC:F9:5F:6C:E7:11:5D:3E:F2:8F:A9:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3316241189F51FA3DF6600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c987ca-a073-3f89-95b4-583a378dacb2.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.9.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:16:24:11:89:f5:1f:a3:df:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=6bfca99c-f457-4e21-a2b7-fdf93decca8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:7e:e4:72:92:7c:53:0d:67:02:85:2d:36: c2:1f:fb:cc:db:54:4b:46:8a:af:54:bc:a4:59:05: 14:33:96:55:79:31:a9:1a:b7:82:62:f6:38:14:36: eb:57:2e:a2:84:fd:83:26:eb:9c:c3:ec:20:15:73: 56:3b:79:e3:62:c6:23:af:2e:2b:9a:a6:49:7c:e7: 31:50:b5:cf:f1:7f:80:57:c7:0e:57:98:db:a3:cf: 49:38:c6:2b:e5:9c:e0:1f:b2:0a:eb:b7:47:a9:fd: e5:14:f1:fd:21:60:bb:cf:43:55:a4:0d:4c:e8:b5: 69:fc:6f:08:aa:70:7d:10:70:22:a9:5d:d4:97:c4: 37:85:2d:f9:1d:f9:bf:77:1c:39:99:98:ea:b8:90: 84:10:e6:96:85:77:47:94:d3:fe:85:a5:bf:36:bb: 97:5c:32:a6:93:60:74:2d:1b:b5:76:ea:d1:52:8f: 87:55:50:a4:06:ef:20:60:98:63:00:69:1f:1a:f0: 85:f3:56:fb:56:bf:c2:3a:24:73:2e:3e:e5:26:96: 93:71:ec:0d:a2:70:08:2e:e3:b0:d0:eb:b8:af:d3: 1b:33:ec:a2:60:94:7a:8d:a7:66:25:f9:d0:7a:5c: ec:6d:de:f8:df:5a:2f:20:f8:8e:24:9e:0d:17:7d: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9A:4B:13:12:81:A9:54:CC:F9:5F:6C:E7:11:5D:3E:F2:8F:A9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c987ca-a073-3f89-95b4-583a378dacb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:af:06:b4:a8:c2:30:ee:21:ea:6b:8c:1b:1b:e0:e0:a7:e0: 94:35:20:94:6b:4a:c9:fe:7e:13:8c:b3:70:61:db:23:e1:87: 86:fe:e7:b8:5f:89:b5:0d:50:41:87:19:80:30:79:f4:c5:6e: c3:7a:0a:34:2c:05:5d:d9:93:7d:51:04:b9:08:f1:d9:9b:6f: f1:cc:a9:e9:0e:d0:d4:e1:89:15:fe:bf:e4:19:96:f6:3f:68: b5:6e:e7:3e:37:89:32:a6:15:f3:d9:8a:f3:9f:bb:a3:42:34: 7f:40:a9:96:a6:61:73:fa:8b:35:2c:ad:64:61:7d:a1:d1:f1: 5f:dd:da:a8:5b:a3:71:f4:2d:f8:a9:56:46:83:8a:8b:dc:a8: 3b:4f:f5:00:8a:de:21:d6:f9:c1:c4:3f:f9:19:4b:a3:92:bf: 29:46:ab:61:82:2d:17:21:c3:56:f5:09:10:c2:d4:1e:49:28: b8:b5:ad:8f:40:80:00:1e:76:76:19:eb:8e:f8:6c:eb:b0:81: 8b:c5:51:28:8b:84:75:23:70:b1:21:de:b8:c4:cb:6f:29:63: 3e:41:b1:99:85:ee:6e:10:c9:23:6e:ef:ee:78:38:b6:57:37: 2e:af:97:b2:c0:ee:99:06:50:e1:0f:29:bd:9d:d8:db:ff:37: 97:a7:63:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxYkEYn1H6PfZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NmJmY2E5OWMtZjQ1Ny00ZTIxLWEyYjctZmRmOTNkZWNjYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi21+5HKSfFMNZwKFLTbCH/vM21RLRoqvVLyk WQUUM5ZVeTGpGreCYvY4FDbrVy6ihP2DJuucw+wgFXNWO3njYsYjry4rmqZJfOcx ULXP8X+AV8cOV5jbo89JOMYr5ZzgH7IK67dHqf3lFPH9IWC7z0NVpA1M6LVp/G8I qnB9EHAiqV3Ul8Q3hS35Hfm/dxw5mZjquJCEEOaWhXdHlNP+haW/NruXXDKmk2B0 LRu1durRUo+HVVCkBu8gYJhjAGkfGvCF81b7Vr/COiRzLj7lJpaTcewNonAILuOw 0Ou4r9MbM+yiYJR6jadmJfnQelzsbd7431ovIPiOJJ4NF30QyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOaSxMSgalUzPlfbOcRXT7yj6kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTJjOTg3Y2EtYTA3My0z Zjg5LTk1YjQtNTgzYTM3OGRhY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOvBrSowjDuIeprjBsb4OCn4JQ1IJRrSsn+fhOMs3Bh2yPhh4b+57hf ibUNUEGHGYAwefTFbsN6CjQsBV3Zk31RBLkI8dmbb/HMqekO0NThiRX+v+QZlvY/ aLVu5z43iTKmFfPZivOfu6NCNH9AqZamYXP6izUsrWRhfaHR8V/d2qhbo3H0Lfip VkaDiovcqDtP9QCK3iHW+cHEP/kZS6OSvylGq2GCLRchw1b1CRDC1B5JKLi1rY9A gAAednYZ6474bOuwgYvFUSiLhHUjcLEh3rjEy28pYz5BsZmF7m4QySNu7+54OLZX Ny6vl7LA7pkGUOEPKb2d2Nv/N5enY2E= -----END CERTIFICATE-----Generated at Tue Nov 3 16:22:14 2026 by rpki-client