$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12f44f3e-5673-3d7c-9a21-084709a6155b.roa File: 12f44f3e-5673-3d7c-9a21-084709a6155b.roa (raw, json) Hash identifier: C2q96amRoU2iB/gWMJgLsbIOtBZuTdnsFYBLMHt9yo8= Subject key identifier: F7:80:D8:5E:0B:B0:5E:26:BA:1C:87:C6:60:1B:DD:43:EB:6C:EC:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32F8545A64AB4BA45CC580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12f44f3e-5673-3d7c-9a21-084709a6155b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.109.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f8:54:5a:64:ab:4b:a4:5c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=faebb6c9-eb2b-40a2-a4f2-05486a3e40d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:65:8b:9f:09:4b:23:ce:91:96:3e:17:e3: fc:fc:e1:31:4d:bd:bf:b8:0c:cb:b3:79:4c:39:ff: 63:be:b2:13:a5:5c:e9:d4:11:18:c1:dd:c7:07:74: ef:9e:a5:d9:1b:9d:21:d0:f0:56:e1:99:3f:0d:f4: 71:94:70:33:e8:59:7d:54:d2:7c:87:1e:d1:24:e3: 53:96:3c:b1:7a:4d:82:b8:43:e1:bc:bb:3a:c2:e6: 1f:ea:7f:ca:c2:fa:bd:30:8d:4b:49:f5:07:02:ce: 15:41:97:e3:0f:13:d8:a2:40:5e:08:56:83:e5:93: ab:19:6e:78:b4:e4:40:18:e3:44:1d:74:e8:a4:72: 26:e7:5c:34:bb:cf:61:b6:f9:0a:15:91:5c:4f:99: a3:a4:b6:2e:55:72:71:5d:1a:a7:bf:0b:6d:9e:bd: 07:a1:cd:d6:ce:4d:3f:45:63:59:39:15:87:9e:4e: 74:d2:75:f3:e5:32:a3:be:7d:d0:4c:a6:0b:41:f2: 11:c2:b5:0e:5a:56:12:e4:c3:6b:ba:02:47:d4:7a: d9:8d:aa:e3:02:81:a1:e7:14:88:65:0a:c4:ac:88: ad:c2:87:89:37:ba:15:aa:1c:d0:ae:8b:c8:cf:dd: 07:87:29:5e:56:97:fb:cd:8d:fa:52:73:de:e0:4f: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:80:D8:5E:0B:B0:5E:26:BA:1C:87:C6:60:1B:DD:43:EB:6C:EC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12f44f3e-5673-3d7c-9a21-084709a6155b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:86:e8:b0:4a:a8:ac:11:c4:a7:d1:ca:e1:36:be:39:1d:9b: fd:1f:78:20:0a:8b:30:c0:67:64:b5:b5:d8:3a:08:85:51:fd: 84:9a:37:cb:30:e7:c2:ea:59:be:b2:93:ad:49:2f:a1:3b:6c: 49:b5:98:f3:5a:89:42:a0:99:c5:71:1f:80:39:ef:99:24:65: 14:26:1e:e2:f0:5e:b2:c0:db:90:9c:49:b9:3b:72:2e:68:32: 9f:46:27:ff:68:3e:27:64:1b:93:77:11:0a:63:a2:20:f2:2f: b1:a0:ab:fb:32:4f:81:4c:81:6b:1a:10:ad:f2:a6:25:6a:93: 01:22:40:a3:24:2b:de:12:f8:1d:bc:6b:1b:7a:de:15:66:38: 1e:60:f0:9f:7f:83:51:b7:a5:11:04:ac:13:bc:d2:56:d3:b9: e1:6d:57:e3:45:85:ab:e3:23:d5:1f:56:75:6f:2d:b5:56:f5: e3:df:70:4a:cb:f6:e6:c7:d4:a4:04:54:0a:99:54:a6:af:79: 94:b9:56:ba:df:6a:9e:65:7a:11:f7:ba:c1:10:f6:57:07:d2: 9d:15:d2:48:fc:50:d1:95:4b:0b:0c:32:6a:50:e9:79:44:5a: 80:36:fb:d3:24:fe:8c:63:58:6d:2e:40:63:69:fd:8f:30:e1: 74:b7:52:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMvhUWmSrS6RcxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmFlYmI2YzktZWIyYi00MGEyLWE0ZjItMDU0ODZhM2U0MGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSlli58JSyPOkZY+F+P8/OExTb2/uAzLs3lM Of9jvrITpVzp1BEYwd3HB3TvnqXZG50h0PBW4Zk/DfRxlHAz6Fl9VNJ8hx7RJONT ljyxek2CuEPhvLs6wuYf6n/Kwvq9MI1LSfUHAs4VQZfjDxPYokBeCFaD5ZOrGW54 tORAGONEHXTopHIm51w0u89htvkKFZFcT5mjpLYuVXJxXRqnvwttnr0Hoc3Wzk0/ RWNZORWHnk500nXz5TKjvn3QTKYLQfIRwrUOWlYS5MNrugJH1HrZjarjAoGh5xSI ZQrErIitwoeJN7oVqhzQrovIz90HhyleVpf7zY36UnPe4E/ePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeA2F4LsF4muhyHxmAb3UPrbOzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTJmNDRmM2UtNTY3My0z ZDdjLTlhMjEtMDg0NzA5YTYxNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmG6LBKqKwRxKfRyuE2vjkdm/0feCAKizDAZ2S1tdg6CIVR/YSaN8sw 58LqWb6yk61JL6E7bEm1mPNaiUKgmcVxH4A575kkZRQmHuLwXrLA25CcSbk7ci5o Mp9GJ/9oPidkG5N3EQpjoiDyL7Ggq/syT4FMgWsaEK3ypiVqkwEiQKMkK94S+B28 axt63hVmOB5g8J9/g1G3pREErBO80lbTueFtV+NFhavjI9UfVnVvLbVW9ePfcErL 9ubH1KQEVAqZVKaveZS5Vrrfap5lehH3usEQ9lcH0p0V0kj8UNGVSwsMMmpQ6XlE WoA2+9Mk/oxjWG0uQGNp/Y8w4XS3UhA= -----END CERTIFICATE-----Generated at Thu Nov 5 15:03:30 2026 by rpki-client