$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/130ca8b2-fba0-311d-b870-3d1954d1fcf3.roa File: 130ca8b2-fba0-311d-b870-3d1954d1fcf3.roa (raw, json) Hash identifier: P3zvDZbwiCkdYKUByyA4G0AtjGHh96Ixpdlfvdc4QK4= Subject key identifier: 85:3B:96:28:0E:40:4A:08:54:C3:DA:06:84:CC:C8:E1:7D:F7:AD:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32D8D5B2EB5096A361E080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/130ca8b2-fba0-311d-b870-3d1954d1fcf3.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.107.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:d8:d5:b2:eb:50:96:a3:61:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=52379b04-6847-477e-b1b1-730f20170050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:09:df:0e:87:fc:32:4d:6f:4d:8f:9a:af: a6:33:22:b0:18:78:71:89:c6:1a:41:f7:4c:8f:37: 95:97:2f:94:8f:d8:aa:b1:fb:73:1c:58:9d:53:70: d6:f9:1e:d7:e1:40:cd:96:73:27:f0:73:ac:fa:53: fe:ee:53:a7:a4:64:e2:ae:eb:26:83:38:e5:68:c3: 6d:96:02:0a:a3:44:e0:d4:7e:24:d8:c2:0a:85:11: 0f:69:a1:d4:fa:4a:6f:1b:34:2a:87:73:fe:06:33: c0:8d:01:43:2b:ee:96:69:4d:fa:73:20:93:f9:63: cb:6e:34:bc:5d:86:a3:91:90:a2:1e:f3:5f:d8:35: 00:4a:62:c3:98:a8:b2:13:a4:27:2c:84:59:c8:d4: 61:24:73:55:fc:d4:09:cc:95:01:dd:79:64:b6:d7: 19:f1:1a:23:c3:49:43:ec:8c:14:51:40:7c:5f:e8: 83:15:98:20:93:d1:7f:99:bb:e9:b9:73:6b:ce:73: c4:23:b5:e6:2d:49:7f:31:37:46:57:9d:d7:96:51: e2:25:3b:86:fe:f3:93:a2:c7:79:9d:bf:18:06:b2: 3b:f2:f1:5d:30:d6:a2:14:bd:81:09:96:57:c0:12: fe:a3:92:b7:72:d5:37:ee:59:06:0c:db:87:21:df: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:96:28:0E:40:4A:08:54:C3:DA:06:84:CC:C8:E1:7D:F7:AD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/130ca8b2-fba0-311d-b870-3d1954d1fcf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:8e:ef:bf:16:76:24:7d:3f:2e:d6:8a:01:4b:4c:b6:1c:61: 3b:e8:27:7d:2a:d5:87:bf:eb:53:7e:88:0e:f9:3e:8a:01:91: e6:52:b1:5a:21:97:0c:d1:09:ad:a8:51:7d:4f:2d:ea:a6:c5: f7:43:d2:da:5b:d5:45:ee:27:2e:58:0f:f4:df:93:1c:89:69: cc:4c:25:1c:3d:d9:01:b4:83:ac:05:74:df:6b:d7:65:0b:9a: 48:44:52:d1:df:21:22:bc:ff:7c:62:5a:a9:96:9f:93:3f:47: 9b:68:93:dd:56:17:d9:85:b8:62:68:f7:b0:06:85:17:72:3e: 28:24:11:73:be:75:21:06:0d:c0:ef:38:12:a4:ba:75:5c:3a: f9:0a:42:21:14:be:0a:16:a8:e2:3e:6c:f5:51:76:a0:9f:2d: c9:83:d1:d6:b2:f7:20:e8:9a:a5:aa:64:8e:5f:dc:ed:cd:24: 89:dc:e9:d2:bb:7c:2c:ac:06:a0:d3:b8:f2:0b:7e:05:54:df: 0c:53:c1:0d:54:60:1c:97:81:da:11:07:24:db:b5:2b:8f:32: 4f:1f:cc:04:c7:1c:5c:f1:79:fb:0a:41:53:28:f5:6a:2b:08: a8:52:ce:df:d8:28:33:df:b8:ca:2d:bf:60:95:ef:a9:2b:76: b3:d6:bc:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtjVsutQlqNh4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NTIzNzliMDQtNjg0Ny00NzdlLWIxYjEtNzMwZjIwMTcwMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9sJ3w6H/DJNb02Pmq+mMyKwGHhxicYaQfdM jzeVly+Uj9iqsftzHFidU3DW+R7X4UDNlnMn8HOs+lP+7lOnpGTirusmgzjlaMNt lgIKo0Tg1H4k2MIKhREPaaHU+kpvGzQqh3P+BjPAjQFDK+6WaU36cyCT+WPLbjS8 XYajkZCiHvNf2DUASmLDmKiyE6QnLIRZyNRhJHNV/NQJzJUB3XlkttcZ8Rojw0lD 7IwUUUB8X+iDFZggk9F/mbvpuXNrznPEI7XmLUl/MTdGV53XllHiJTuG/vOTosd5 nb8YBrI78vFdMNaiFL2BCZZXwBL+o5K3ctU37lkGDNuHId9/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU7ligOQEoIVMPaBoTMyOF9962NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMwY2E4YjItZmJhMC0z MTFkLWI4NzAtM2QxOTU0ZDFmY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOO778WdiR9Py7WigFLTLYcYTvoJ30q1Ye/61N+iA75PooBkeZSsVoh lwzRCa2oUX1PLeqmxfdD0tpb1UXuJy5YD/TfkxyJacxMJRw92QG0g6wFdN9r12UL mkhEUtHfISK8/3xiWqmWn5M/R5tok91WF9mFuGJo97AGhRdyPigkEXO+dSEGDcDv OBKkunVcOvkKQiEUvgoWqOI+bPVRdqCfLcmD0day9yDomqWqZI5f3O3NJInc6dK7 fCysBqDTuPILfgVU3wxTwQ1UYByXgdoRByTbtSuPMk8fzATHHFzxefsKQVMo9Wor CKhSzt/YKDPfuMotv2CV76krdrPWvFE= -----END CERTIFICATE-----Generated at Mon Nov 2 15:29:15 2026 by rpki-client