$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13289fc1-7d01-3fbe-a704-514894fd7fdd.roa File: 13289fc1-7d01-3fbe-a704-514894fd7fdd.roa (raw, json) Hash identifier: 8bpXMXLYZjf1jTvM4fvE8nBN8ixlwNGs94OdvKIOoo0= Subject key identifier: 3D:F5:B9:95:D5:5D:0D:28:6B:76:32:E8:57:D4:FD:F4:23:4A:3D:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32E92D162C30D883887F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13289fc1-7d01-3fbe-a704-514894fd7fdd.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.0.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:e9:2d:16:2c:30:d8:83:88:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=d3cfba64-96d8-4242-95e6-ea6edd998f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a3:46:12:44:7f:c4:7b:57:12:b6:74:ce:20: 58:2d:c2:3e:82:83:b6:2c:68:4e:9d:be:67:dc:c6: 5d:aa:79:b8:32:28:98:bf:59:a8:9c:ad:9c:68:5c: 06:d4:18:c0:48:41:c5:e4:3b:ed:72:9e:d6:cb:90: 5a:5e:f0:b1:7c:61:97:ed:6d:0a:c6:31:0d:59:d3: b1:59:04:5e:ae:66:28:01:e5:b8:5e:3c:a8:b8:e1: 4a:81:5b:6b:4a:3c:f0:55:6b:43:a5:40:d1:ca:35: 76:f5:79:21:2c:51:60:04:11:83:f6:c5:4f:05:87: 2d:80:fa:95:91:b0:1f:e0:c2:d2:d9:56:78:c6:58: f6:c9:57:6a:73:50:a6:26:35:46:9e:e6:51:1d:1b: 04:73:f1:a7:6a:8f:b1:40:62:40:21:b9:d1:83:17: ce:02:db:04:30:d5:5e:e0:3c:b2:d4:8a:35:cb:a6: ed:5b:5d:52:1b:2e:65:6c:42:3d:52:10:67:d0:b5: e0:2a:f6:7c:dd:c5:2b:cf:20:e3:e1:3c:3d:da:30: 69:9b:25:88:ce:85:f1:26:5a:9d:4e:e2:48:b2:e8: a7:7b:9f:a6:4d:c2:e1:5f:5d:5a:75:d7:36:59:f3: 67:79:fb:ec:c5:f4:85:2d:03:d4:11:c8:24:12:22: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:B9:95:D5:5D:0D:28:6B:76:32:E8:57:D4:FD:F4:23:4A:3D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13289fc1-7d01-3fbe-a704-514894fd7fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:47:5b:c0:39:c8:6d:a5:a0:e0:c4:d3:a1:23:d4:a7:36:2d: 62:24:d7:15:17:be:65:94:2c:a6:fc:47:f2:38:93:7d:d3:8e: c5:87:09:fc:26:24:e6:41:4a:c9:e8:ba:03:7f:25:b5:0b:58: 71:c9:40:e3:dd:c7:2c:c7:f9:f8:0e:53:42:62:4a:a6:ee:68: 86:44:3b:0a:54:41:50:fc:b8:06:69:b2:a9:75:5c:27:c3:c4: 00:93:02:1b:87:0c:d9:2f:fc:1a:41:a8:cb:b8:3d:fe:46:d2: 59:f9:cf:80:2d:2c:c7:61:cf:4c:1e:b8:3b:a3:16:85:9f:f3: 2a:ab:df:d5:52:d3:6c:ed:1e:85:af:19:8d:09:66:7e:40:9f: c6:30:24:aa:f3:dd:f4:37:18:d3:7c:39:35:8e:49:27:35:c3: 94:33:93:38:c0:6d:0f:ed:4f:89:e3:93:26:f0:f2:7b:18:b1: c9:56:93:4f:7a:4f:8a:98:6f:24:20:00:5c:c0:07:53:2a:fe: c6:b3:19:57:e4:fb:a1:dd:2b:e5:f3:47:bb:df:c4:7a:b3:30: e1:fa:17:be:95:42:11:32:b7:a7:53:9c:1d:f8:94:06:cc:92: 27:54:f5:bc:05:42:df:24:3c:d5:db:5b:f7:86:9d:24:1a:f2: 75:93:e1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMuktFiww2IOIfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDNjZmJhNjQtOTZkOC00MjQyLTk1ZTYtZWE2ZWRkOTk4ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqNGEkR/xHtXErZ0ziBYLcI+goO2LGhOnb5n 3MZdqnm4MiiYv1monK2caFwG1BjASEHF5Dvtcp7Wy5BaXvCxfGGX7W0KxjENWdOx WQRermYoAeW4XjyouOFKgVtrSjzwVWtDpUDRyjV29XkhLFFgBBGD9sVPBYctgPqV kbAf4MLS2VZ4xlj2yVdqc1CmJjVGnuZRHRsEc/Gnao+xQGJAIbnRgxfOAtsEMNVe 4Dyy1Io1y6btW11SGy5lbEI9UhBn0LXgKvZ83cUrzyDj4Tw92jBpmyWIzoXxJlqd TuJIsuine5+mTcLhX11addc2WfNnefvsxfSFLQPUEcgkEiJhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD31uZXVXQ0oa3Yy6FfU/fQjSj0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMyODlmYzEtN2QwMS0z ZmJlLWE3MDQtNTE0ODk0ZmQ3ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtHW8A5yG2loODE06Ej1Kc2LWIk1xUXvmWULKb8R/I4k33TjsWHCfwm JOZBSsnougN/JbULWHHJQOPdxyzH+fgOU0JiSqbuaIZEOwpUQVD8uAZpsql1XCfD xACTAhuHDNkv/BpBqMu4Pf5G0ln5z4AtLMdhz0weuDujFoWf8yqr39VS02ztHoWv GY0JZn5An8YwJKrz3fQ3GNN8OTWOSSc1w5QzkzjAbQ/tT4njkybw8nsYsclWk096 T4qYbyQgAFzAB1Mq/sazGVfk+6HdK+XzR7vfxHqzMOH6F76VQhEyt6dTnB34lAbM kidU9bwFQt8kPNXbW/eGnSQa8nWT4Q0= -----END CERTIFICATE-----Generated at Thu Nov 5 04:54:13 2026 by rpki-client