$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17cfb34d-71da-37d2-bd90-9bf33acbb858.roa File: 17cfb34d-71da-37d2-bd90-9bf33acbb858.roa (raw, json) Hash identifier: a8XvdzOnLGZjtILXRN8DeGqbvi9o70mA+nHR2fW0pgE= Subject key identifier: 75:BA:CE:39:6E:5D:AB:7D:C5:E5:28:51:2C:E7:ED:E4:29:18:11:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32B90D4CBE49222DF3AE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17cfb34d-71da-37d2-bd90-9bf33acbb858.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.10.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:b9:0d:4c:be:49:22:2d:f3:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=2fcda82b-dfc3-46a0-8d54-710860722810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:11:bd:f6:41:f4:ad:5e:08:c5:b8:b9:04: 39:9e:9a:a2:e1:05:78:40:1b:56:31:82:59:c6:92: 33:b5:d0:d8:39:1b:88:78:6d:5a:d7:3c:d1:69:b4: e0:b4:eb:0f:d1:4e:f9:2c:98:5b:a7:63:1c:9d:9f: 20:81:59:86:b0:6d:7f:69:bd:7d:58:7a:23:0d:4c: fd:0e:19:fd:90:1e:51:07:7b:4c:c1:52:1b:fc:2a: f8:b4:0a:9b:e4:19:0b:26:f0:74:22:ae:89:cd:6b: 57:bd:9c:1e:60:e2:31:52:d4:28:da:66:ef:c0:0d: 67:39:9b:ec:32:35:75:ff:a1:36:bc:49:82:a3:e2: a3:5a:27:17:75:89:e8:1e:9b:b9:3d:19:d6:3f:96: 3d:30:1e:35:ee:28:eb:41:41:15:90:d7:5b:85:81: 57:e5:d9:4c:4c:95:8d:e5:9f:65:88:e5:98:61:e5: c4:ec:c6:01:b1:c5:7c:db:ea:71:3b:44:ee:f0:ce: e1:ac:0e:77:00:45:aa:3f:1c:a0:2f:08:d8:4f:a3: b4:60:ea:7a:4b:f1:5d:76:85:a0:75:01:95:0b:b3: 78:b9:a6:5d:3e:ee:11:22:f5:2a:81:8d:ea:ab:9a: 79:64:9b:e0:cd:f2:15:b1:d1:f9:f0:eb:4c:14:25: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BA:CE:39:6E:5D:AB:7D:C5:E5:28:51:2C:E7:ED:E4:29:18:11:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17cfb34d-71da-37d2-bd90-9bf33acbb858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f8:fa:65:6b:fd:37:6f:48:36:e2:e0:31:30:8e:7d:d2:a3: b5:fa:59:4c:3c:68:f6:dc:75:19:86:61:2d:41:cf:29:6e:0b: 16:62:e7:d3:a6:8a:8d:8a:ca:bc:f4:f0:62:20:20:d1:6c:5a: 3c:0c:34:9e:ac:19:05:10:bd:97:e3:9b:51:2d:87:50:34:75: 1e:da:be:35:e5:a0:72:be:fc:0a:81:6f:89:52:70:31:ae:00: 81:13:75:cf:98:28:e8:a3:a6:b5:9b:48:26:f4:79:03:bd:43: e3:34:ca:49:aa:e5:f5:a3:2f:77:87:b0:cd:13:cd:ea:f3:95: b7:df:dc:02:da:2a:8d:7d:59:06:f7:ff:78:03:90:e1:98:ad: 63:75:79:48:34:f0:de:bc:50:37:c2:43:bf:68:a4:af:bd:5d: c3:81:fc:bd:d2:a6:98:a6:5a:15:8b:a0:50:e3:bf:5f:35:77: 64:02:e9:96:0f:50:de:c6:d1:9e:d0:4b:ce:06:22:58:40:11: 0d:a3:81:d8:b8:7b:3a:6b:45:89:68:ec:fd:34:41:0f:59:2c: ff:05:00:67:d5:d0:40:1d:23:30:88:d0:9b:d4:8f:aa:bf:74: a7:8e:23:c8:5d:c8:66:10:dd:21:fd:79:40:e0:35:06:69:58: 2c:35:ae:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMrkNTL5JIi3zroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MmZjZGE4MmItZGZjMy00NmEwLThkNTQtNzEwODYwNzIyODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRYRvfZB9K1eCMW4uQQ5npqi4QV4QBtWMYJZ xpIztdDYORuIeG1a1zzRabTgtOsP0U75LJhbp2McnZ8ggVmGsG1/ab19WHojDUz9 Dhn9kB5RB3tMwVIb/Cr4tAqb5BkLJvB0Iq6JzWtXvZweYOIxUtQo2mbvwA1nOZvs MjV1/6E2vEmCo+KjWicXdYnoHpu5PRnWP5Y9MB417ijrQUEVkNdbhYFX5dlMTJWN 5Z9liOWYYeXE7MYBscV82+pxO0Tu8M7hrA53AEWqPxygLwjYT6O0YOp6S/FddoWg dQGVC7N4uaZdPu4RIvUqgY3qq5p5ZJvgzfIVsdH58OtMFCX2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW6zjluXat9xeUoUSzn7eQpGBFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTdjZmIzNGQtNzFkYS0z N2QyLWJkOTAtOWJmMzNhY2JiODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKf4+mVr/TdvSDbi4DEwjn3So7X6WUw8aPbcdRmGYS1BzyluCxZi59Om io2Kyrz08GIgINFsWjwMNJ6sGQUQvZfjm1Eth1A0dR7avjXloHK+/AqBb4lScDGu AIETdc+YKOijprWbSCb0eQO9Q+M0ykmq5fWjL3eHsM0Tzerzlbff3ALaKo19WQb3 /3gDkOGYrWN1eUg08N68UDfCQ79opK+9XcOB/L3SppimWhWLoFDjv181d2QC6ZYP UN7G0Z7QS84GIlhAEQ2jgdi4ezprRYlo7P00QQ9ZLP8FAGfV0EAdIzCI0JvUj6q/ dKeOI8hdyGYQ3SH9eUDgNQZpWCw1rmk= -----END CERTIFICATE-----Generated at Thu Nov 5 02:43:17 2026 by rpki-client