$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c411814-ebc7-33b3-8dd4-41a8a93b9c27.roa File: 1c411814-ebc7-33b3-8dd4-41a8a93b9c27.roa (raw, json) Hash identifier: PD+4nfTWNjj8BphYZHtRNbppmgEQTAOzWLzXKKA+K6M= Subject key identifier: A5:59:96:A8:A7:29:BB:83:DB:84:81:64:AB:82:30:12:F8:DC:90:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F49728F0A4914043A6D31B000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c411814-ebc7-33b3-8dd4-41a8a93b9c27.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.108.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:8f:0a:49:14:04:3a:6d:31:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3651f19d-a399-4e65-8e4a-8716a5f7a844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:49:68:5c:f5:e5:89:fc:1e:3e:38:7e:29: 73:18:e7:a0:d0:0b:1a:8d:b0:5b:3e:92:c9:f8:d4: 6e:33:91:22:d2:34:53:47:26:30:48:b8:63:d4:d8: df:1e:37:c2:d5:6a:aa:3b:41:b0:89:5c:1c:07:3e: 41:2f:74:78:bc:13:40:32:c2:7c:e5:11:f8:d6:01: 32:09:da:6c:a8:1e:1a:61:b7:80:22:c9:b7:28:8e: 84:8b:4b:d2:4a:da:27:c4:57:3f:71:67:f4:66:4f: 01:f9:b0:75:c7:03:b8:7e:36:85:13:8b:33:a0:9f: 2d:c3:bb:2a:9a:20:62:ae:91:40:66:92:31:69:a2: 3c:dc:0f:51:05:d0:65:18:bc:af:e7:b5:37:60:8a: 4c:3b:73:65:a6:eb:c1:43:e1:75:bc:82:12:2e:ad: 80:7c:28:d2:42:8c:dd:ab:6e:be:ca:59:3f:27:58: f9:5c:df:df:29:54:da:b6:34:c9:1d:bd:ef:bf:1d: 45:32:8a:18:a2:e9:1f:92:b0:92:ec:e3:1a:5a:3d: a5:37:cd:cf:d5:eb:44:47:61:b5:ea:25:52:e2:60: 99:ce:5c:93:14:07:b3:38:81:68:b7:c9:b5:1a:5e: 9b:89:be:88:9e:d8:fb:c7:0a:e1:11:c7:1d:79:13: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:59:96:A8:A7:29:BB:83:DB:84:81:64:AB:82:30:12:F8:DC:90:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c411814-ebc7-33b3-8dd4-41a8a93b9c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:dd:fb:3d:3d:b2:60:67:9f:e6:bb:5c:3f:40:6e:7c:56:16: 58:81:6b:22:5a:0b:e8:14:1d:8a:cd:c7:f2:43:0b:f3:2e:bb: 58:6e:05:e6:4f:b4:04:b7:78:b7:bd:b2:7b:64:e8:4e:a2:0e: da:06:de:76:fa:25:77:47:65:8d:35:16:4c:5a:2b:f2:4a:05: 35:9e:6b:6c:e5:3d:b6:6f:ac:24:bf:4f:71:35:29:f5:71:be: 8c:1a:07:aa:6d:77:8d:a1:dd:ff:16:80:e9:1a:bf:22:6e:15: 12:ca:09:58:16:fd:28:bf:aa:b9:c4:8b:d8:ba:a3:03:f6:94: 94:94:a8:87:06:84:31:9e:ce:81:11:54:ae:23:37:b9:8e:8f: 83:53:f0:6d:95:c7:a2:ce:ce:02:27:96:46:23:27:07:19:ad: 0d:41:e1:51:b0:4a:de:b4:23:2a:7a:8f:d5:5d:7b:5e:ba:2a: 87:d1:25:52:2e:6a:5b:9a:4b:d8:60:94:8c:6d:55:22:f7:e1: 81:2f:99:8c:e0:6c:ac:f6:2d:7f:4d:64:95:6a:32:ec:07:24: c9:da:c5:b1:b4:22:06:2c:2e:12:fd:0e:8e:c3:ca:38:a6:6a: ab:fb:dc:a5:50:d1:10:9b:99:13:9f:29:c7:43:a8:12:6b:1f: 06:49:4d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jco8KSRQEOm0xsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzY1MWYxOWQtYTM5OS00ZTY1LThlNGEtODcxNmE1ZjdhODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lJJaFz15Yn8Hj44filzGOeg0AsajbBbPpLJ +NRuM5Ei0jRTRyYwSLhj1NjfHjfC1WqqO0GwiVwcBz5BL3R4vBNAMsJ85RH41gEy CdpsqB4aYbeAIsm3KI6Ei0vSStonxFc/cWf0Zk8B+bB1xwO4fjaFE4szoJ8tw7sq miBirpFAZpIxaaI83A9RBdBlGLyv57U3YIpMO3NlpuvBQ+F1vIISLq2AfCjSQozd q26+ylk/J1j5XN/fKVTatjTJHb3vvx1FMooYoukfkrCS7OMaWj2lN83P1etER2G1 6iVS4mCZzlyTFAezOIFot8m1Gl6bib6Intj7xwrhEccdeRP3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVZlqinKbuD24SBZKuCMBL43JAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWM0MTE4MTQtZWJjNy0z M2IzLThkZDQtNDFhOGE5M2I5YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnd+z09smBnn+a7XD9AbnxWFliBayJaC+gUHYrNx/JDC/Muu1huBeZP tAS3eLe9sntk6E6iDtoG3nb6JXdHZY01FkxaK/JKBTWea2zlPbZvrCS/T3E1KfVx vowaB6ptd42h3f8WgOkavyJuFRLKCVgW/Si/qrnEi9i6owP2lJSUqIcGhDGezoER VK4jN7mOj4NT8G2Vx6LOzgInlkYjJwcZrQ1B4VGwSt60Iyp6j9Vde166KofRJVIu aluaS9hglIxtVSL34YEvmYzgbKz2LX9NZJVqMuwHJMnaxbG0IgYsLhL9Do7Dyjim aqv73KVQ0RCbmROfKcdDqBJrHwZJTQQ= -----END CERTIFICATE-----Generated at Wed Oct 28 18:27:50 2026 by rpki-client