$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ebdf221-a119-3dc1-a525-7c090682e1d2.roa File: 1ebdf221-a119-3dc1-a525-7c090682e1d2.roa (raw, json) Hash identifier: ZryHvfGgc1F+mp8afgtLsZh93MhhEwycJDi2IyFs0Zs= Subject key identifier: 86:1F:99:98:10:16:BC:53:45:14:24:D0:C2:BA:3A:A5:35:EC:61:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539EFABCC2AF5C3E24E18700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ebdf221-a119-3dc1-a525-7c090682e1d2.roa Signing time: Mon 28 Sep 2026 16:27:52 +0000 ROA not before: Mon 28 Sep 2026 16:27:52 +0000 ROA not after: Sun 27 Dec 2026 17:27:52 +0000 asID: 22773 IP address blocks: 68.99.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:fa:bc:c2:af:5c:3e:24:e1:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:27:52 2026 GMT Not After : Dec 27 17:27:52 2026 GMT Subject: CN=73fc0ae2-3bd0-41aa-bdf8-ed2439be03cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:14:e5:29:75:ad:65:9b:cc:69:74:c9:f3: 86:8b:02:84:b0:96:04:6f:ae:24:10:6f:be:fa:a4: 26:10:ae:31:a3:b2:4e:51:01:d9:14:08:8c:ab:12: 95:25:ba:5d:d1:ee:26:7d:d3:f2:29:83:f5:5b:0a: 6a:36:99:a2:9b:6a:b7:1a:bd:1a:17:3c:0e:77:9f: 0e:55:e1:73:d1:73:03:96:cb:8b:0a:a7:fc:09:94: 63:2d:75:ec:3d:40:a5:6e:eb:5c:ee:9b:e8:a8:d7: df:07:a1:a2:98:70:8d:60:bb:d8:89:fd:0a:f2:85: 6f:87:92:15:bc:77:1e:3e:d5:03:93:da:bd:aa:82: 00:d8:4e:c4:05:f8:d4:8a:f0:10:9f:f9:59:e7:85: 20:19:07:9f:5b:82:23:cd:d1:91:72:1f:95:2e:0e: 59:c0:52:fe:3b:fe:e9:6b:b9:37:aa:2f:a6:69:75: cb:9c:da:cf:a6:d7:e2:b1:4e:30:48:e9:4b:b0:9f: 60:7f:0d:bd:af:f1:af:f6:59:b6:9c:34:2c:8b:22: d5:9b:91:aa:3d:ee:30:f1:3b:db:45:d7:e0:44:46: c6:5c:fc:b8:a3:e7:bb:9b:09:f8:65:a7:db:63:55: 68:ec:f4:92:7b:57:28:9d:4c:c1:09:90:43:e6:7e: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:99:98:10:16:BC:53:45:14:24:D0:C2:BA:3A:A5:35:EC:61:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ebdf221-a119-3dc1-a525-7c090682e1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d4:49:bd:b0:0c:11:00:86:fd:22:f0:53:42:f4:7f:e8:34: cb:29:3a:20:cf:51:b3:c7:19:f3:61:e8:71:f3:a9:df:6f:5f: 9c:81:e3:97:13:6f:0a:2d:12:af:39:12:dd:4c:8c:d5:9e:77: 55:8a:62:6b:db:24:70:6c:f2:00:71:fd:73:5b:33:bd:71:09: 53:30:bb:57:67:48:74:27:d5:b2:49:f1:1f:a3:39:7c:d3:87: 6c:2d:57:86:66:1e:1c:05:6a:4b:34:0d:dd:a5:a5:2f:c3:4f: 48:ba:0f:1b:a8:5e:aa:3e:87:5a:29:b6:03:91:73:17:86:e1: 62:e9:d0:43:e4:fb:ef:a9:26:cc:da:55:71:7a:36:f1:4d:c5: 12:59:71:db:4e:b9:d0:31:a8:34:56:a5:6d:61:db:65:79:03: 18:f7:4d:2d:33:de:f5:54:77:b3:7e:bf:4d:c5:a0:73:1d:8d: b8:f0:3c:8f:da:8d:7e:4b:53:0e:6f:7d:d7:7f:e5:57:fd:b8: 26:d4:2e:be:cb:e1:6d:8d:78:87:c1:d5:b6:80:84:bd:f3:d9: bd:3b:2c:28:14:c4:2b:51:40:5c:fe:41:5c:25:d4:bf:01:21: 01:24:50:c2:1a:67:64:4c:43:0d:93:9b:17:35:dc:eb:a5:ac: c1:2c:24:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tnvq8wq9cPiThhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mjc1MloXDTI2MTIyNzE3Mjc1MlowLzEtMCsGA1UEAxMk NzNmYzBhZTItM2JkMC00MWFhLWJkZjgtZWQyNDM5YmUwM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOQU5Sl1rWWbzGl0yfOGiwKEsJYEb64kEG++ +qQmEK4xo7JOUQHZFAiMqxKVJbpd0e4mfdPyKYP1WwpqNpmim2q3Gr0aFzwOd58O VeFz0XMDlsuLCqf8CZRjLXXsPUClbutc7pvoqNffB6GimHCNYLvYif0K8oVvh5IV vHcePtUDk9q9qoIA2E7EBfjUivAQn/lZ54UgGQefW4IjzdGRch+VLg5ZwFL+O/7p a7k3qi+maXXLnNrPptfisU4wSOlLsJ9gfw29r/Gv9lm2nDQsiyLVm5GqPe4w8Tvb RdfgREbGXPy4o+e7mwn4ZafbY1Vo7PSSe1conUzBCZBD5n7q8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYfmZgQFrxTRRQk0MK6OqU17GFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWViZGYyMjEtYTExOS0z ZGMxLWE1MjUtN2MwOTA2ODJlMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERGNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDUSb2wDBEAhv0i8FNC9H/oNMspOiDPUbPHGfNh6HHzqd9vX5yB45cT bwotEq85Et1MjNWed1WKYmvbJHBs8gBx/XNbM71xCVMwu1dnSHQn1bJJ8R+jOXzT h2wtV4ZmHhwFaks0Dd2lpS/DT0i6DxuoXqo+h1optgORcxeG4WLp0EPk+++pJsza VXF6NvFNxRJZcdtOudAxqDRWpW1h22V5Axj3TS0z3vVUd7N+v03FoHMdjbjwPI/a jX5LUw5vfdd/5Vf9uCbULr7L4W2NeIfB1baAhL3z2b07LCgUxCtRQFz+QVwl1L8B IQEkUMIaZ2RMQw2Tmxc13OulrMEsJHk= -----END CERTIFICATE-----Generated at Sat Oct 3 14:51:39 2026 by rpki-client