$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21b1b54b-1dee-32df-b7b7-68e08bd1941b.roa File: 21b1b54b-1dee-32df-b7b7-68e08bd1941b.roa (raw, json) Hash identifier: V1tgyk+oeODSrAZ/zHomiz17zyWj6zaFV96QZcgtleo= Subject key identifier: BF:D7:94:0A:56:C7:FC:C8:FC:03:2C:48:51:E5:54:7F:C8:7A:74:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32C46E07FD516B7A37CC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21b1b54b-1dee-32df-b7b7-68e08bd1941b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.226.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c4:6e:07:fd:51:6b:7a:37:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=41dc5a20-3c04-4ba1-a8b5-5826f7a3e38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:38:4e:4c:9b:89:2c:cd:c6:c0:15:ed:f6: 49:ca:e0:4b:48:9e:cb:ca:c9:83:de:ef:f5:4f:5d: c1:b9:aa:55:55:20:54:97:b0:3e:04:cd:c2:80:64: cb:3e:bc:ce:35:cd:3e:7d:fa:f2:a7:7d:ae:6d:c5: 7b:42:f0:f8:02:6a:36:92:d7:b6:fa:b3:51:b3:78: fd:c7:3d:be:a6:a4:c3:b6:33:c1:b8:d7:49:ab:fe: 7b:91:27:72:e4:57:92:db:c7:62:8a:ea:d0:fd:12: 62:1f:cf:b1:a4:fd:2a:03:ad:ab:70:b9:35:93:8e: 1d:f5:92:77:bb:2a:8a:2d:59:97:f7:34:77:dc:61: db:5a:8f:a5:dc:4b:77:49:a7:2a:2b:ab:a4:01:3a: 3f:11:77:07:ee:75:c2:3b:3b:42:18:69:be:2d:6c: af:78:6b:25:70:dd:9e:02:06:93:86:64:2c:9b:af: ed:2a:de:57:42:98:e4:ec:66:48:28:8f:8e:f6:56: e8:cc:77:ee:f4:cc:0e:cd:f5:10:75:59:f5:2e:fe: ee:8f:19:d9:29:21:a4:17:c8:67:3b:c0:e5:e1:90: 93:b6:79:c8:de:c7:d3:44:1c:06:2b:2e:a6:74:0e: 68:5a:f9:30:44:43:a7:4b:8e:e3:4e:96:8d:db:65: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D7:94:0A:56:C7:FC:C8:FC:03:2C:48:51:E5:54:7F:C8:7A:74:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21b1b54b-1dee-32df-b7b7-68e08bd1941b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a4:ba:9a:91:56:39:07:28:ed:87:7f:ea:af:6c:c2:fa:65: eb:72:07:de:ce:26:d1:ec:0d:df:dc:3a:d9:32:f0:52:b7:f5: 95:d0:de:5d:05:07:6c:5d:e0:4c:31:28:3d:3a:e5:46:41:3e: 7c:d2:d6:aa:52:30:cc:a4:48:1d:ce:6a:0b:98:d6:65:f2:f4: a1:8b:d2:c5:15:33:f3:fc:27:15:69:89:8b:07:fa:70:6f:e3: b8:ed:2c:89:52:8c:f7:28:42:f5:e4:2e:93:d9:c0:7f:ee:c8: 83:c7:46:7d:95:23:bf:5d:73:b4:8a:d4:4c:09:d9:46:87:3b: cf:ef:2e:bf:8c:6f:fe:67:bf:b3:99:ea:6c:cb:57:42:dd:c4: 99:02:cd:a7:38:6c:e4:6e:85:99:15:67:c3:c2:04:f2:20:d1: 37:49:a8:cb:b2:12:43:d5:2f:2d:26:cc:33:2a:eb:c7:89:2f: 2c:4c:59:d9:65:1c:33:17:5e:68:49:f2:a6:d9:ca:f5:e5:c8: 9e:21:ac:d4:9a:75:14:3a:65:84:b2:84:5b:eb:1a:fb:8d:b9: cc:4c:f1:d8:7d:4e:b1:0c:b3:53:7d:35:4b:48:3d:b3:1f:ba: 62:4f:1b:50:fc:85:95:b9:a4:32:a4:b9:ed:c3:4a:9d:42:6b: cd:03:7e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsRuB/1Ra3o3zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDFkYzVhMjAtM2MwNC00YmExLWE4YjUtNTgyNmY3YTNlMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QM4TkybiSzNxsAV7fZJyuBLSJ7LysmD3u/1 T13BuapVVSBUl7A+BM3CgGTLPrzONc0+ffryp32ubcV7QvD4Amo2kte2+rNRs3j9 xz2+pqTDtjPBuNdJq/57kSdy5FeS28diiurQ/RJiH8+xpP0qA62rcLk1k44d9ZJ3 uyqKLVmX9zR33GHbWo+l3Et3SacqK6ukATo/EXcH7nXCOztCGGm+LWyveGslcN2e AgaThmQsm6/tKt5XQpjk7GZIKI+O9lbozHfu9MwOzfUQdVn1Lv7ujxnZKSGkF8hn O8Dl4ZCTtnnI3sfTRBwGKy6mdA5oWvkwREOnS47jTpaN22XIIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/XlApWx/zI/AMsSFHlVH/IenTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFiMWI1NGItMWRlZS0z MmRmLWI3YjctNjhlMDhiZDE5NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROJdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2kupqRVjkHKO2Hf+qvbML6ZetyB97OJtHsDd/cOtky8FK39ZXQ3l0F B2xd4EwxKD065UZBPnzS1qpSMMykSB3OaguY1mXy9KGL0sUVM/P8JxVpiYsH+nBv 47jtLIlSjPcoQvXkLpPZwH/uyIPHRn2VI79dc7SK1EwJ2UaHO8/vLr+Mb/5nv7OZ 6mzLV0LdxJkCzac4bORuhZkVZ8PCBPIg0TdJqMuyEkPVLy0mzDMq68eJLyxMWdll HDMXXmhJ8qbZyvXlyJ4hrNSadRQ6ZYSyhFvrGvuNucxM8dh9TrEMs1N9NUtIPbMf umJPG1D8hZW5pDKkue3DSp1Ca80Dfv0= -----END CERTIFICATE-----Generated at Tue Nov 3 22:40:44 2026 by rpki-client