$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa File: 21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa (raw, json) Hash identifier: eYtvJKf4CU1zjstKPyr+nu3fvAFMAt6k2jfZFRgjjXA= Subject key identifier: E1:EF:CC:3C:4D:10:DF:57:07:57:BF:F8:01:94:4F:5A:CE:BA:98:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3313483F92B47D4825DE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:13:48:3f:92:b4:7d:48:25:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=83eb8016-4d85-4d73-a4aa-cd18cab5fa18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2c:e9:58:46:be:82:20:73:b7:e9:e0:bc:ef: c3:04:7a:fa:55:ac:72:4e:36:ea:5e:63:0d:bf:52: 5a:29:99:f1:3a:f3:b6:cf:35:bb:74:89:6b:ce:b3: 7c:11:df:c1:d2:ab:68:00:90:81:08:41:4e:e5:7d: 95:6a:8c:f9:74:75:b8:fe:ec:48:81:4d:6c:24:da: 8d:4c:17:69:7d:09:7c:80:4e:c7:e0:42:82:f9:18: 0e:e6:f2:5c:66:5b:25:86:51:a2:55:86:11:55:17: 34:b7:23:9a:f0:5e:b7:f5:64:54:e8:8b:e5:cd:ae: 82:81:b8:34:63:94:00:6d:0b:44:5e:38:b2:1e:0e: 7e:fe:1d:d4:8a:37:b9:0b:c3:58:70:c5:48:f5:25: 42:c4:33:fd:01:66:ea:93:d1:b6:dc:8f:d7:ff:d0: 58:da:d1:64:41:89:5d:8d:26:be:d4:e3:d1:dc:3f: 97:17:64:37:12:c7:a0:05:14:7f:48:33:ef:a1:b7: ee:14:c2:b8:46:ab:15:79:ad:65:5d:90:3a:99:df: d2:88:cb:2f:be:6d:41:bc:55:fc:cf:dc:41:25:f2: c2:3b:aa:1b:3b:77:0c:95:db:e3:37:76:e1:df:40: 40:ec:e5:3d:31:e4:d0:2f:be:50:00:e9:58:31:f6: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:CC:3C:4D:10:DF:57:07:57:BF:F8:01:94:4F:5A:CE:BA:98:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b9:0b:5f:cc:61:65:b4:41:5a:3d:68:17:ed:f7:01:e8:7e: 94:d2:fd:2b:7e:c8:99:d4:ac:a0:ea:7a:7c:a9:e2:fd:51:49: c6:a1:f4:ff:75:01:ab:ce:4c:d7:d8:41:d4:20:64:3b:a6:f3: 72:3e:67:4b:0d:66:44:55:c0:bc:de:cf:9a:a9:78:44:e6:8c: b2:41:e0:42:a7:ce:81:01:a8:a0:ec:20:83:f3:f8:1e:0b:81: fb:e1:92:68:90:d0:33:48:70:c0:c1:e9:cc:95:57:09:fa:92: ae:85:ef:50:e7:7f:4c:95:d7:88:9d:79:85:57:db:be:78:de: 03:1c:1e:cc:2b:21:60:5a:d4:c5:4f:55:97:4c:65:7d:73:e2: 56:04:21:f1:ca:8b:49:cf:8c:5f:35:6d:d1:74:69:10:5b:13: c9:1e:b4:cf:43:6f:3c:03:b6:9c:a2:6f:e2:b1:94:fe:eb:f9: 53:28:31:de:a2:02:11:1e:96:bd:4d:89:61:ad:65:85:d3:b7: 1c:7d:f8:2f:c5:25:e2:57:1d:e2:65:38:e6:cd:43:26:92:cd: fa:0c:b0:6b:e2:ca:b0:3d:39:7c:7f:e5:8d:2f:ff:1b:6b:04: ea:a4:7d:e3:0f:3c:32:eb:b5:2d:bb:4e:b5:ca:b1:51:33:b2: 49:b1:f3:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxNIP5K0fUgl3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ODNlYjgwMTYtNGQ4NS00ZDczLWE0YWEtY2QxOGNhYjVmYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSzpWEa+giBzt+ngvO/DBHr6VaxyTjbqXmMN v1JaKZnxOvO2zzW7dIlrzrN8Ed/B0qtoAJCBCEFO5X2Vaoz5dHW4/uxIgU1sJNqN TBdpfQl8gE7H4EKC+RgO5vJcZlslhlGiVYYRVRc0tyOa8F639WRU6Ivlza6Cgbg0 Y5QAbQtEXjiyHg5+/h3Uije5C8NYcMVI9SVCxDP9AWbqk9G23I/X/9BY2tFkQYld jSa+1OPR3D+XF2Q3EsegBRR/SDPvobfuFMK4RqsVea1lXZA6md/SiMsvvm1BvFX8 z9xBJfLCO6obO3cMldvjN3bh30BA7OU9MeTQL75QAOlYMfamlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHvzDxNEN9XB1e/+AGUT1rOupjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFmZjg2ZTAtZWRkNS0z Njk4LWFmOWMtYmZkZTk0ZGI0YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRObOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW5C1/MYWW0QVo9aBft9wHofpTS/St+yJnUrKDqenyp4v1RScah9P91 AavOTNfYQdQgZDum83I+Z0sNZkRVwLzez5qpeETmjLJB4EKnzoEBqKDsIIPz+B4L gfvhkmiQ0DNIcMDB6cyVVwn6kq6F71Dnf0yV14ideYVX27543gMcHswrIWBa1MVP VZdMZX1z4lYEIfHKi0nPjF81bdF0aRBbE8ketM9DbzwDtpyib+KxlP7r+VMoMd6i AhEelr1NiWGtZYXTtxx9+C/FJeJXHeJlOObNQyaSzfoMsGviyrA9OXx/5Y0v/xtr BOqkfeMPPDLrtS27TrXKsVEzskmx834= -----END CERTIFICATE-----Generated at Wed Nov 4 20:35:36 2026 by rpki-client