$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28520925-aa54-306c-8b04-844b6145cf3e.roa File: 28520925-aa54-306c-8b04-844b6145cf3e.roa (raw, json) Hash identifier: tlwrjjaKoEn4+0tfnanyxAohTLSGsASLJ0iYRLadyyE= Subject key identifier: 03:67:EF:71:AF:4A:38:2A:13:85:D7:0F:05:59:8F:B1:26:16:60:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F49728EA600A8C82802FC3380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28520925-aa54-306c-8b04-844b6145cf3e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.108.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:8e:a6:00:a8:c8:28:02:fc:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a26bdf2-3b7b-4515-bdc6-e474e4eb178f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9d:f2:68:f4:80:0a:a1:fb:92:19:6d:af:d8: a4:1b:d3:87:bd:0b:4f:60:f8:b2:19:0e:b3:64:98: 40:a5:94:64:a5:dc:44:47:88:23:d1:5e:dc:da:77: e1:06:f7:24:18:54:9c:31:74:e4:72:f8:e7:6f:77: a9:42:66:00:ef:00:5a:af:e5:16:e4:bd:03:12:30: 0a:7c:51:fc:33:0f:a9:84:56:32:d1:72:9e:8d:a7: 01:ab:36:f2:89:e6:8a:97:6a:37:d9:55:47:c4:b1: e5:5a:f5:5b:c4:38:7b:95:14:04:58:26:8a:4e:b6: e3:e7:08:93:8b:59:44:4b:e0:1b:28:f7:f6:87:f2: 02:6a:26:0c:d9:0d:1f:77:6a:de:d9:29:57:dd:1d: cb:28:67:56:e5:50:a5:ea:3a:d3:03:5c:33:0c:d7: 85:37:40:77:84:3e:8d:18:fd:29:6e:e6:5f:f0:4f: 6c:3e:3a:92:0c:6d:37:9b:de:35:43:11:08:82:d1: a9:7f:71:ad:71:18:14:ee:55:6e:5a:f0:a8:e3:20: e4:3f:d0:9d:07:12:1d:1e:b8:93:4c:28:f4:f1:4e: 03:3c:f1:65:20:04:39:61:db:0e:f4:a1:9d:37:be: 3a:a0:e1:a9:41:7a:e3:7f:62:46:8d:ba:e7:09:b0: 2b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:EF:71:AF:4A:38:2A:13:85:D7:0F:05:59:8F:B1:26:16:60:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28520925-aa54-306c-8b04-844b6145cf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e7:97:c6:93:33:af:cc:8e:6a:89:0b:d7:87:72:f9:83:f1: df:ee:b0:f7:86:8a:b1:71:52:de:00:39:03:3f:7a:cd:da:51: 34:c6:e0:e1:c8:3c:39:a1:fa:5b:f4:cb:a8:86:ed:f0:cf:75: 88:1f:51:5e:0c:a1:2d:bb:a4:93:65:50:8c:81:b3:ec:16:1a: 73:0e:07:70:ae:b9:07:96:69:66:c4:f0:64:fc:d4:2a:99:03: 76:2b:6f:8e:54:da:88:d9:bd:3f:e7:0d:a6:67:1b:f4:5a:70: 2d:cf:3a:94:b7:b7:93:5e:95:6a:34:57:1f:11:54:0a:0c:51: 99:70:dd:f7:5d:65:d6:17:77:a3:09:c1:c1:17:ba:eb:9f:85: b0:94:ad:e8:d8:05:7e:39:43:43:63:87:89:17:41:14:09:dd: cd:93:9a:17:18:ff:31:44:9b:44:e3:9d:77:2e:93:99:fb:39: 66:51:77:c6:49:d4:b7:a6:25:5d:a7:00:42:e0:6f:b8:29:2a: 7f:9e:6b:5c:e7:10:0e:58:31:82:79:96:94:20:29:43:fb:5b: 75:93:48:29:17:a4:71:c4:e5:a6:17:a9:0f:6a:14:b7:37:a8: ac:ff:d5:b7:5b:ca:2a:74:81:b9:43:db:2c:b1:e8:45:75:fd: d3:51:9d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jco6mAKjIKAL8M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGEyNmJkZjItM2I3Yi00NTE1LWJkYzYtZTQ3NGU0ZWIxNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg53yaPSACqH7khltr9ikG9OHvQtPYPiyGQ6z ZJhApZRkpdxER4gj0V7c2nfhBvckGFScMXTkcvjnb3epQmYA7wBar+UW5L0DEjAK fFH8Mw+phFYy0XKejacBqzbyieaKl2o32VVHxLHlWvVbxDh7lRQEWCaKTrbj5wiT i1lES+AbKPf2h/ICaiYM2Q0fd2re2SlX3R3LKGdW5VCl6jrTA1wzDNeFN0B3hD6N GP0pbuZf8E9sPjqSDG03m941QxEIgtGpf3GtcRgU7lVuWvCo4yDkP9CdBxIdHriT TCj08U4DPPFlIAQ5YdsO9KGdN746oOGpQXrjf2JGjbrnCbArgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANn73GvSjgqE4XXDwVZj7EmFmBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjg1MjA5MjUtYWE1NC0z MDZjLThiMDQtODQ0YjYxNDVjZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbnl8aTM6/MjmqJC9eHcvmD8d/usPeGirFxUt4AOQM/es3aUTTG4OHI PDmh+lv0y6iG7fDPdYgfUV4MoS27pJNlUIyBs+wWGnMOB3CuuQeWaWbE8GT81CqZ A3Yrb45U2ojZvT/nDaZnG/RacC3POpS3t5NelWo0Vx8RVAoMUZlw3fddZdYXd6MJ wcEXuuufhbCUrejYBX45Q0Njh4kXQRQJ3c2TmhcY/zFEm0TjnXcuk5n7OWZRd8ZJ 1LemJV2nAELgb7gpKn+ea1znEA5YMYJ5lpQgKUP7W3WTSCkXpHHE5aYXqQ9qFLc3 qKz/1bdbyip0gblD2yyx6EV1/dNRnaY= -----END CERTIFICATE-----Generated at Fri Oct 30 20:25:41 2026 by rpki-client