$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc2c0c-cdb1-3f69-8a42-0dd561b25d3d.roa File: 28dc2c0c-cdb1-3f69-8a42-0dd561b25d3d.roa (raw, json) Hash identifier: DxgQjuJWMMI1wXtRftBSQyDsP4kjvkr+IRgDVjCI+hM= Subject key identifier: F0:20:42:CD:57:CA:24:FE:55:E1:EA:B7:5B:F3:21:44:5A:D1:A7:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539F1694D5EE911E37BDC740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc2c0c-cdb1-3f69-8a42-0dd561b25d3d.roa Signing time: Mon 28 Sep 2026 16:28:05 +0000 ROA not before: Mon 28 Sep 2026 16:28:05 +0000 ROA not after: Sun 27 Dec 2026 17:28:05 +0000 asID: 22773 IP address blocks: 68.105.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:16:94:d5:ee:91:1e:37:bd:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:28:05 2026 GMT Not After : Dec 27 17:28:05 2026 GMT Subject: CN=e6c0001f-cfbb-4af5-908a-7a1dd607d2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:8d:d7:8a:7f:73:fc:bd:fb:ff:86:9b:90: a7:f5:c7:06:5b:0d:7f:a5:83:f5:b5:c3:00:1f:a2: e6:a4:fb:cc:ed:65:59:37:38:21:1d:23:cf:5a:e1: ad:0f:02:a7:83:fd:ab:b9:af:ab:d2:d3:54:ff:46: 1d:68:f4:10:17:54:8e:d8:a1:09:04:a0:e7:f9:f4: f3:5d:c9:7a:ee:78:a4:39:e4:73:5e:8d:12:66:a6: 37:c6:b6:12:25:dd:55:78:06:45:70:7b:9f:9d:30: 8d:ea:80:42:1b:77:85:b4:5e:a5:1b:3c:90:05:36: a7:63:34:5f:eb:fa:c0:56:fc:29:ff:3e:39:42:09: 1a:62:4d:54:9e:79:76:6e:e9:63:97:c5:c4:06:bf: 1f:e5:2e:e2:90:9c:4b:98:a3:ba:47:c2:94:39:49: e0:1a:54:0d:6a:ff:15:a8:58:ea:21:a0:7f:fa:f6: 29:8f:b4:fa:28:9f:6b:0c:a5:6f:96:83:cc:60:73: 1e:9e:ea:bc:78:01:aa:93:7d:30:e2:f6:db:d3:db: 27:e3:15:70:82:4a:5b:c1:46:71:18:43:af:97:a0: ca:b1:af:5c:97:35:c9:a9:52:82:51:4e:54:cf:53: 8b:1c:e8:26:9f:f6:18:de:38:65:6a:df:26:f7:61: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:20:42:CD:57:CA:24:FE:55:E1:EA:B7:5B:F3:21:44:5A:D1:A7:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc2c0c-cdb1-3f69-8a42-0dd561b25d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.105.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:46:94:3b:c2:ff:00:18:6a:19:4f:03:95:90:18:e0:f8:76: f7:da:a4:ae:8d:39:ca:1f:0b:e9:f3:d9:86:31:d4:67:13:23: a8:d1:e8:29:ac:4c:23:d5:2c:ed:6e:43:10:1f:d9:38:d4:a8: c6:05:08:8e:98:d9:3c:f6:d6:bf:bf:b6:30:d1:79:69:19:28: 2e:dc:6d:3e:c8:07:4c:ae:1b:95:97:dd:73:86:9a:b5:a4:ae: a5:84:82:2f:26:53:54:08:81:29:00:6b:90:96:80:f5:3c:89: b4:a3:62:72:cf:18:06:41:2e:a6:68:21:6d:bc:4f:b6:69:43: 3e:e7:6e:87:cf:fa:d8:f3:44:49:b8:91:0a:e1:81:e3:d7:a9: ae:45:81:14:a3:0f:1e:60:d5:0e:1f:f8:72:61:5e:89:c3:e2: 07:19:e5:ff:8d:d0:dc:67:cf:59:63:9c:ec:2e:81:a1:e3:99: ea:ee:f0:c2:58:7e:33:3a:21:60:95:8b:9f:4a:49:89:31:8f: 8e:13:f9:56:e9:26:c0:2f:6f:43:e5:33:06:58:9e:97:fc:8e: e9:3d:87:8e:a2:99:ee:9d:0b:13:30:f9:05:59:3c:09:27:00: b9:7e:c4:6f:01:86:c4:11:76:e7:8e:42:11:17:bf:50:8c:3d: cb:c8:74:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnxaU1e6RHje9x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjgwNVoXDTI2MTIyNzE3MjgwNVowLzEtMCsGA1UEAxMk ZTZjMDAwMWYtY2ZiYi00YWY1LTkwOGEtN2ExZGQ2MDdkMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6GN14p/c/y9+/+Gm5Cn9ccGWw1/pYP1tcMA H6LmpPvM7WVZNzghHSPPWuGtDwKng/2rua+r0tNU/0YdaPQQF1SO2KEJBKDn+fTz Xcl67nikOeRzXo0SZqY3xrYSJd1VeAZFcHufnTCN6oBCG3eFtF6lGzyQBTanYzRf 6/rAVvwp/z45QgkaYk1Unnl2buljl8XEBr8f5S7ikJxLmKO6R8KUOUngGlQNav8V qFjqIaB/+vYpj7T6KJ9rDKVvloPMYHMenuq8eAGqk30w4vbb09sn4xVwgkpbwUZx GEOvl6DKsa9clzXJqVKCUU5Uz1OLHOgmn/YY3jhlat8m92FE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAgQs1XyiT+VeHqt1vzIURa0afyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhkYzJjMGMtY2RiMS0z ZjY5LThhNDItMGRkNTYxYjI1ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERGmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJGlDvC/wAYahlPA5WQGOD4dvfapK6NOcofC+nz2YYx1GcTI6jR6Cms TCPVLO1uQxAf2TjUqMYFCI6Y2Tz21r+/tjDReWkZKC7cbT7IB0yuG5WX3XOGmrWk rqWEgi8mU1QIgSkAa5CWgPU8ibSjYnLPGAZBLqZoIW28T7ZpQz7nbofP+tjzREm4 kQrhgePXqa5FgRSjDx5g1Q4f+HJhXonD4gcZ5f+N0Nxnz1ljnOwugaHjmeru8MJY fjM6IWCVi59KSYkxj44T+VbpJsAvb0PlMwZYnpf8juk9h46ime6dCxMw+QVZPAkn ALl+xG8BhsQRdueOQhEXv1CMPcvIdB4= -----END CERTIFICATE-----Generated at Tue Sep 29 19:45:57 2026 by rpki-client