$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa File: 28f48885-1529-3cc6-99f5-c11c8192cce8.roa (raw, json) Hash identifier: Wyv1AoWnNXbOCO/YebP9jXe7a3vYfzOtyuRwL7zlDzE= Subject key identifier: 72:4A:59:83:D4:DA:16:96:F2:B6:92:8B:0F:3E:29:50:45:BB:E9:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F94D313CF2E406BCCBC667B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:13:cf:2e:40:6b:cc:bc:66:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=84a75f14-39cd-4445-8996-5acd049cab58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:21:7f:e4:ff:1f:0d:ee:36:33:f4:44:df: 44:e6:16:e9:30:89:de:5d:64:64:3c:9e:74:a5:de: 1c:77:27:58:e2:90:37:4f:40:f5:4d:74:f2:c3:f1: a8:ee:6e:61:7a:c1:1f:07:d1:6f:39:f7:6e:a5:2e: 5a:57:da:1b:41:42:3e:f4:bc:e1:7f:46:21:7f:db: 20:4c:6c:d8:2d:57:56:48:bf:64:25:f3:a7:75:c5: a0:72:e0:56:55:d5:c1:cb:81:91:e5:3f:83:94:63: 2a:1d:60:ed:2e:10:a4:06:bc:57:26:eb:cf:cb:bb: d9:e4:9a:b1:8e:44:4b:4e:b8:5a:1a:44:39:77:07: a8:03:bc:6f:7b:98:d1:66:77:71:28:3d:62:3f:d4: ac:22:e0:8c:ed:03:18:62:70:4e:52:5e:c7:65:23: 0b:49:e3:9f:05:05:c0:3b:58:6c:ff:ed:5f:d8:2a: 11:93:1a:4c:ed:aa:18:d7:0f:0c:40:af:4a:50:32: b9:40:29:e2:07:f7:f6:2d:4b:b6:f4:7c:b6:7f:82: 8a:04:69:17:86:e8:3c:bd:99:8a:da:e3:c5:b9:8e: 01:a8:f9:37:a7:91:93:9c:90:35:a2:e7:6f:7b:aa: f2:24:25:fa:7e:78:db:d0:b8:15:24:ff:9e:77:23: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4A:59:83:D4:DA:16:96:F2:B6:92:8B:0F:3E:29:50:45:BB:E9:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:66:2a:ea:27:74:85:5f:cd:47:47:f1:09:64:48:ee:84:52: fc:40:35:74:1b:d1:bf:a9:14:da:70:cc:e8:aa:a9:0d:61:5b: 0c:ee:2a:1a:5b:b5:87:94:fe:ed:23:72:b1:a3:98:39:9d:66: a7:da:1e:9d:c8:46:99:d9:a4:fb:a5:bf:09:1c:c9:0a:15:56: 64:d2:36:b2:e5:5c:11:d8:82:72:71:e8:e8:57:bb:20:10:3c: 02:a9:35:36:3c:d8:bb:f0:e4:f7:8c:fd:83:14:d3:8d:ef:f1: 0f:06:f9:20:e5:02:c0:ba:50:fc:04:36:f6:d5:f1:5d:3a:c0: cf:f3:f2:b4:43:a2:4e:84:eb:7c:13:59:fd:75:e6:92:99:7c: 38:fe:91:b2:2d:1f:5a:b5:87:cf:ad:c0:41:92:0c:9f:d7:75: 73:77:c8:44:bd:e2:6e:8d:a7:5b:0e:fb:ca:c2:90:7d:59:da: ca:b8:66:14:c2:8f:6d:7f:00:02:5f:f5:3a:9c:c7:06:37:e8: 74:67:d2:7c:d9:8e:1a:c7:46:f4:1e:d1:f1:7f:17:8e:51:4f: de:f4:71:d5:8d:00:55:9c:40:b3:3d:6c:cf:ab:78:84:89:b3: 54:19:59:02:08:8e:08:c4:5b:36:ae:e0:3d:76:6b:6a:f0:88: 12:e9:03:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0xPPLkBrzLxme0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODRhNzVmMTQtMzljZC00NDQ1LTg5OTYtNWFjZDA0OWNhYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2ghf+T/Hw3uNjP0RN9E5hbpMIneXWRkPJ50 pd4cdydY4pA3T0D1TXTyw/Go7m5hesEfB9FvOfdupS5aV9obQUI+9Lzhf0Yhf9sg TGzYLVdWSL9kJfOndcWgcuBWVdXBy4GR5T+DlGMqHWDtLhCkBrxXJuvPy7vZ5Jqx jkRLTrhaGkQ5dweoA7xve5jRZndxKD1iP9SsIuCM7QMYYnBOUl7HZSMLSeOfBQXA O1hs/+1f2CoRkxpM7aoY1w8MQK9KUDK5QCniB/f2LUu29Hy2f4KKBGkXhug8vZmK 2uPFuY4BqPk3p5GTnJA1oudve6ryJCX6fnjb0LgVJP+edyNReQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJKWYPU2haW8raSiw8+KVBFu+kbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhmNDg4ODUtMTUyOS0z Y2M2LTk5ZjUtYzExYzgxOTJjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpmKuondIVfzUdH8QlkSO6EUvxANXQb0b+pFNpwzOiqqQ1hWwzuKhpb tYeU/u0jcrGjmDmdZqfaHp3IRpnZpPulvwkcyQoVVmTSNrLlXBHYgnJx6OhXuyAQ PAKpNTY82Lvw5PeM/YMU043v8Q8G+SDlAsC6UPwENvbV8V06wM/z8rRDok6E63wT Wf115pKZfDj+kbItH1q1h8+twEGSDJ/XdXN3yES94m6Np1sO+8rCkH1Z2sq4ZhTC j21/AAJf9TqcxwY36HRn0nzZjhrHRvQe0fF/F45RT970cdWNAFWcQLM9bM+reISJ s1QZWQIIjgjEWzau4D12a2rwiBLpA7o= -----END CERTIFICATE-----Generated at Wed Nov 4 19:02:01 2026 by rpki-client