$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2afc830d-76db-349e-823c-d36661995e91.roa File: 2afc830d-76db-349e-823c-d36661995e91.roa (raw, json) Hash identifier: PmIx8ayjDg1idHZwtU8KAJV9eHe4OGg85z3MmBdDRXE= Subject key identifier: 98:33:A8:E4:F6:1C:CD:45:1E:10:A5:EA:F2:CF:B1:00:2A:A1:1D:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539F9B08289088261946FB18 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2afc830d-76db-349e-823c-d36661995e91.roa Signing time: Mon 28 Sep 2026 16:29:08 +0000 ROA not before: Mon 28 Sep 2026 16:29:08 +0000 ROA not after: Sun 27 Dec 2026 17:29:08 +0000 asID: 22773 IP address blocks: 68.227.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:9b:08:28:90:88:26:19:46:fb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:29:08 2026 GMT Not After : Dec 27 17:29:08 2026 GMT Subject: CN=ed80c074-1306-4ee3-8201-aa87bf74379e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:5f:4e:a9:88:31:79:47:06:80:f6:46:3b: fa:c4:b8:3d:11:72:1d:5a:3c:88:eb:65:c6:1f:35: 1b:c7:33:b1:10:70:bb:ca:b8:ce:2a:b8:74:4f:55: c0:63:8f:1a:e8:95:8f:74:fd:43:a2:81:fe:95:0c: 2f:b9:2e:4b:b8:c7:0d:7f:48:d4:c1:96:20:ae:f0: 60:88:62:2d:c2:4d:b2:d3:02:41:aa:51:d0:ea:fe: b7:f3:11:f2:22:19:79:f7:2e:7c:d1:12:65:02:fd: 51:59:32:fb:3c:44:4c:ba:56:44:13:ee:ee:90:00: b3:54:e4:4a:7f:1f:c2:34:f5:52:33:3c:37:ec:e7: ca:e2:61:0a:0f:06:8b:dd:8c:35:f6:f8:97:f7:a7: 99:63:f9:56:9f:91:60:eb:5c:9a:05:37:5d:32:3b: a4:bf:b1:e3:0c:11:bc:0a:7f:de:2a:88:e2:62:e8: 7d:ac:1c:d7:5f:91:cb:50:15:ed:a9:29:c3:b9:f2: 2d:dd:2a:2f:a6:32:9c:07:4b:73:7a:6e:da:93:3a: 4e:5d:35:0d:fe:cf:d5:a1:ca:7b:21:9a:78:5c:be: 4a:16:af:34:51:18:66:69:5a:cb:0f:23:83:e1:b6: db:0e:2c:21:47:15:fb:34:d1:0a:31:3e:c3:15:32: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:33:A8:E4:F6:1C:CD:45:1E:10:A5:EA:F2:CF:B1:00:2A:A1:1D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2afc830d-76db-349e-823c-d36661995e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:96:a3:ba:84:27:3f:0b:77:67:90:4a:80:ef:26:2f:11:7f: d3:36:e6:48:74:8f:5d:0f:42:a2:59:9e:61:71:28:8d:9f:35: 26:79:d1:ec:25:9e:63:b8:2f:41:9d:b5:bd:db:0f:13:e8:2d: c4:7f:b4:74:f9:14:a1:35:ab:53:06:b3:48:6d:e5:3d:5b:2d: 6a:4a:88:af:34:39:bb:40:1b:1b:7e:b8:09:df:4a:3a:c0:3e: 55:f9:1e:7a:2a:bc:2f:ae:4c:8f:2d:14:79:43:8f:28:e0:4d: 99:a4:e2:d8:01:0d:cd:ce:a6:fb:0f:95:ad:31:ae:90:52:a9: c1:c5:04:dc:91:e7:46:6b:9d:30:13:f6:00:f1:9a:19:ef:0c: 88:84:88:2d:56:c0:2d:f9:71:b9:96:cf:06:8b:5f:65:9b:25: 98:61:3c:7e:7d:d0:f7:95:89:45:eb:9e:c8:78:ed:0d:1b:a4: 4d:f0:76:73:f0:4e:19:4b:40:1c:ba:da:cc:21:34:aa:f5:10: 22:be:dd:11:d4:24:65:2e:05:89:c3:35:4b:f3:5f:fb:42:36: 10:8f:e1:42:c1:6a:aa:60:a8:66:7a:93:f6:ae:d3:41:0d:37: 6f:cc:b4:2a:ca:09:f6:64:66:86:78:c9:7c:f5:53:1d:68:10: a9:1c:67:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tn5sIKJCIJhlG+xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjkwOFoXDTI2MTIyNzE3MjkwOFowLzEtMCsGA1UEAxMk ZWQ4MGMwNzQtMTMwNi00ZWUzLTgyMDEtYWE4N2JmNzQzNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWZfTqmIMXlHBoD2Rjv6xLg9EXIdWjyI62XG HzUbxzOxEHC7yrjOKrh0T1XAY48a6JWPdP1DooH+lQwvuS5LuMcNf0jUwZYgrvBg iGItwk2y0wJBqlHQ6v638xHyIhl59y580RJlAv1RWTL7PERMulZEE+7ukACzVORK fx/CNPVSMzw37OfK4mEKDwaL3Yw19viX96eZY/lWn5Fg61yaBTddMjukv7HjDBG8 Cn/eKojiYuh9rBzXX5HLUBXtqSnDufIt3SovpjKcB0tzem7akzpOXTUN/s/Vocp7 IZp4XL5KFq80URhmaVrLDyOD4bbbDiwhRxX7NNEKMT7DFTIbYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgzqOT2HM1FHhCl6vLPsQAqoR2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFmYzgzMGQtNzZkYi0z NDllLTgyM2MtZDM2NjYxOTk1ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Wo7qEJz8Ld2eQSoDvJi8Rf9M25kh0j10PQqJZnmFxKI2fNSZ50ewl nmO4L0Gdtb3bDxPoLcR/tHT5FKE1q1MGs0ht5T1bLWpKiK80ObtAGxt+uAnfSjrA PlX5HnoqvC+uTI8tFHlDjyjgTZmk4tgBDc3OpvsPla0xrpBSqcHFBNyR50ZrnTAT 9gDxmhnvDIiEiC1WwC35cbmWzwaLX2WbJZhhPH590PeViUXrnsh47Q0bpE3wdnPw ThlLQBy62swhNKr1ECK+3RHUJGUuBYnDNUvzX/tCNhCP4ULBaqpgqGZ6k/au00EN N2/MtCrKCfZkZoZ4yXz1Ux1oEKkcZ9g= -----END CERTIFICATE-----Generated at Wed Sep 30 22:38:28 2026 by rpki-client