$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa File: 2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa (raw, json) Hash identifier: TKJhDwmfRYjzSRUYweBjSey8hJcBHdDNDiDts8SSpmc= Subject key identifier: B1:43:45:DB:EE:1C:FC:D6:62:A3:82:FD:8D:E0:61:B5:2C:A9:18:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3328C8BFBA34192AB41D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.7.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:28:c8:bf:ba:34:19:2a:b4:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=f47fa623-510f-4e50-898a-046bbe7864a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:d4:ee:ab:f5:eb:0d:3c:e4:eb:a7:67:7b: 55:52:23:9e:f5:08:83:22:e1:bf:c4:51:42:39:fa: 2c:f7:08:f7:e4:4e:65:fd:ad:ec:91:8c:41:06:03: 9c:fc:72:8b:cf:65:2b:09:34:45:85:a7:6d:44:7a: b5:d9:4b:62:6a:59:81:c8:94:e5:a9:29:9a:c4:94: 94:27:2e:03:47:33:67:4d:7c:bf:46:57:22:c3:24: bd:7c:a5:96:f6:a6:c3:69:2b:81:c3:54:7e:e8:79: b2:e7:7e:75:ab:12:4c:69:a6:4c:2b:4a:10:b6:73: 14:d1:9d:28:bc:c9:89:b0:2d:d6:af:05:9d:de:ec: d5:62:10:e1:2b:da:e4:de:1b:f0:b6:be:4b:5d:5f: 24:70:2f:f7:35:04:f4:28:2f:94:28:ac:99:d8:41: 35:cc:05:74:7c:f5:71:ab:ec:a8:20:00:fd:c0:51: 10:d4:85:28:6d:51:88:28:e6:c1:d8:61:1d:be:ff: ba:f6:6d:61:41:06:85:37:80:73:af:12:76:00:5f: 43:90:ff:b1:e5:a1:4a:e6:7d:4a:2d:e8:c6:20:99: 91:b2:a4:f2:74:b1:7d:6a:98:18:9a:e3:4e:71:84: a6:c6:87:69:0c:b7:9c:b2:79:94:a8:8c:14:d3:2c: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:43:45:DB:EE:1C:FC:D6:62:A3:82:FD:8D:E0:61:B5:2C:A9:18:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f8:0a:7d:86:4b:aa:ff:43:fa:bc:52:8f:40:e0:08:dc:fc: 47:f8:91:9f:34:e6:97:ff:91:cb:ec:32:82:68:0f:b8:d1:7d: 31:41:96:c9:cd:7e:74:c7:39:ab:8a:70:40:f3:ed:4a:d8:ca: 36:27:f4:f6:3d:35:11:83:b0:91:f7:94:7b:51:93:51:db:44: 96:e4:d9:ed:0f:88:55:44:23:76:83:ce:6e:d6:d6:04:08:07: 75:55:37:4d:91:a6:b1:75:0e:f2:ef:c6:1d:0b:19:11:6a:47: 21:3a:2e:c6:ed:04:98:1f:24:1d:1d:f6:54:f0:a4:6a:58:e2: d4:38:a1:cf:35:83:d2:b3:87:27:9c:0e:5f:8b:1d:28:2c:f0: 9e:dd:b3:2d:43:a9:a9:64:70:e2:d4:52:7e:0c:89:93:da:5b: 67:43:8d:94:77:dc:fb:0f:8e:d5:4f:1a:09:5a:62:18:33:a6: 18:78:47:f5:68:74:56:e3:55:77:a0:89:f8:25:1e:12:ef:0c: 66:a2:58:f4:d9:1b:66:7c:0e:8f:14:87:e0:1b:42:46:ce:53: 4a:fc:13:ef:f2:3e:65:5b:50:cb:96:1e:b7:30:40:60:c5:78: 11:d9:91:07:ea:fa:25:38:d0:5b:6c:d7:a5:d6:d5:7e:44:7d: 92:5a:93:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMyjIv7o0GSq0HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ3ZmE2MjMtNTEwZi00ZTUwLTg5OGEtMDQ2YmJlNzg2NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TU7qv16w085OunZ3tVUiOe9QiDIuG/xFFC Ofos9wj35E5l/a3skYxBBgOc/HKLz2UrCTRFhadtRHq12UtialmByJTlqSmaxJSU Jy4DRzNnTXy/RlciwyS9fKWW9qbDaSuBw1R+6Hmy5351qxJMaaZMK0oQtnMU0Z0o vMmJsC3WrwWd3uzVYhDhK9rk3hvwtr5LXV8kcC/3NQT0KC+UKKyZ2EE1zAV0fPVx q+yoIAD9wFEQ1IUobVGIKObB2GEdvv+69m1hQQaFN4BzrxJ2AF9DkP+x5aFK5n1K LejGIJmRsqTydLF9apgYmuNOcYSmxodpDLecsnmUqIwU0yxcSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFDRdvuHPzWYqOC/Y3gYbUsqRgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNlMDFiZmQtOWY5Ny0z YWQwLWFiMjQtYmM2MDEwMGQzYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb4Cn2GS6r/Q/q8Uo9A4Ajc/Ef4kZ805pf/kcvsMoJoD7jRfTFBlsnN fnTHOauKcEDz7UrYyjYn9PY9NRGDsJH3lHtRk1HbRJbk2e0PiFVEI3aDzm7W1gQI B3VVN02RprF1DvLvxh0LGRFqRyE6LsbtBJgfJB0d9lTwpGpY4tQ4oc81g9Kzhyec Dl+LHSgs8J7dsy1DqalkcOLUUn4MiZPaW2dDjZR33PsPjtVPGglaYhgzphh4R/Vo dFbjVXegifglHhLvDGaiWPTZG2Z8Do8Uh+AbQkbOU0r8E+/yPmVbUMuWHrcwQGDF eBHZkQfq+iU40Fts16XW1X5EfZJak2Y= -----END CERTIFICATE-----Generated at Sun Nov 15 18:12:24 2026 by rpki-client