$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e23bddb-600e-30bf-81c5-9acfdbb8e74d.roa File: 2e23bddb-600e-30bf-81c5-9acfdbb8e74d.roa (raw, json) Hash identifier: rL17XsPMZdPIM9jHNqPMPuzQ/DwIL/mrFlTTXz7ZgCs= Subject key identifier: 76:4C:87:7F:AF:55:0B:E9:49:68:D6:C7:2F:0A:5D:A6:6E:65:3F:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539F40168AF08C1EEAF52F20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e23bddb-600e-30bf-81c5-9acfdbb8e74d.roa Signing time: Mon 28 Sep 2026 16:28:25 +0000 ROA not before: Mon 28 Sep 2026 16:28:25 +0000 ROA not after: Sun 27 Dec 2026 17:28:25 +0000 asID: 22773 IP address blocks: 68.107.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9f:40:16:8a:f0:8c:1e:ea:f5:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:28:25 2026 GMT Not After : Dec 27 17:28:25 2026 GMT Subject: CN=84f1a3d4-8ca3-43e8-a71a-1b2deef5aba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:3f:4a:d9:53:8d:c4:fb:16:db:c3:8d:c5: 5e:1d:65:70:b2:ad:11:8b:ad:b8:8e:01:b7:f9:4e: 7c:59:4b:5e:61:e9:f4:9e:c3:56:29:4d:43:24:5b: 28:2e:d3:e3:15:d2:55:3e:34:1a:39:4b:a7:29:e1: 37:e2:72:12:b8:b0:b0:72:f3:34:2c:53:74:df:08: a2:5a:9c:92:ea:59:17:7d:3f:b2:4f:46:c9:a8:1e: 75:c7:db:2d:00:0b:91:55:09:5e:b6:c8:f6:23:a3: a6:9c:87:c0:40:7d:ce:44:1b:bd:ff:85:8d:df:02: 51:33:cb:74:80:77:d3:25:8a:79:22:2d:a2:ed:0b: 01:a2:3e:99:6c:52:63:c1:1d:b4:75:d0:15:2f:05: e0:6e:fd:e5:16:cf:1f:f1:b0:6a:61:c0:ed:d1:b5: 1c:ae:98:0a:e6:25:72:7f:0f:d3:3f:24:a4:cc:fa: cc:b0:e0:c1:9c:b9:dd:4d:42:c2:da:22:5c:12:cb: cc:1c:97:b5:25:05:4d:86:ac:73:64:87:a7:cf:3d: d0:34:d0:70:79:07:c1:b1:bb:f2:32:78:d0:49:1d: d6:66:dd:be:1f:5f:b0:01:9f:ab:20:d0:01:81:ad: 72:b6:8d:7d:f6:10:33:26:1b:d4:ab:8b:87:fd:c5: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:87:7F:AF:55:0B:E9:49:68:D6:C7:2F:0A:5D:A6:6E:65:3F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e23bddb-600e-30bf-81c5-9acfdbb8e74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:21:eb:b9:a2:41:d7:4d:88:7e:8c:ab:03:da:43:ce:0d:81: 00:ed:b0:2f:d4:08:90:3c:49:c8:26:da:35:5c:65:70:8c:30: 61:6a:db:26:76:55:27:69:8e:db:07:a8:1a:1b:94:74:9e:66: e9:18:11:48:dd:be:72:c4:64:22:43:6f:d9:72:b7:e8:6e:db: 15:21:7e:4c:7a:a7:c6:39:59:af:e1:6a:9b:9c:fc:55:90:13: 7f:1f:7f:31:18:fd:8f:d8:4e:4c:1b:63:97:59:fc:28:7c:3e: 46:85:8d:2e:d6:9e:d5:3e:9f:60:9b:52:9b:cf:0f:de:9d:b4: 5a:74:e4:e0:ce:5c:e2:fa:81:47:a9:46:77:52:bb:3a:72:c3: b3:f3:8c:46:7b:4e:64:4d:4d:dd:87:e2:97:3e:50:5a:48:16: 9c:ca:95:72:99:45:35:21:62:2a:37:60:7e:79:93:e2:35:86: 2b:a9:0d:c4:15:8a:8e:3b:ed:40:70:43:98:be:78:4e:f5:2d: f3:9d:4d:80:93:82:13:e9:43:25:26:58:b9:e5:e3:3c:13:52: e2:56:ad:69:00:cf:35:e8:6e:00:b2:6e:d3:29:f3:95:60:aa: 1c:fb:fc:17:c3:b8:d1:80:60:21:ff:65:66:09:f7:af:5a:36: 60:c4:59:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tn0AWivCMHur1LyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjgyNVoXDTI2MTIyNzE3MjgyNVowLzEtMCsGA1UEAxMk ODRmMWEzZDQtOGNhMy00M2U4LWE3MWEtMWIyZGVlZjVhYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEs/StlTjcT7FtvDjcVeHWVwsq0Ri624jgG3 +U58WUteYen0nsNWKU1DJFsoLtPjFdJVPjQaOUunKeE34nISuLCwcvM0LFN03wii WpyS6lkXfT+yT0bJqB51x9stAAuRVQletsj2I6OmnIfAQH3ORBu9/4WN3wJRM8t0 gHfTJYp5Ii2i7QsBoj6ZbFJjwR20ddAVLwXgbv3lFs8f8bBqYcDt0bUcrpgK5iVy fw/TPySkzPrMsODBnLndTULC2iJcEsvMHJe1JQVNhqxzZIenzz3QNNBweQfBsbvy MnjQSR3WZt2+H1+wAZ+rINABga1yto199hAzJhvUq4uH/cW9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZMh3+vVQvpSWjWxy8KXaZuZT8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmUyM2JkZGItNjAwZS0z MGJmLTgxYzUtOWFjZmRiYjhlNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRGvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIh67miQddNiH6MqwPaQ84NgQDtsC/UCJA8Scgm2jVcZXCMMGFq2yZ2 VSdpjtsHqBoblHSeZukYEUjdvnLEZCJDb9lyt+hu2xUhfkx6p8Y5Wa/hapuc/FWQ E38ffzEY/Y/YTkwbY5dZ/Ch8PkaFjS7WntU+n2CbUpvPD96dtFp05ODOXOL6gUep RndSuzpyw7PzjEZ7TmRNTd2H4pc+UFpIFpzKlXKZRTUhYio3YH55k+I1hiupDcQV io477UBwQ5i+eE71LfOdTYCTghPpQyUmWLnl4zwTUuJWrWkAzzXobgCybtMp85Vg qhz7/BfDuNGAYCH/ZWYJ969aNmDEWbc= -----END CERTIFICATE-----Generated at Fri Oct 2 18:41:29 2026 by rpki-client