$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa File: 33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa (raw, json) Hash identifier: iu0/dalCB7TyPBrTnlG0L3lbKFPcvMv2OdL4SC2ar7I= Subject key identifier: B9:2B:BC:54:AA:66:B9:BB:5D:E5:51:26:08:F5:48:28:61:67:46:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32B8D124F8876282C45E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.107.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:b8:d1:24:f8:87:62:82:c4:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=99fc4b77-0dc6-49b9-843b-e88a358d3c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:d6:93:78:69:4a:ab:2a:b9:b3:a5:91:ff: 1d:6c:e2:cf:4c:6a:ef:42:2f:82:8f:5e:1b:50:c9: 6a:0e:b8:c9:19:d0:44:04:73:2d:00:a2:e3:fc:83: d3:b0:9a:cf:bf:c0:e6:af:77:fa:81:a6:7b:6f:8b: 25:02:43:c2:71:84:cb:ba:8b:27:d2:23:88:cd:24: 07:40:a1:ba:4e:ce:a6:65:5e:7a:23:26:76:d5:e9: 94:83:69:27:f2:31:7b:89:24:4d:90:38:5c:66:82: 6e:15:7a:d0:3b:03:07:d4:e2:7e:3a:dd:8f:00:f7: af:7b:2f:77:b5:a4:3f:96:17:bd:02:cc:a7:02:68: f4:38:d0:41:b6:19:f3:9c:9e:02:7e:31:5c:7e:37: c3:77:b5:b5:fa:1d:99:0b:8d:43:00:1d:a2:5c:cc: 39:8c:d0:e8:9b:59:36:02:22:c0:c3:2e:8c:27:43: 1e:c1:d3:43:84:d2:01:99:bb:27:e1:44:e3:5c:3e: 85:24:cc:7a:5a:af:c9:f1:6c:de:2d:15:91:d5:44: b2:34:b2:0c:ef:57:e4:c3:14:ad:be:e9:4f:f2:d8: 76:89:6f:67:fc:51:49:71:71:f8:7c:01:99:22:bb: ce:ce:e1:cb:14:9e:6a:7d:22:87:03:0b:44:3e:2f: e6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2B:BC:54:AA:66:B9:BB:5D:E5:51:26:08:F5:48:28:61:67:46:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:38:66:e6:bd:35:fd:e9:83:39:c7:c0:33:66:8d:05:2a:cd: 45:0c:e7:6e:2b:6d:62:43:66:ba:49:68:e3:1d:76:dd:17:b9: 27:f2:66:61:06:36:57:0b:c5:97:c0:90:84:14:71:76:87:ad: 79:52:82:57:eb:83:3d:00:3f:e0:ee:aa:29:d1:7e:a9:29:3b: 6a:bf:50:a0:70:e0:05:8c:c0:09:06:58:c2:4d:1e:4c:1a:34: 28:bd:8e:df:40:d2:0b:51:c0:48:71:d7:c9:9b:6c:56:d8:fa: 83:2b:32:c1:94:14:1d:1d:2f:83:66:cc:b0:71:78:e1:af:94: 7f:4d:98:07:b1:78:9a:95:66:a9:23:46:91:ff:36:09:8a:a7: e4:5f:42:3f:a3:c7:4d:b4:e4:82:69:68:b7:bd:30:41:d9:46: 95:e9:8b:f2:fe:f5:dc:ce:af:ac:8f:2e:61:64:7b:fe:49:5f: ec:6f:77:72:9e:6f:d3:da:e4:27:42:ef:01:44:d7:a3:a2:13: 2b:5e:01:a7:76:42:ee:a9:eb:7f:ea:d8:f2:a7:61:88:95:6f: 7d:af:97:25:c1:d6:34:ea:34:3a:99:2d:4a:ca:80:a0:df:99: 39:71:5e:a0:d4:dc:be:42:f4:53:e2:88:92:f2:0f:17:53:16: 54:ae:a6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMrjRJPiHYoLEXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTlmYzRiNzctMGRjNi00OWI5LTg0M2ItZTg4YTM1OGQzYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5XWk3hpSqsqubOlkf8dbOLPTGrvQi+Cj14b UMlqDrjJGdBEBHMtAKLj/IPTsJrPv8Dmr3f6gaZ7b4slAkPCcYTLuosn0iOIzSQH QKG6Ts6mZV56IyZ21emUg2kn8jF7iSRNkDhcZoJuFXrQOwMH1OJ+Ot2PAPevey93 taQ/lhe9AsynAmj0ONBBthnznJ4CfjFcfjfDd7W1+h2ZC41DAB2iXMw5jNDom1k2 AiLAwy6MJ0MewdNDhNIBmbsn4UTjXD6FJMx6Wq/J8WzeLRWR1USyNLIM71fkwxSt vulP8th2iW9n/FFJcXH4fAGZIrvOzuHLFJ5qfSKHAwtEPi/mkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkrvFSqZrm7XeVRJgj1SChhZ0YKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNmYjEwMzQtZDNiMy0z MWQyLThiMjQtZDJhYWFjMWIxNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE4Zua9Nf3pgznHwDNmjQUqzUUM524rbWJDZrpJaOMddt0XuSfyZmEG NlcLxZfAkIQUcXaHrXlSglfrgz0AP+DuqinRfqkpO2q/UKBw4AWMwAkGWMJNHkwa NCi9jt9A0gtRwEhx18mbbFbY+oMrMsGUFB0dL4NmzLBxeOGvlH9NmAexeJqVZqkj RpH/NgmKp+RfQj+jx0205IJpaLe9MEHZRpXpi/L+9dzOr6yPLmFke/5JX+xvd3Ke b9Pa5CdC7wFE16OiEyteAad2Qu6p63/q2PKnYYiVb32vlyXB1jTqNDqZLUrKgKDf mTlxXqDU3L5C9FPiiJLyDxdTFlSupmE= -----END CERTIFICATE-----Generated at Tue Nov 3 03:51:39 2026 by rpki-client