$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa File: 38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa (raw, json) Hash identifier: xzgQ0bOlPg32RM5b8jWhx9XWZj/AXn7J8UiSmoPhGMU= Subject key identifier: 89:BD:57:0C:6C:53:AC:41:2E:99:29:61:87:C9:42:5B:7E:9B:6E:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3325E778F78C8F86768C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.13.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:25:e7:78:f7:8c:8f:86:76:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9b360d03-9786-4840-9dc6-e34423c1ffaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:b2:45:74:d2:29:8e:dd:cc:6c:d9:d0:4d: a5:99:90:8b:1b:9b:67:2c:79:a2:10:2b:62:a8:5a: dd:4d:b4:40:ee:b6:b0:a2:e8:0b:99:d6:fa:a7:20: 7b:00:5a:78:3e:6e:3e:02:f4:72:a1:7a:ca:9b:e4: 83:8f:b6:32:33:d9:8d:9d:b1:db:77:0a:70:f8:a1: 13:2b:af:c8:ad:3c:40:dc:0e:1c:2f:51:c7:13:9c: 6f:d5:3a:e4:ab:c7:fc:c2:3c:f8:a6:db:94:8e:2e: 01:bb:c8:a2:82:b7:0b:fd:9a:86:34:b3:44:a8:74: 9d:6a:d8:77:0d:fb:3b:e6:12:22:a9:ee:1f:7a:76: e8:5c:83:68:60:5b:da:88:87:1f:f2:79:d4:7a:79: e5:61:4f:d7:a8:74:06:c2:8e:fa:aa:59:87:0b:c5: f1:61:9e:2e:43:7c:07:d1:41:08:7c:3a:47:42:02: 90:f1:cc:67:59:18:83:b9:e1:26:49:0e:af:93:72: 0e:34:3d:6b:7f:23:d8:bb:2a:ec:ee:05:6d:3e:85: 8e:8c:04:55:b7:71:fd:48:bd:5a:7b:e8:66:d2:23: ea:d1:cb:cb:6d:22:a8:70:01:3e:ab:5c:a8:e7:33: ee:e2:e1:85:fa:58:68:48:fb:ab:30:b0:6c:7d:73: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:57:0C:6C:53:AC:41:2E:99:29:61:87:C9:42:5B:7E:9B:6E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.13.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e2:35:8f:cd:4e:f9:c1:e4:78:7a:8d:ed:94:f5:0e:f8:e8: 26:f5:9c:fd:59:4a:6e:87:8c:e6:fd:32:72:1a:ff:48:cd:61: e2:a8:e9:8e:3a:66:f1:55:f1:09:bd:b2:29:26:7d:e7:37:7c: 8b:8a:d2:1f:be:d3:58:62:6b:82:e5:f8:9e:d2:dc:83:3a:ba: 03:1a:a3:b4:7d:b7:cd:66:92:f8:17:54:5b:f7:1f:27:38:78: 94:77:7c:ab:db:16:61:c1:fa:09:c8:9c:72:87:94:46:79:1f: 88:3c:95:ec:4d:94:09:d9:3a:37:48:31:36:76:38:3e:8e:63: 03:eb:fe:35:94:9b:61:ef:7e:60:ab:c5:37:39:bc:fa:cb:fa: 6e:5e:7c:dd:89:22:4b:45:4f:73:b7:c3:1d:d5:d5:39:f4:fb: c4:15:77:15:ac:2f:99:70:a6:bf:37:18:4f:fa:6d:c5:f0:8e: 26:2c:49:18:93:21:b5:c1:9d:30:b5:29:5e:ea:52:d8:6a:4a: da:85:e5:b3:3d:2d:7d:37:9c:27:5f:eb:3d:c0:30:e5:a3:46: b7:3e:79:76:9b:1d:72:bc:bb:d1:8b:13:c3:0e:53:41:6d:b3: ac:15:f6:04:a8:c3:a1:67:a7:db:02:cd:e5:2b:01:ed:e6:50: 31:6b:16:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMyXnePeMj4Z2jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWIzNjBkMDMtOTc4Ni00ODQwLTlkYzYtZTM0NDIzYzFmZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw+yRXTSKY7dzGzZ0E2lmZCLG5tnLHmiECti qFrdTbRA7rawougLmdb6pyB7AFp4Pm4+AvRyoXrKm+SDj7YyM9mNnbHbdwpw+KET K6/IrTxA3A4cL1HHE5xv1Trkq8f8wjz4ptuUji4Bu8iigrcL/ZqGNLNEqHSdath3 Dfs75hIiqe4fenboXINoYFvaiIcf8nnUennlYU/XqHQGwo76qlmHC8XxYZ4uQ3wH 0UEIfDpHQgKQ8cxnWRiDueEmSQ6vk3IOND1rfyPYuyrs7gVtPoWOjARVt3H9SL1a e+hm0iPq0cvLbSKocAE+q1yo5zPu4uGF+lhoSPurMLBsfXPvLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm9VwxsU6xBLpkpYYfJQlt+m26cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg4MzFiOWMtNWNkMC0z YTE1LTliZDItYTY5NjQzZDRkMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjiNY/NTvnB5Hh6je2U9Q746Cb1nP1ZSm6HjOb9MnIa/0jNYeKo6Y46 ZvFV8Qm9sikmfec3fIuK0h++01hia4Ll+J7S3IM6ugMao7R9t81mkvgXVFv3Hyc4 eJR3fKvbFmHB+gnInHKHlEZ5H4g8lexNlAnZOjdIMTZ2OD6OYwPr/jWUm2HvfmCr xTc5vPrL+m5efN2JIktFT3O3wx3V1Tn0+8QVdxWsL5lwpr83GE/6bcXwjiYsSRiT IbXBnTC1KV7qUthqStqF5bM9LX03nCdf6z3AMOWjRrc+eXabHXK8u9GLE8MOU0Ft s6wV9gSow6Fnp9sCzeUrAe3mUDFrFk4= -----END CERTIFICATE-----Generated at Tue Nov 3 03:50:44 2026 by rpki-client