$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5479fa47-4e4b-324b-ab08-af774c39df18.roa File: 5479fa47-4e4b-324b-ab08-af774c39df18.roa (raw, json) Hash identifier: xBsiolZAIVoMe/B1ABSH31iRDp1a2rhi05Y2HQyIILI= Subject key identifier: 04:95:A0:3A:13:A6:6A:C5:5E:EF:EC:31:84:2D:64:70:EF:58:C8:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3308584DD9897B2E1E4F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5479fa47-4e4b-324b-ab08-af774c39df18.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.109.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:08:58:4d:d9:89:7b:2e:1e:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=5860f7d9-e509-4047-8cef-2c3c3af1095c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:a3:5c:95:0b:e5:05:15:65:0e:66:48:78: f0:cf:cc:2b:af:4b:67:4f:b4:1b:e4:81:a1:a6:5c: 65:9c:9d:1e:d4:33:11:b0:be:0e:6c:c7:92:4e:ac: d9:19:95:0a:36:9e:8e:26:b4:27:08:3d:ed:81:3c: c8:c7:09:48:f6:c7:12:19:f5:b9:2f:c3:2e:c7:42: 73:89:2c:41:a2:3d:e8:88:75:36:00:0b:87:d2:30: 45:24:e2:f7:9c:20:b4:5e:44:82:4a:6d:c5:09:a4: 9e:15:a2:3d:da:d3:47:f2:3f:15:e9:a5:c1:af:3b: 5b:d2:16:51:9e:0a:2a:2b:46:d6:da:c6:30:82:8f: fe:22:44:ef:42:6b:f0:e3:c5:0b:1f:41:70:a1:96: a4:b4:fa:b4:88:14:87:ea:cf:a5:0a:0e:2f:07:14: a4:c6:ce:28:7c:a3:af:fa:91:4e:6b:75:ed:1c:9c: 52:a6:64:3e:6a:1c:a3:22:50:3a:dc:45:9f:28:e5: 74:e3:56:3e:7d:b1:0a:bf:22:e7:a0:43:e1:b8:9a: f3:3c:5d:fd:88:85:cb:56:75:f4:43:ea:59:f5:e2: e0:4c:c7:7c:47:08:0e:9f:b2:31:40:61:24:01:2b: fa:25:70:f5:0d:29:c7:ed:9c:ce:71:99:3a:e7:7e: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:A0:3A:13:A6:6A:C5:5E:EF:EC:31:84:2D:64:70:EF:58:C8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5479fa47-4e4b-324b-ab08-af774c39df18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5c:4d:5c:46:79:17:c9:10:ff:19:ce:2e:eb:1c:3a:f6:af: 63:5c:f5:ce:79:7e:bd:0e:f0:30:ca:a1:bb:d0:fb:cd:af:97: fb:f3:54:c0:df:56:67:b0:c2:5d:fb:d2:39:24:a0:91:08:cc: 63:6b:bd:4a:5e:40:77:9b:09:95:12:84:04:ec:ca:a4:2d:97: 03:5a:20:a6:46:02:e1:e0:a9:a1:99:8e:1e:5e:ca:32:90:5f: a6:05:18:8a:fb:34:70:49:c2:42:8f:50:a2:38:78:ae:8b:94: 9e:ed:b6:d1:77:04:83:06:44:8f:d5:9c:2c:8b:a8:44:0d:9b: 60:9c:1f:f4:31:70:d9:81:98:f7:1d:0d:d7:36:f1:74:eb:23: 95:83:e0:22:29:4a:90:33:d2:cb:0e:48:44:23:90:41:07:df: f6:2b:bb:6e:7b:fe:1d:06:24:53:75:a2:be:e3:e9:a4:a9:f6: 3d:b0:17:f8:4e:69:d1:6b:02:41:c9:56:a5:59:19:83:7a:12: 71:dc:03:c5:06:29:0c:a4:2f:4f:2b:89:53:19:d7:6a:ad:9a: 36:0e:bb:47:b3:a2:e7:b8:9d:55:38:f0:94:5c:af:5f:29:a5: 42:34:bd:73:8d:44:cd:12:fb:99:33:6b:90:d2:bf:1c:b2:b5: 23:12:39:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwhYTdmJey4eT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NTg2MGY3ZDktZTUwOS00MDQ3LThjZWYtMmMzYzNhZjEwOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki+jXJUL5QUVZQ5mSHjwz8wrr0tnT7Qb5IGh plxlnJ0e1DMRsL4ObMeSTqzZGZUKNp6OJrQnCD3tgTzIxwlI9scSGfW5L8Mux0Jz iSxBoj3oiHU2AAuH0jBFJOL3nCC0XkSCSm3FCaSeFaI92tNH8j8V6aXBrztb0hZR ngoqK0bW2sYwgo/+IkTvQmvw48ULH0FwoZaktPq0iBSH6s+lCg4vBxSkxs4ofKOv +pFOa3XtHJxSpmQ+ahyjIlA63EWfKOV041Y+fbEKvyLnoEPhuJrzPF39iIXLVnX0 Q+pZ9eLgTMd8RwgOn7IxQGEkASv6JXD1DSnH7ZzOcZk6535dBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASVoDoTpmrFXu/sMYQtZHDvWMgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTQ3OWZhNDctNGU0Yi0z MjRiLWFiMDgtYWY3NzRjMzlkZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdcTVxGeRfJEP8Zzi7rHDr2r2Nc9c55fr0O8DDKobvQ+82vl/vzVMDf Vmewwl370jkkoJEIzGNrvUpeQHebCZUShATsyqQtlwNaIKZGAuHgqaGZjh5eyjKQ X6YFGIr7NHBJwkKPUKI4eK6LlJ7tttF3BIMGRI/VnCyLqEQNm2CcH/QxcNmBmPcd Ddc28XTrI5WD4CIpSpAz0ssOSEQjkEEH3/Yru257/h0GJFN1or7j6aSp9j2wF/hO adFrAkHJVqVZGYN6EnHcA8UGKQykL08riVMZ12qtmjYOu0ezoue4nVU48JRcr18p pUI0vXONRM0S+5kza5DSvxyytSMSOQ8= -----END CERTIFICATE-----Generated at Sat Oct 3 19:43:46 2026 by rpki-client