$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa File: 033950d8-0213-3cac-a0c6-a58cf35f17df.roa (raw, json) Hash identifier: T1aRMnIQBbHNHJh2owy6eGprwANIuFUeZt1vInG+tig= Subject key identifier: 96:04:5C:39:BB:97:10:78:CC:32:B4:3E:F4:E3:10:59:3E:D8:3E:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32C99838921239B74B7700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.111.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c9:98:38:92:12:39:b7:4b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=01159238-1d6c-4d4d-b124-05f936864d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:99:82:c3:5e:0b:de:6c:01:f0:ef:f4:78: 59:ad:9b:7a:a2:f1:1d:59:41:9d:4f:f5:d6:26:6b: 61:58:cb:64:a9:09:5a:52:1c:22:95:1a:08:29:85: ce:b0:35:aa:60:ad:da:e3:e5:6c:b5:26:63:c4:87: 74:3e:9a:73:4b:b2:08:ac:03:bb:bf:ce:12:02:79: 51:ad:85:67:0c:64:50:0a:fa:4c:21:c6:e9:11:5a: 40:24:73:44:5d:c4:c7:eb:03:38:a7:7c:b7:de:22: e2:fe:e8:57:81:09:eb:3b:5a:59:90:04:e8:70:10: 04:9c:ec:c9:0d:be:a0:c2:50:a2:a0:cf:30:53:6a: 99:5b:a3:81:47:7f:dd:be:d9:92:32:3e:88:2a:ef: 48:25:47:36:51:e3:9e:56:de:72:07:7a:80:d2:c2: 7e:be:be:07:c0:24:73:6f:0c:c1:ba:64:da:bf:b2: 2c:12:38:5c:66:36:51:84:22:54:cc:e2:34:8f:78: 42:45:6e:10:3e:ca:9e:db:1a:6b:34:75:45:6a:13: 1d:54:ad:29:7c:0c:5d:98:b1:07:3a:f5:af:04:65: 8a:2f:a0:f9:a0:e4:12:05:0d:6f:db:b0:2f:a8:97: b3:d6:67:89:3a:0d:6e:25:82:52:0f:95:c9:49:25: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:5C:39:BB:97:10:78:CC:32:B4:3E:F4:E3:10:59:3E:D8:3E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:10:b3:bd:a6:47:99:5a:ea:64:9d:99:c9:97:6f:ca:04:73: 2a:0c:89:b9:7c:60:4e:6b:0c:46:df:a0:5f:f9:b3:c0:00:8b: ed:9e:65:aa:23:57:51:e6:ed:aa:07:13:3c:44:d5:e6:94:41: e4:48:81:a6:f6:03:ee:38:57:44:b9:ce:e1:ac:9b:e7:52:81: 82:e2:8f:3a:6b:6e:58:86:f3:45:40:dc:4f:d4:d1:f5:8a:31: 7b:fe:da:af:61:6e:7c:b2:e4:24:87:dc:2d:e7:5a:4d:2f:84: e7:73:9a:73:ba:40:2e:c9:db:54:b4:53:7c:69:f1:9d:6a:12: 5f:07:b9:39:10:87:5e:25:46:17:dc:f3:7d:4e:56:d3:66:23: c5:9d:46:53:f9:22:a3:5b:d3:41:4a:75:e0:d2:c1:3b:6f:ac: f4:b7:b0:41:33:f1:b5:d5:f8:2b:ae:e7:d6:1e:e1:ed:53:b4: 21:31:ce:81:1c:4c:77:5c:82:5b:dc:2d:76:62:ef:6f:fc:38: 13:24:5c:1e:9b:bc:80:9d:82:9b:9d:c6:03:d0:c1:85:92:7d: 1c:d9:8b:86:08:37:39:3b:5e:5d:68:0b:cc:6f:07:57:6c:07: 73:b7:ae:d4:5e:46:e9:64:be:cd:24:be:4d:c3:53:c7:13:4c: 77:2c:c7:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsmYOJISObdLdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDExNTkyMzgtMWQ2Yy00ZDRkLWIxMjQtMDVmOTM2ODY0ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k+ZgsNeC95sAfDv9HhZrZt6ovEdWUGdT/XW JmthWMtkqQlaUhwilRoIKYXOsDWqYK3a4+VstSZjxId0PppzS7IIrAO7v84SAnlR rYVnDGRQCvpMIcbpEVpAJHNEXcTH6wM4p3y33iLi/uhXgQnrO1pZkATocBAEnOzJ Db6gwlCioM8wU2qZW6OBR3/dvtmSMj6IKu9IJUc2UeOeVt5yB3qA0sJ+vr4HwCRz bwzBumTav7IsEjhcZjZRhCJUzOI0j3hCRW4QPsqe2xprNHVFahMdVK0pfAxdmLEH OvWvBGWKL6D5oOQSBQ1v27AvqJez1meJOg1uJYJSD5XJSSVsuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYEXDm7lxB4zDK0PvTjEFk+2D6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMzOTUwZDgtMDIxMy0z Y2FjLWEwYzYtYTU4Y2YzNWYxN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgQs72mR5la6mSdmcmXb8oEcyoMibl8YE5rDEbfoF/5s8AAi+2eZaoj V1Hm7aoHEzxE1eaUQeRIgab2A+44V0S5zuGsm+dSgYLijzprbliG80VA3E/U0fWK MXv+2q9hbnyy5CSH3C3nWk0vhOdzmnO6QC7J21S0U3xp8Z1qEl8HuTkQh14lRhfc 831OVtNmI8WdRlP5IqNb00FKdeDSwTtvrPS3sEEz8bXV+Cuu59Ye4e1TtCExzoEc THdcglvcLXZi72/8OBMkXB6bvICdgpudxgPQwYWSfRzZi4YINzk7Xl1oC8xvB1ds B3O3rtReRulkvs0kvk3DU8cTTHcsxxc= -----END CERTIFICATE-----Generated at Sat Oct 3 00:47:35 2026 by rpki-client