$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171a3bf2-08c8-304e-9b3f-161b5ec8cb3c.roa File: 171a3bf2-08c8-304e-9b3f-161b5ec8cb3c.roa (raw, json) Hash identifier: zuspzJQknfLUKs7ekCVwNJfUB4n992W01mX//t3RB3E= Subject key identifier: 81:3C:E4:97:25:07:3D:9E:DC:11:F1:53:FE:85:1E:E4:AA:49:33:E4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112C6C04756270F3E69F400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171a3bf2-08c8-304e-9b3f-161b5ec8cb3c.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.225.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:c6:c0:47:56:27:0f:3e:69:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=6a5e8795-b93b-458b-8a83-b9ce50db6b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:66:53:ed:33:ca:ca:9a:ec:69:7b:33:c4: 85:da:7e:71:db:8a:0e:0d:22:f0:50:fb:95:c2:49: 51:a5:af:f2:2d:c8:ab:eb:e3:2d:d2:b8:70:45:3c: 23:74:32:02:14:37:a9:81:17:64:f9:b2:28:3b:0e: ae:aa:0a:fb:a8:8c:25:06:01:52:69:2b:3b:af:ac: 62:c3:53:9a:ee:cc:ff:01:c8:42:5a:4b:c8:bc:76: 86:4d:ba:10:d8:2b:6c:f5:36:6f:93:36:de:d9:be: 6c:83:2b:2e:ae:e9:b1:b5:3c:62:fd:eb:50:81:ab: f4:ec:6d:f3:72:a2:90:a1:2d:fd:f5:d7:fc:41:c0: 14:a8:fe:e2:43:f7:61:a8:24:8e:6a:c2:ca:ad:8d: 87:8f:2f:02:be:5c:5f:7c:1a:dc:83:2f:33:e9:80: 74:3d:3e:4b:91:6a:74:87:89:f6:49:ef:87:3c:22: a2:dd:e1:a0:58:f1:86:50:d1:4c:d8:96:3b:e6:d3: b9:13:3f:a7:47:2e:d6:d2:26:4a:dd:91:75:9b:f1: 74:28:a7:7c:db:97:e6:6d:8f:2b:06:a1:0b:5e:c6: e3:39:72:06:c9:aa:5d:36:fb:74:51:89:55:5f:23: 57:07:e5:2e:99:4b:e4:20:da:a5:04:4f:a5:a3:46: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3C:E4:97:25:07:3D:9E:DC:11:F1:53:FE:85:1E:E4:AA:49:33:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171a3bf2-08c8-304e-9b3f-161b5ec8cb3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:02:74:78:85:61:31:a2:9e:eb:a5:ff:86:48:4e:84:c1:a7: c6:94:ea:20:d2:3c:5e:74:09:66:6b:9a:5c:03:81:de:3c:ca: 48:58:a0:ac:6c:2b:11:76:e0:d7:e2:08:32:d8:a7:38:c7:e0: 5a:89:cd:bb:1c:90:65:ad:72:ff:93:bf:43:36:c7:fb:72:fd: d7:04:66:35:c9:bd:50:0d:80:e2:93:d9:2d:dc:d2:95:d0:cc: 33:31:f7:42:da:44:c1:62:a2:cb:6f:20:8d:a8:d3:61:a8:c5: 22:12:eb:08:66:63:29:95:4a:b9:76:48:e4:d6:38:8e:4d:72: b9:d8:db:9b:96:ba:99:a4:d9:4f:3c:9d:11:d3:be:30:93:18: ac:f5:a8:a3:1f:5d:6d:99:2f:80:7d:50:68:de:0a:d4:3e:27: 46:66:e1:8c:6a:d5:9f:2d:f2:69:65:4f:34:a4:f5:01:30:38: 8d:6d:8d:b5:b0:13:30:fd:2f:fc:6e:2e:6d:db:31:3e:86:d8: f7:4a:7c:f8:78:33:58:8a:02:fe:5a:2b:2c:79:80:45:fb:2e: 62:eb:b5:3d:4a:c7:12:1d:95:95:2f:d7:27:ed:4d:86:99:04: 8e:54:02:4b:48:1f:e1:34:df:61:af:f4:af:44:c0:b9:78:58: 11:3d:f3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsbAR1YnDz5p9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmE1ZTg3OTUtYjkzYi00NThiLThhODMtYjljZTUwZGI2YjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9mU+0zysqa7Gl7M8SF2n5x24oODSLwUPuV wklRpa/yLcir6+Mt0rhwRTwjdDICFDepgRdk+bIoOw6uqgr7qIwlBgFSaSs7r6xi w1Oa7sz/AchCWkvIvHaGTboQ2Cts9TZvkzbe2b5sgysurumxtTxi/etQgav07G3z cqKQoS399df8QcAUqP7iQ/dhqCSOasLKrY2Hjy8CvlxffBrcgy8z6YB0PT5LkWp0 h4n2Se+HPCKi3eGgWPGGUNFM2JY75tO5Ez+nRy7W0iZK3ZF1m/F0KKd825fmbY8r BqELXsbjOXIGyapdNvt0UYlVXyNXB+UumUvkINqlBE+lo0YL+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE85JclBz2e3BHxU/6FHuSqSTPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcxYTNiZjItMDhjOC0z MDRlLTliM2YtMTYxYjVlYzhjYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoCdHiFYTGinuul/4ZIToTBp8aU6iDSPF50CWZrmlwDgd48ykhYoKxs KxF24NfiCDLYpzjH4FqJzbsckGWtcv+Tv0M2x/ty/dcEZjXJvVANgOKT2S3c0pXQ zDMx90LaRMFiostvII2o02GoxSIS6whmYymVSrl2SOTWOI5NcrnY25uWupmk2U88 nRHTvjCTGKz1qKMfXW2ZL4B9UGjeCtQ+J0Zm4Yxq1Z8t8mllTzSk9QEwOI1tjbWw EzD9L/xuLm3bMT6G2PdKfPh4M1iKAv5aKyx5gEX7LmLrtT1KxxIdlZUv1yftTYaZ BI5UAktIH+E032Gv9K9EwLl4WBE98yM= -----END CERTIFICATE-----Generated at Tue Sep 22 14:36:55 2026 by rpki-client