$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa89434-1668-3bef-96b2-afe2988b06ed.roa File: 1aa89434-1668-3bef-96b2-afe2988b06ed.roa (raw, json) Hash identifier: qeId1OigTHplo5XnqHh+7mJk9JHWY/s1SARkPHYsDZ0= Subject key identifier: 1C:34:C9:D8:A6:E0:D8:2D:6A:65:27:2E:41:40:B5:E1:F8:4A:AF:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F411295C2C0035DC0CB815240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa89434-1668-3bef-96b2-afe2988b06ed.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.106.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:95:c2:c0:03:5d:c0:cb:81:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=1f62116c-84cb-4f68-b875-a377ba1e23d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:fc:d3:f5:87:96:a5:28:96:cd:b9:14:01: c3:e5:7f:df:b8:d3:cb:c2:81:3f:06:98:ae:cc:12: c5:88:c2:70:a5:03:94:df:78:01:c8:78:d9:63:34: 8a:ef:c7:62:89:31:2a:2a:bf:8e:13:d8:09:0e:ed: 14:a4:49:5b:6e:80:ee:f8:0a:4f:b9:16:1b:e8:fa: 00:f7:e2:94:53:8d:39:4e:b0:64:7d:de:4b:20:8d: 1c:fa:e2:bd:14:40:26:ae:d2:86:96:99:0e:a1:dd: 1d:5d:81:f7:df:6d:1f:7e:ed:44:41:21:6e:da:69: 5b:2d:0a:c2:52:25:e5:a9:f9:f2:39:ed:6a:a8:6f: 71:de:86:36:96:88:a9:15:cf:c2:41:fb:66:e1:d8: f7:a0:12:c6:81:6f:36:4a:ce:94:19:59:5c:e9:af: 3d:35:2c:13:46:76:1f:c4:80:be:09:9a:5b:7f:b8: 4c:c7:31:e5:75:23:3b:08:46:c1:24:da:f2:ba:50: 6e:47:b8:e5:f2:f4:1b:ff:d8:06:08:07:96:44:51: 85:9f:7a:3f:e5:69:a7:26:6c:79:a8:a7:aa:22:7a: e2:68:88:7b:7f:e3:00:1b:9f:fa:d5:8c:92:3f:1a: bb:be:2c:72:50:f3:23:74:0c:c4:71:d8:67:39:13: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:34:C9:D8:A6:E0:D8:2D:6A:65:27:2E:41:40:B5:E1:F8:4A:AF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa89434-1668-3bef-96b2-afe2988b06ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:49:b4:b0:e2:a8:25:4c:6b:94:78:9e:bf:dc:c9:0b:db:6d: 17:5a:1d:e4:ca:04:68:56:b8:ed:b3:e2:91:01:39:3a:74:42: bc:2b:3f:b9:39:23:a0:aa:16:a8:d7:c8:91:0f:e8:3d:86:c5: 1d:a7:9d:73:b5:9e:3f:9b:54:cd:f0:b1:39:3d:d4:31:22:c1: fa:7d:b9:92:f8:4a:af:5d:66:06:77:60:d7:c2:ef:c5:15:43: 87:52:9f:a9:2d:cc:96:b2:b1:cb:3d:ef:49:dc:26:7c:ea:33: 20:4c:2b:96:1f:56:79:3c:b5:84:f1:7d:ae:fc:96:b0:ec:8f: 8b:f7:ca:fc:a7:4d:92:e0:6f:d8:c3:e0:f3:50:9b:55:0e:45: 75:69:85:8a:1a:4b:50:da:91:29:7c:fb:83:81:41:dc:8d:f7: da:6c:95:df:03:4a:2f:2f:4e:10:03:25:2c:07:3c:37:70:b1: a2:ff:7e:8d:42:1f:58:13:f2:40:15:d3:ec:ca:47:d8:0d:c2: 72:54:a1:af:50:d7:9b:56:51:7a:5c:0f:71:c1:23:b8:94:09: 4c:42:44:96:47:60:62:18:a3:f3:1e:48:86:5c:03:a9:72:cb: af:a9:8a:32:19:77:d7:53:21:f1:4d:a1:ec:4b:30:7b:d3:c9: 04:7a:99:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEpXCwANdwMuBUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWY2MjExNmMtODRjYi00ZjY4LWI4NzUtYTM3N2JhMWUyM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmX80/WHlqUols25FAHD5X/fuNPLwoE/Bpiu zBLFiMJwpQOU33gByHjZYzSK78diiTEqKr+OE9gJDu0UpElbboDu+ApPuRYb6PoA 9+KUU405TrBkfd5LII0c+uK9FEAmrtKGlpkOod0dXYH3320ffu1EQSFu2mlbLQrC UiXlqfnyOe1qqG9x3oY2loipFc/CQftm4dj3oBLGgW82Ss6UGVlc6a89NSwTRnYf xIC+CZpbf7hMxzHldSM7CEbBJNryulBuR7jl8vQb/9gGCAeWRFGFn3o/5WmnJmx5 qKeqInriaIh7f+MAG5/61YySPxq7vixyUPMjdAzEcdhnORMNYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw0ydim4NgtamUnLkFAteH4Sq/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFhODk0MzQtMTY2OC0z YmVmLTk2YjItYWZlMjk4OGIwNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINJtLDiqCVMa5R4nr/cyQvbbRdaHeTKBGhWuO2z4pEBOTp0QrwrP7k5 I6CqFqjXyJEP6D2GxR2nnXO1nj+bVM3wsTk91DEiwfp9uZL4Sq9dZgZ3YNfC78UV Q4dSn6ktzJayscs970ncJnzqMyBMK5YfVnk8tYTxfa78lrDsj4v3yvynTZLgb9jD 4PNQm1UORXVphYoaS1DakSl8+4OBQdyN99psld8DSi8vThADJSwHPDdwsaL/fo1C H1gT8kAV0+zKR9gNwnJUoa9Q15tWUXpcD3HBI7iUCUxCRJZHYGIYo/MeSIZcA6ly y6+pijIZd9dTIfFNoexLMHvTyQR6mc8= -----END CERTIFICATE-----Generated at Tue Sep 22 16:49:26 2026 by rpki-client