$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa File: 23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa (raw, json) Hash identifier: UXgYl/+Nw3F75cf5O9kIsGFAAHnffdd7qjybFfHt9Bo= Subject key identifier: 38:1F:DE:CB:1C:DF:87:FA:91:D3:6F:DA:9C:12:4D:47:8F:83:75:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE282722BF95F93C1D33CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:82:72:2b:f9:5f:93:c1:d3:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=b13f6c8d-ce4e-401b-94c4-c0a36c2fe843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:09:a5:22:67:df:25:56:a0:84:54:28:50: 47:1d:53:33:a5:24:e6:e9:85:b9:52:d2:65:ba:fa: 2b:34:26:8e:f2:d5:a3:46:d8:be:66:aa:88:03:78: dc:a3:a7:29:a9:8d:a5:bb:7b:89:1e:99:68:cd:df: f9:9d:db:74:79:81:7f:6c:32:0f:02:fd:c7:31:e8: db:8e:7b:8d:0d:22:eb:9e:09:8f:98:30:7e:18:9f: a6:4d:62:07:0b:4c:bc:b7:0c:c9:f6:54:c3:b1:a3: d7:49:48:1f:68:46:03:26:19:5c:f0:8f:b6:46:1d: 66:2d:0b:e9:13:81:e2:f1:10:d4:5d:b1:26:42:c1: 30:d1:b8:7d:75:3e:ba:e0:1c:ac:e6:a6:f1:a3:63: 87:03:2d:20:8a:a7:85:5c:20:7d:85:5e:ea:4b:db: da:f4:68:32:9c:33:d9:83:ab:83:5c:75:20:fc:d2: e0:0d:c4:fa:1b:f7:03:ed:ee:ff:6c:a5:e7:db:c6: ba:dd:9f:3c:0a:7b:af:e7:06:18:4a:ff:e5:61:72: 86:b1:16:64:9a:50:bf:91:d0:bc:34:ac:5d:ac:b4: 2f:f7:bc:ae:5c:18:1d:c4:1e:1c:37:fb:43:97:f8: 4f:00:6e:24:ad:28:6d:4a:aa:37:74:e5:e7:61:bf: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1F:DE:CB:1C:DF:87:FA:91:D3:6F:DA:9C:12:4D:47:8F:83:75:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b636a6-e3a1-35ea-a6ca-b3f79e97d088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f0:a2:e9:1e:61:f0:69:86:7e:96:73:6c:b5:8c:de:3e:07: a5:23:45:bf:f4:e6:c3:90:7a:24:62:44:b0:36:9f:a2:52:24: 59:14:37:a4:3b:d3:03:a6:90:4c:f3:c0:f7:e1:fc:75:eb:e2: c1:2c:bb:4c:1d:22:13:bc:14:bd:f0:bc:2e:d4:3e:46:bf:0b: 76:52:80:70:b3:7a:f2:68:81:89:ce:10:74:dd:88:4f:2a:7b: 93:d4:6b:ee:2f:a9:5b:e3:0e:dd:76:cd:5c:60:a2:3a:13:9f: f4:b5:e2:70:ca:d3:51:f6:23:09:1e:fc:d6:cf:d0:15:e2:45: 5b:cb:7b:86:3f:bb:fc:2f:ea:66:ca:ca:99:72:4b:e3:1d:5d: 23:db:87:2d:1d:7a:f3:36:d3:1c:33:ef:8e:08:55:2b:b9:b2: f3:65:1c:8c:63:02:11:07:1c:f2:c4:3f:55:a3:a8:2a:79:ed: 8c:97:27:25:8e:30:1e:0d:69:f8:20:79:a1:53:32:ca:ba:b2: b4:e3:7f:4e:cb:7d:11:a5:b1:64:29:b0:27:53:33:68:6f:48: 65:fd:cf:ce:43:f1:7b:d7:67:55:f7:0c:4b:8e:a5:a1:c2:b3: 05:40:71:92:e2:b4:c6:c5:54:7a:60:26:3a:c5:bf:20:1c:43: 13:03:b2:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oJyK/lfk8HTPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YjEzZjZjOGQtY2U0ZS00MDFiLTk0YzQtYzBhMzZjMmZlODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQgJpSJn3yVWoIRUKFBHHVMzpSTm6YW5UtJl uvorNCaO8tWjRti+ZqqIA3jco6cpqY2lu3uJHplozd/5ndt0eYF/bDIPAv3HMejb jnuNDSLrngmPmDB+GJ+mTWIHC0y8twzJ9lTDsaPXSUgfaEYDJhlc8I+2Rh1mLQvp E4Hi8RDUXbEmQsEw0bh9dT664Bys5qbxo2OHAy0giqeFXCB9hV7qS9va9GgynDPZ g6uDXHUg/NLgDcT6G/cD7e7/bKXn28a63Z88Cnuv5wYYSv/lYXKGsRZkmlC/kdC8 NKxdrLQv97yuXBgdxB4cN/tDl/hPAG4krShtSqo3dOXnYb9LHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgf3ssc34f6kdNv2pwSTUePg3XzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNiNjM2YTYtZTNhMS0z NWVhLWE2Y2EtYjNmNzllOTdkMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTwoukeYfBphn6Wc2y1jN4+B6UjRb/05sOQeiRiRLA2n6JSJFkUN6Q7 0wOmkEzzwPfh/HXr4sEsu0wdIhO8FL3wvC7UPka/C3ZSgHCzevJogYnOEHTdiE8q e5PUa+4vqVvjDt12zVxgojoTn/S14nDK01H2Iwke/NbP0BXiRVvLe4Y/u/wv6mbK yplyS+MdXSPbhy0devM20xwz744IVSu5svNlHIxjAhEHHPLEP1WjqCp57YyXJyWO MB4NafggeaFTMsq6srTjf07LfRGlsWQpsCdTM2hvSGX9z85D8XvXZ1X3DEuOpaHC swVAcZLitMbFVHpgJjrFvyAcQxMDssw= -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:14 2026 by rpki-client