$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa File: 2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa (raw, json) Hash identifier: R9R3N2AZ4Sb0O2Byo2lg4vDZAnUISpYI5cVF0xCsZEg= Subject key identifier: 58:23:A9:B6:4E:B3:CD:65:75:EC:95:24:90:FF:25:CF:0D:53:F6:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41127FF6EADCBFCA9299A880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:7f:f6:ea:dc:bf:ca:92:99:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=66e3dc70-4936-4e1e-bcf7-840594591f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:e2:d1:d4:ea:bb:42:47:79:37:d0:3f:ed: 6c:5d:e6:c1:77:cc:ba:e1:34:75:91:19:80:e7:e7: a7:d9:f9:e8:c2:c3:0a:8c:dc:d0:56:9d:7c:00:e9: d0:e9:36:5f:d3:02:cc:f0:0d:c7:0e:2d:a9:36:cc: c8:b1:2d:cf:b6:64:08:87:66:4d:c4:cb:b2:96:d7: 20:2c:0d:94:99:42:1b:eb:9f:ab:7f:fd:b0:0d:7f: 3f:6e:21:f8:50:d0:31:cf:11:00:ac:0a:96:94:84: cf:f3:28:16:ca:e1:bd:e8:d7:43:81:68:1a:35:dd: 2b:99:3e:0a:97:02:c6:40:93:3a:d1:b5:83:02:31: 15:3d:7f:9a:8c:f7:ac:9f:3d:c6:c9:98:08:24:65: da:fb:42:96:0c:ea:a9:93:5a:cd:b7:41:6a:69:60: fa:67:72:c4:9a:aa:9f:4a:85:81:8d:e7:11:b3:1d: 58:8e:79:4c:35:ea:c0:6e:7e:b6:ae:7e:b3:30:fe: dd:2d:99:db:d7:0e:da:87:42:41:a2:d9:b3:1d:07: 1f:aa:5e:43:4f:24:b8:9c:c8:0b:4f:70:93:84:b4: 7a:89:7e:12:3e:5b:df:c9:b1:d1:74:a4:c8:fa:e7: 3c:0e:54:ac:df:86:9a:c8:f4:e7:2b:eb:9c:e3:27: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:23:A9:B6:4E:B3:CD:65:75:EC:95:24:90:FF:25:CF:0D:53:F6:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d1:46:b6:e6:0e:ad:49:72:dd:61:ea:6b:27:fd:5d:69:75: 18:19:8c:6a:b9:e8:8e:05:aa:20:d0:7e:13:c9:5a:a6:41:d4: ac:80:23:9e:5f:b2:64:80:ba:59:ba:61:cb:71:f2:ec:49:31: a4:4f:21:a5:db:f5:38:1a:b4:3a:ae:dc:59:14:34:ee:62:ff: fc:6c:fa:82:41:41:25:7e:e7:c6:a3:cb:63:92:0c:8a:16:c2: 4a:c4:76:00:4d:01:32:bc:7a:19:5f:04:f3:ac:98:99:a8:db: c7:56:6d:6f:ed:7b:05:ad:b0:3f:27:a1:a3:e7:a4:b5:76:6a: 91:42:18:bc:9f:af:be:51:3c:6d:b2:0d:eb:a6:55:f5:59:e8: be:9a:2e:4e:90:eb:54:34:de:06:a7:17:b1:06:62:36:c8:38: fd:ee:19:f8:e1:b9:d9:fe:b9:7f:39:fb:fb:ff:d7:6b:72:af: c0:f9:b8:cd:46:77:d9:a2:a1:ec:14:5d:5f:e5:2a:c2:5b:88: 58:ea:13:0d:f5:f4:f4:89:da:39:9d:01:07:6e:ff:21:5c:2b: 72:60:70:e6:d0:24:34:ec:ca:70:80:8c:44:88:d1:cc:cf:a8: 42:6c:ee:50:37:e1:cb:45:85:e0:21:1a:11:dd:6b:bd:dd:63: bd:a9:c4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEn/26ty/ypKZqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NjZlM2RjNzAtNDkzNi00ZTFlLWJjZjctODQwNTk0NTkxZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Li0dTqu0JHeTfQP+1sXebBd8y64TR1kRmA 5+en2fnowsMKjNzQVp18AOnQ6TZf0wLM8A3HDi2pNszIsS3PtmQIh2ZNxMuyltcg LA2UmUIb65+rf/2wDX8/biH4UNAxzxEArAqWlITP8ygWyuG96NdDgWgaNd0rmT4K lwLGQJM60bWDAjEVPX+ajPesnz3GyZgIJGXa+0KWDOqpk1rNt0FqaWD6Z3LEmqqf SoWBjecRsx1YjnlMNerAbn62rn6zMP7dLZnb1w7ah0JBotmzHQcfql5DTyS4nMgL T3CThLR6iX4SPlvfybHRdKTI+uc8DlSs34aayPTnK+uc4ydTlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgjqbZOs81ldeyVJJD/Jc8NU/YyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJhMjllMmItOWY1My0z MjhlLThhYmMtYTJlZjJmMzcxODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnRRrbmDq1Jct1h6msn/V1pdRgZjGq56I4FqiDQfhPJWqZB1KyAI55f smSAulm6Yctx8uxJMaRPIaXb9TgatDqu3FkUNO5i//xs+oJBQSV+58ajy2OSDIoW wkrEdgBNATK8ehlfBPOsmJmo28dWbW/tewWtsD8noaPnpLV2apFCGLyfr75RPG2y DeumVfVZ6L6aLk6Q61Q03ganF7EGYjbIOP3uGfjhudn+uX85+/v/12tyr8D5uM1G d9mioewUXV/lKsJbiFjqEw319PSJ2jmdAQdu/yFcK3JgcObQJDTsynCAjESI0czP qEJs7lA34ctFheAhGhHda73dY72pxEg= -----END CERTIFICATE-----Generated at Wed Sep 23 19:51:33 2026 by rpki-client