$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa File: 5d838612-1c08-3867-b2b3-267389ecdf04.roa (raw, json) Hash identifier: AR1lgC3hS7BgOhMt5oA7cv5gJdkXLxoYFEvsbhMOl/Q= Subject key identifier: C6:F8:26:1D:64:95:CD:83:94:D0:25:E5:22:59:6C:56:F3:45:4A:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD2C8D767C8C765E851D30 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.224.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:2c:8d:76:7c:8c:76:5e:85:1d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=dce799e4-c414-4964-9720-9cb50e658140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:f2:42:15:4f:40:89:3a:af:4d:93:40:d5: 15:d9:5a:dc:e0:a4:53:b5:78:0e:b3:62:d1:60:4d: c0:61:71:38:a3:e5:b3:27:72:24:26:54:88:5a:14: 72:e3:cc:4b:c4:37:33:60:b7:99:2d:19:f7:86:d6: 05:e2:a7:76:c7:79:73:8a:c9:fc:93:c0:fe:29:7f: b3:48:ed:2a:67:ef:a4:98:fd:de:7a:0a:7d:1b:fb: 99:81:e7:3e:ce:52:92:07:d4:14:dd:56:41:2d:0a: 53:84:62:52:dd:e1:fc:15:30:b1:40:3f:b8:df:0b: 49:b1:49:15:32:da:6b:f2:d0:dd:14:a4:ce:f2:61: b2:7a:d7:e5:17:21:99:83:56:43:26:db:68:c4:44: 05:72:9c:c4:05:c0:01:31:f3:3c:35:ff:ec:27:fd: f3:cb:3c:e6:6b:c6:42:33:1e:94:94:1f:10:f2:62: 23:74:ae:dc:8c:a9:78:fb:79:4e:2c:e1:67:46:ce: 7d:fa:3b:ba:57:a7:a3:26:b8:64:c2:14:d1:ea:0d: 95:17:97:ab:b4:ff:37:5d:f0:57:a5:85:e6:22:61: 09:ae:9c:e5:e6:73:99:da:67:00:12:28:40:ad:f4: f1:c5:98:33:4b:c1:19:21:db:22:6b:9d:41:9f:85: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F8:26:1D:64:95:CD:83:94:D0:25:E5:22:59:6C:56:F3:45:4A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e3:79:a0:12:f5:47:fc:a1:06:17:e9:d7:76:f9:c6:c2:5a: 32:fe:7b:b3:2c:28:98:63:a7:3a:fc:46:3d:a5:1c:8d:ff:4d: 81:64:43:7c:61:51:b9:07:da:b7:0c:38:44:88:b2:92:8c:b1: c4:36:f2:fb:f6:30:1b:7c:63:93:27:63:40:d7:33:ea:04:46: 9f:39:c5:a2:c8:36:2b:c5:a4:52:19:06:3f:aa:59:6a:cd:76: 6e:69:39:3f:d1:c5:fc:0a:5b:32:a6:9c:69:3e:1c:49:94:30: 6c:28:d6:72:df:2e:7c:be:c4:d4:ee:3f:66:e4:57:91:67:d1: a4:a2:36:13:cb:35:f7:fa:c2:ce:7c:81:75:77:46:3e:c8:ed: 54:43:e4:85:17:e6:02:ee:88:a7:d8:d6:3f:a5:17:35:3b:ab: fc:95:e6:1a:8f:96:6c:d4:3f:d1:15:55:c0:d9:c4:af:6a:7a: 8a:09:e2:fa:d5:48:65:e5:b0:b7:f1:68:a7:c5:f8:65:06:2d: 08:8d:78:0b:d7:1b:38:ea:24:5b:85:96:60:a7:73:e0:c5:c8: 7d:ba:44:c7:d7:52:ea:4b:af:c8:0b:0e:33:f6:d2:45:ad:8c: d3:6e:2c:ae:36:b4:30:d6:ba:36:be:91:5a:64:7c:63:55:91: 76:fe:87:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3SyNdnyMdl6FHTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGNlNzk5ZTQtYzQxNC00OTY0LTk3MjAtOWNiNTBlNjU4MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYTyQhVPQIk6r02TQNUV2Vrc4KRTtXgOs2LR YE3AYXE4o+WzJ3IkJlSIWhRy48xLxDczYLeZLRn3htYF4qd2x3lzisn8k8D+KX+z SO0qZ++kmP3eegp9G/uZgec+zlKSB9QU3VZBLQpThGJS3eH8FTCxQD+43wtJsUkV Mtpr8tDdFKTO8mGyetflFyGZg1ZDJttoxEQFcpzEBcABMfM8Nf/sJ/3zyzzma8ZC Mx6UlB8Q8mIjdK7cjKl4+3lOLOFnRs59+ju6V6ejJrhkwhTR6g2VF5ertP83XfBX pYXmImEJrpzl5nOZ2mcAEihArfTxxZgzS8EZIdsia51Bn4VvuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb4Jh1klc2DlNAl5SJZbFbzRUp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWQ4Mzg2MTItMWMwOC0z ODY3LWIyYjMtMjY3Mzg5ZWNkZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDjeaAS9Uf8oQYX6dd2+cbCWjL+e7MsKJhjpzr8Rj2lHI3/TYFkQ3xh UbkH2rcMOESIspKMscQ28vv2MBt8Y5MnY0DXM+oERp85xaLINivFpFIZBj+qWWrN dm5pOT/RxfwKWzKmnGk+HEmUMGwo1nLfLny+xNTuP2bkV5Fn0aSiNhPLNff6ws58 gXV3Rj7I7VRD5IUX5gLuiKfY1j+lFzU7q/yV5hqPlmzUP9EVVcDZxK9qeooJ4vrV SGXlsLfxaKfF+GUGLQiNeAvXGzjqJFuFlmCnc+DFyH26RMfXUupLr8gLDjP20kWt jNNuLK42tDDWuja+kVpkfGNVkXb+h30= -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:33 2026 by rpki-client