$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/698aaa88-ba52-3b02-ade0-e21a7bc73d0c.roa File: 698aaa88-ba52-3b02-ade0-e21a7bc73d0c.roa (raw, json) Hash identifier: RtEDs/wj+k3Epo9S/sHXA0ksuhZioeNVSQPZXy1DEmw= Subject key identifier: D6:4B:05:53:AF:1B:CF:65:F3:0E:A5:6C:F1:64:9F:C7:B2:2D:84:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE2B3925E7D89628481DFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/698aaa88-ba52-3b02-ade0-e21a7bc73d0c.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b3:92:5e:7d:89:62:84:81:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=52217202-de6b-45e3-b007-5c2d9c2ca3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:eb:6a:f9:74:cb:dc:ea:a2:d1:65:6c:30:d3: 89:1b:75:92:51:91:cd:ce:f5:99:b6:bc:c5:cc:6e: fb:3a:60:ae:fa:d0:45:9f:7d:2c:f4:01:3f:0c:d4: 12:ee:0a:81:80:48:dc:e0:8d:6b:d0:de:24:a8:2e: ff:7f:c7:4e:a3:8f:77:0b:5a:58:48:f3:88:d6:6e: 1a:e4:a9:51:ba:e6:7d:ab:68:ab:10:82:fc:cc:58: 49:79:c2:f5:d9:89:2e:f8:e0:b3:8f:9c:32:fc:91: 4c:82:ff:7b:bf:ef:64:fc:11:23:26:5c:99:4c:5f: 67:1b:00:9d:9e:f4:24:c1:8a:60:3d:8b:b7:13:d1: 9d:1b:68:57:23:69:fe:e8:5c:03:45:83:25:59:b4: 79:7c:40:f1:fa:04:b8:01:a0:45:cf:60:d6:bd:00: 4f:1c:c8:dc:f9:ae:8b:58:00:1b:db:b6:96:db:81: e0:e9:b8:1d:5a:bc:6e:37:82:42:b3:2d:c9:5a:f2: 39:e4:ad:ff:c0:3e:6e:79:05:a0:08:68:c5:9c:3f: 21:6a:de:7f:0b:64:08:0d:83:71:d4:7c:ea:76:d5: b7:42:1e:c1:41:0e:a7:11:96:2f:b4:10:83:6a:12: 9b:45:15:2d:99:8a:1d:99:8e:f5:07:55:67:2b:23: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:05:53:AF:1B:CF:65:F3:0E:A5:6C:F1:64:9F:C7:B2:2D:84:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/698aaa88-ba52-3b02-ade0-e21a7bc73d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b2:18:bb:28:d4:65:dc:28:97:84:c2:ca:f7:78:9a:46:d7: ad:52:71:87:41:2e:70:b2:47:36:d4:cb:39:b7:4d:59:fb:5e: 8b:5f:a1:c4:cd:8b:69:21:fc:0b:3e:33:41:59:8c:9a:48:09: 0c:e1:ff:e3:16:c6:ad:c1:82:d2:8e:5d:a6:b2:3b:83:14:18: 27:7f:1f:62:2c:c6:ca:3a:2d:5d:c2:02:13:33:1a:56:a3:f9: c4:53:bd:e5:80:03:85:79:0b:fc:8b:58:c6:54:05:41:f7:bf: e9:1a:b9:dd:b7:49:4f:cd:d3:44:d9:4f:5a:02:26:94:0a:f4: ae:8a:d2:5b:37:88:e8:5c:9a:1b:fa:da:90:71:9a:a2:0a:12: 54:2e:21:49:f1:94:72:f5:38:40:46:54:75:a0:b3:ed:f9:38: 34:a8:35:e7:c6:95:7f:55:fe:e2:59:56:bf:3a:29:68:c2:ed: 05:b6:f9:90:91:f7:83:37:49:bd:8d:33:a0:48:f8:88:39:0b: 44:aa:3d:44:73:14:35:f7:9e:30:e1:21:a5:45:80:e7:85:a8: 97:98:19:d4:01:39:4a:64:9b:1d:78:e4:01:00:42:b2:28:d3: 93:02:32:5c:7c:e8:84:79:2a:ad:19:04:90:59:27:ac:f6:f3: 3a:42:49:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rOSXn2JYoSB38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NTIyMTcyMDItZGU2Yi00NWUzLWIwMDctNWMyZDljMmNhM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjutq+XTL3Oqi0WVsMNOJG3WSUZHNzvWZtrzF zG77OmCu+tBFn30s9AE/DNQS7gqBgEjc4I1r0N4kqC7/f8dOo493C1pYSPOI1m4a 5KlRuuZ9q2irEIL8zFhJecL12Yku+OCzj5wy/JFMgv97v+9k/BEjJlyZTF9nGwCd nvQkwYpgPYu3E9GdG2hXI2n+6FwDRYMlWbR5fEDx+gS4AaBFz2DWvQBPHMjc+a6L WAAb27aW24Hg6bgdWrxuN4JCsy3JWvI55K3/wD5ueQWgCGjFnD8hat5/C2QIDYNx 1HzqdtW3Qh7BQQ6nEZYvtBCDahKbRRUtmYodmY71B1VnKyNwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZLBVOvG89l8w6lbPFkn8eyLYS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjk4YWFhODgtYmE1Mi0z YjAyLWFkZTAtZTIxYTdiYzczZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWyGLso1GXcKJeEwsr3eJpG161ScYdBLnCyRzbUyzm3TVn7XotfocTN i2kh/As+M0FZjJpICQzh/+MWxq3BgtKOXaayO4MUGCd/H2Isxso6LV3CAhMzGlaj +cRTveWAA4V5C/yLWMZUBUH3v+kaud23SU/N00TZT1oCJpQK9K6K0ls3iOhcmhv6 2pBxmqIKElQuIUnxlHL1OEBGVHWgs+35ODSoNefGlX9V/uJZVr86KWjC7QW2+ZCR 94M3Sb2NM6BI+Ig5C0SqPURzFDX3njDhIaVFgOeFqJeYGdQBOUpkmx145AEAQrIo 05MCMlx86IR5Kq0ZBJBZJ6z28zpCSVk= -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:46 2026 by rpki-client