$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7367b08f-5f54-31d7-8688-93b77c5b73dd.roa File: 7367b08f-5f54-31d7-8688-93b77c5b73dd.roa (raw, json) Hash identifier: mspZtEphNIjtIQ00zB2FZUuUaJ0tqE9yCTLFm/XtpTY= Subject key identifier: 23:C3:BF:F0:F3:CD:E1:3D:73:3C:8E:3D:5A:E5:35:7D:67:00:A0:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112C88A5A8BDFEE988BEF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7367b08f-5f54-31d7-8688-93b77c5b73dd.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.230.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:c8:8a:5a:8b:df:ee:98:8b:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=9f1b2585-ce5e-401e-9d30-f179d74b2074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:37:b1:16:a9:9e:a1:88:ca:8e:9e:e5:fd: ca:55:cf:d3:92:7d:68:05:df:85:32:db:31:1b:14: 9d:5a:24:4a:5e:16:bb:3e:d9:b4:f8:3b:ae:39:54: 47:2c:95:88:2b:e1:4a:d9:bb:cf:c9:d8:49:d1:e6: b5:f6:ff:48:d4:24:1e:5b:0e:a3:44:b8:bf:45:bb: 46:00:f1:c5:ce:22:0c:dc:96:df:3b:ee:56:cd:54: 37:3e:ec:9c:f6:b8:b2:84:d6:17:91:88:bb:3c:9e: fd:62:74:d1:c4:a8:19:13:53:7e:a1:26:e8:a3:4c: f7:8b:49:1b:a9:c5:bf:1d:00:4a:49:3d:05:9f:1a: 7e:99:07:35:a1:f1:6b:5b:05:0b:51:00:a7:9a:14: d1:7b:90:73:23:74:1f:04:35:c8:51:7a:34:47:ed: dd:09:78:18:a7:c4:7f:57:79:c9:de:30:1c:e4:9f: 77:00:af:a8:d5:54:18:f5:10:ee:aa:8b:06:15:1e: 2b:dc:b7:b5:d6:65:99:60:2e:78:6b:85:4f:fd:90: 39:05:40:ea:26:a4:c4:62:de:f1:c1:08:79:1c:30: 41:3a:85:0a:22:f0:63:b6:91:83:b3:f4:24:87:37: 92:57:bc:85:ae:36:dd:b8:02:93:cb:51:11:0b:5d: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C3:BF:F0:F3:CD:E1:3D:73:3C:8E:3D:5A:E5:35:7D:67:00:A0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7367b08f-5f54-31d7-8688-93b77c5b73dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:46:c2:71:a4:fa:16:72:f5:b1:9f:3f:8e:01:6a:d6:a9:83: 9a:da:f9:22:9c:95:8d:69:3f:c7:77:3b:61:13:34:3a:59:33: 6e:c3:38:90:83:30:3a:20:6c:b2:f4:18:03:02:e6:9e:63:9b: 37:e8:fe:96:97:5b:0c:75:4d:52:6c:7d:b4:bd:e1:5f:d8:69: 0a:66:84:08:8d:b6:21:0e:2f:83:32:1a:b2:d9:d7:65:be:77: 75:a2:b7:b5:e5:b5:42:18:af:1f:5a:d6:d8:d3:7e:12:e8:9b: 88:d0:34:49:60:27:e8:dd:92:36:d9:e0:c3:cc:dc:ee:b2:8d: 5d:9a:90:8e:3b:9b:94:6f:79:42:5a:43:72:57:50:40:85:00: bf:f4:ee:d3:4c:86:b5:d7:79:3a:d9:51:7c:80:35:0e:9c:e6: 74:33:e0:5a:4c:bd:6b:71:5d:24:fd:60:bb:30:f0:ae:1d:cf: 35:7d:4a:3c:dd:ef:9b:79:b4:21:67:cf:7e:65:29:e3:66:fe: fa:db:5a:32:6d:8f:69:67:4d:84:54:df:20:73:cf:a4:0a:67: 97:68:4d:95:1b:1e:df:ac:7f:5d:21:f2:9f:bd:db:9f:48:00: 85:ce:6b:33:b3:d9:29:ac:5d:2e:c8:eb:80:4a:29:21:1d:4f: fc:c9:72:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsiKWovf7piL7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk OWYxYjI1ODUtY2U1ZS00MDFlLTlkMzAtZjE3OWQ3NGIyMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuE3sRapnqGIyo6e5f3KVc/Tkn1oBd+FMtsx GxSdWiRKXha7Ptm0+DuuOVRHLJWIK+FK2bvPydhJ0ea19v9I1CQeWw6jRLi/RbtG APHFziIM3JbfO+5WzVQ3Puyc9riyhNYXkYi7PJ79YnTRxKgZE1N+oSboo0z3i0kb qcW/HQBKST0Fnxp+mQc1ofFrWwULUQCnmhTRe5BzI3QfBDXIUXo0R+3dCXgYp8R/ V3nJ3jAc5J93AK+o1VQY9RDuqosGFR4r3Le11mWZYC54a4VP/ZA5BUDqJqTEYt7x wQh5HDBBOoUKIvBjtpGDs/QkhzeSV7yFrjbduAKTy1ERC11dqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPDv/DzzeE9czyOPVrlNX1nAKD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzM2N2IwOGYtNWY1NC0z MWQ3LTg2ODgtOTNiNzdjNWI3M2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJGwnGk+hZy9bGfP44Batapg5ra+SKclY1pP8d3O2ETNDpZM27DOJCD MDogbLL0GAMC5p5jmzfo/paXWwx1TVJsfbS94V/YaQpmhAiNtiEOL4MyGrLZ12W+ d3Wit7XltUIYrx9a1tjTfhLom4jQNElgJ+jdkjbZ4MPM3O6yjV2akI47m5RveUJa Q3JXUECFAL/07tNMhrXXeTrZUXyANQ6c5nQz4FpMvWtxXST9YLsw8K4dzzV9Sjzd 75t5tCFnz35lKeNm/vrbWjJtj2lnTYRU3yBzz6QKZ5doTZUbHt+sf10h8p+9259I AIXOazOz2SmsXS7I64BKKSEdT/zJcnA= -----END CERTIFICATE-----Generated at Thu Nov 5 20:00:14 2026 by rpki-client