$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/800ecaa7-b3f1-3043-86e3-18c2488250b0.roa File: 800ecaa7-b3f1-3043-86e3-18c2488250b0.roa (raw, json) Hash identifier: b4IATUwIYfci3C8JUQaHl0gjJtN0NFRiBZ9Oxo2bYU0= Subject key identifier: 6D:A5:8D:88:B4:FB:1C:14:EC:9F:8F:2E:47:2F:7A:42:9E:74:5A:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4AB6D0AFEF5AEDF0F3FD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/800ecaa7-b3f1-3043-86e3-18c2488250b0.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.98.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b6:d0:af:ef:5a:ed:f0:f3:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=6b8239f4-0ece-44be-b64a-47da87fec657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:8c:cd:69:2b:a1:9c:0c:c3:b4:e2:37:32: b0:61:7b:38:c3:37:a2:5c:12:97:26:4a:f2:67:3c: 5f:8c:02:0a:5d:67:ee:1c:61:1a:83:d2:24:b4:b7: d6:b8:1a:d7:f9:8d:c5:81:4d:3c:62:f7:27:bb:11: 6c:9f:2b:ec:ee:d7:fb:e0:17:af:8d:c4:4c:83:4f: 42:b1:d1:74:bd:3e:8d:4c:6b:fc:f8:73:b4:68:39: fd:93:ae:85:f0:d9:03:db:be:53:55:31:93:99:ff: 6a:2b:3f:83:e5:38:37:58:00:31:2f:57:b3:4b:8c: 36:d5:ac:38:d0:55:53:87:56:a4:c5:74:87:17:72: d4:6c:5f:e6:11:01:b8:fc:74:8e:80:6f:8d:aa:58: f7:0a:2d:d2:41:6c:c5:8c:1b:cc:5b:3b:2b:fb:df: 3a:46:67:41:bb:bf:68:17:2d:3f:b3:d0:32:f1:b1: a2:8b:c4:19:b8:5a:a5:05:7f:db:29:e8:8b:28:98: 18:63:f5:a2:65:8c:89:68:63:c8:1e:3a:eb:b7:06: 44:e9:e1:9c:21:ef:3f:7a:40:20:05:c8:74:c6:a9: b5:ef:83:60:b2:00:0a:d6:15:c6:f5:f3:ed:30:3f: 3c:f1:1e:bf:53:cc:ed:b8:ad:60:51:1c:0b:45:7e: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:8D:88:B4:FB:1C:14:EC:9F:8F:2E:47:2F:7A:42:9E:74:5A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/800ecaa7-b3f1-3043-86e3-18c2488250b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:5b:9f:e7:9e:09:77:30:d0:19:2f:d9:06:6a:3d:1c:cd:fc: f8:74:0f:9a:57:c0:59:e2:f1:01:40:ef:e4:7e:87:b2:47:29: b0:bf:72:35:15:0b:62:4e:70:1f:ac:e4:21:b1:f6:b1:d0:d3: 37:63:27:99:42:64:47:91:74:b3:1d:41:5b:af:50:e4:51:64: 1f:1e:5e:61:ff:46:d8:d0:e0:be:07:72:8a:65:4c:98:1f:77: 70:6a:0c:8c:22:66:20:bb:4a:1b:b1:58:87:17:55:89:8d:e8: 55:c8:2b:97:52:1d:43:32:26:66:25:7f:5d:a6:2e:d0:e9:78: c7:bd:99:ba:d5:a5:b8:92:12:3a:fd:a6:c7:56:67:80:27:c0: e6:01:d7:ac:41:92:6a:27:4b:7d:e2:dc:97:49:e0:fb:f0:bc: 65:62:c1:03:32:c0:ff:82:c6:90:ff:1c:8f:6c:04:d4:4e:fc: e9:e3:84:e7:2d:a3:2b:1f:7c:3b:b3:e6:b9:b4:d9:5e:37:92: b5:a4:3b:43:83:8a:3a:af:6c:b5:5a:7e:22:7d:64:3f:8c:77: aa:cc:01:98:d6:39:25:4f:26:dc:22:07:84:ed:96:96:1c:d3: bc:c9:9f:58:d3:5a:8b:7f:56:5f:34:7c:ed:66:2f:5f:52:66: 21:f9:7d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrbQr+9a7fDz/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NmI4MjM5ZjQtMGVjZS00NGJlLWI2NGEtNDdkYTg3ZmVjNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLOMzWkroZwMw7TiNzKwYXs4wzeiXBKXJkry ZzxfjAIKXWfuHGEag9IktLfWuBrX+Y3FgU08YvcnuxFsnyvs7tf74BevjcRMg09C sdF0vT6NTGv8+HO0aDn9k66F8NkD275TVTGTmf9qKz+D5Tg3WAAxL1ezS4w21aw4 0FVTh1akxXSHF3LUbF/mEQG4/HSOgG+Nqlj3Ci3SQWzFjBvMWzsr+986RmdBu79o Fy0/s9Ay8bGii8QZuFqlBX/bKeiLKJgYY/WiZYyJaGPIHjrrtwZE6eGcIe8/ekAg Bch0xqm174NgsgAK1hXG9fPtMD888R6/U8ztuK1gURwLRX4IrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2ljYi0+xwU7J+PLkcvekKedFqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODAwZWNhYTctYjNmMS0z MDQzLTg2ZTMtMThjMjQ4ODI1MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdbn+eeCXcw0Bkv2QZqPRzN/Ph0D5pXwFni8QFA7+R+h7JHKbC/cjUV C2JOcB+s5CGx9rHQ0zdjJ5lCZEeRdLMdQVuvUORRZB8eXmH/RtjQ4L4HcoplTJgf d3BqDIwiZiC7ShuxWIcXVYmN6FXIK5dSHUMyJmYlf12mLtDpeMe9mbrVpbiSEjr9 psdWZ4AnwOYB16xBkmonS33i3JdJ4PvwvGViwQMywP+CxpD/HI9sBNRO/OnjhOct oysffDuz5rm02V43krWkO0ODijqvbLVafiJ9ZD+Md6rMAZjWOSVPJtwiB4TtlpYc 07zJn1jTWot/Vl80fO1mL19SZiH5fac= -----END CERTIFICATE-----Generated at Sun Sep 20 17:47:03 2026 by rpki-client