$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b38c72c-4949-3da0-8260-972471400b8e.roa File: 1b38c72c-4949-3da0-8260-972471400b8e.roa (raw, json) Hash identifier: 9tpu6jxe0/hLeoxcbdIN3wqTBihJCkP5HzEB8onky78= Subject key identifier: 22:64:4C:90:1D:65:36:CF:C7:C9:5C:94:2C:B3:51:C8:9B:5D:87:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD80C1862EE5361B4A8D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b38c72c-4949-3da0-8260-972471400b8e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:80:c1:86:2e:e5:36:1b:4a:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=bc5c3c05-ebf9-4193-a805-9e730d5e98ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:14:b4:b6:b2:db:92:c8:5c:c7:e7:2c:bf: 1a:ca:d5:0e:46:d8:c0:25:fc:2c:34:56:bc:5a:10: c7:a8:d7:ae:7a:c1:f0:71:1a:6f:83:06:0b:68:38: ae:6d:47:a7:50:19:3b:e0:1f:29:cd:61:2d:b3:01: ea:6c:01:56:82:5f:81:3b:58:96:b3:67:49:21:78: dc:3a:7c:67:56:6e:6e:75:36:7d:60:08:67:93:15: 4d:0a:3f:29:2d:3f:b7:c3:86:b8:7c:f3:0d:ef:70: 59:0f:1d:0d:1d:0e:ba:2f:64:27:64:16:e9:ee:86: 81:76:c5:75:24:e2:32:ce:fc:47:0b:76:68:61:68: 97:7d:db:dd:da:de:39:86:3b:71:54:11:bd:ba:1f: 12:2b:71:89:99:d8:87:6e:a0:12:d2:00:5a:80:5c: b3:2c:1d:50:6b:b3:ac:4b:33:03:66:50:30:09:1a: 32:3a:2e:72:60:28:e0:39:05:c8:b2:e8:b9:bc:49: 49:ec:9a:fc:57:a2:39:8f:6d:9a:ed:1f:43:93:fb: e0:42:8c:aa:47:2e:3b:aa:03:a4:d6:10:d2:41:a2: 90:5b:00:06:2f:e6:d8:70:75:4d:80:31:61:d7:dc: 47:00:ec:93:43:e6:a0:e4:6e:47:ce:cb:cd:f6:ef: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:64:4C:90:1D:65:36:CF:C7:C9:5C:94:2C:B3:51:C8:9B:5D:87:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b38c72c-4949-3da0-8260-972471400b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ed:9a:39:b7:7c:e8:2c:de:33:40:60:45:14:f8:56:c9:05: ad:db:d6:5e:91:c1:46:ab:c3:3e:89:d1:f4:8a:98:eb:e7:0c: c9:33:20:bb:0b:bc:73:c8:3e:b5:b4:3d:66:2b:04:f5:3e:a5: 63:f2:12:90:ee:37:2c:24:51:ca:6b:25:69:dc:fe:b3:ae:ba: 04:c6:c3:fa:7b:83:4d:49:9f:ef:5b:8e:52:0d:d8:2f:f5:dd: 1c:ba:bd:a5:c2:6c:85:5b:3c:ed:cd:f3:a1:f1:0b:70:2f:1d: 84:78:d1:87:52:ad:8a:f3:90:1d:54:eb:93:62:9f:cc:fb:80: 5a:ff:d8:07:4c:2c:c0:44:f9:c4:31:5a:e6:f0:39:3d:34:5e: 4e:77:ab:f2:ea:65:6c:1c:79:f5:6b:c4:5c:f9:07:cf:6c:09: e7:f0:d1:c1:06:43:c3:59:b4:a6:eb:41:29:bf:18:3d:3c:da: c9:60:4d:15:9f:47:17:81:74:29:df:f2:9a:18:27:ce:2a:ed: f9:20:c2:dd:28:33:56:9f:c9:6a:69:0e:fb:d6:b6:cf:d1:87: 6c:c0:95:c1:c6:ff:4b:a0:99:2e:b5:4b:2c:af:b2:00:8a:ce: 4e:d8:d8:5c:91:fc:88:3a:bb:a3:0d:8d:b3:5b:c5:60:11:19: e7:26:7f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYDBhi7lNhtKjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YmM1YzNjMDUtZWJmOS00MTkzLWE4MDUtOWU3MzBkNWU5OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9sUtLay25LIXMfnLL8aytUORtjAJfwsNFa8 WhDHqNeuesHwcRpvgwYLaDiubUenUBk74B8pzWEtswHqbAFWgl+BO1iWs2dJIXjc OnxnVm5udTZ9YAhnkxVNCj8pLT+3w4a4fPMN73BZDx0NHQ66L2QnZBbp7oaBdsV1 JOIyzvxHC3ZoYWiXfdvd2t45hjtxVBG9uh8SK3GJmdiHbqAS0gBagFyzLB1Qa7Os SzMDZlAwCRoyOi5yYCjgOQXIsui5vElJ7Jr8V6I5j22a7R9Dk/vgQoyqRy47qgOk 1hDSQaKQWwAGL+bYcHVNgDFh19xHAOyTQ+ag5G5HzsvN9u/RRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJkTJAdZTbPx8lclCyzUcibXYd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWIzOGM3MmMtNDk0OS0z ZGEwLTgyNjAtOTcyNDcxNDAwYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRANIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbtmjm3fOgs3jNAYEUU+FbJBa3b1l6RwUarwz6J0fSKmOvnDMkzILsL vHPIPrW0PWYrBPU+pWPyEpDuNywkUcprJWnc/rOuugTGw/p7g01Jn+9bjlIN2C/1 3Ry6vaXCbIVbPO3N86HxC3AvHYR40YdSrYrzkB1U65Nin8z7gFr/2AdMLMBE+cQx WubwOT00Xk53q/LqZWwcefVrxFz5B89sCefw0cEGQ8NZtKbrQSm/GD082slgTRWf RxeBdCnf8poYJ84q7fkgwt0oM1afyWppDvvWts/Rh2zAlcHG/0ugmS61SyyvsgCK zk7Y2FyR/Ig6u6MNjbNbxWARGecmf8c= -----END CERTIFICATE-----Generated at Sun Sep 27 03:00:39 2026 by rpki-client