$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/230028db-3e9f-361e-a682-bef62b430b76.roa File: 230028db-3e9f-361e-a682-bef62b430b76.roa (raw, json) Hash identifier: KL6bEr1m75qY/qGgbraE1jHyaT9bXZ7cPGxz1e1d+h0= Subject key identifier: CF:0F:BB:4F:0C:1A:BB:BF:F4:1B:E3:17:B7:7E:F0:B9:C6:F4:F1:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD817A657341B5A17A6680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/230028db-3e9f-361e-a682-bef62b430b76.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:81:7a:65:73:41:b5:a1:7a:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=ff7ccf6c-984c-4824-9a08-56de7710efff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:b4:97:e4:6f:35:ac:e9:8c:0c:8a:76:c4: d6:2c:14:a6:be:f7:08:fc:31:f3:c7:b0:92:62:da: 8d:fe:bc:72:f3:69:42:6f:9e:07:90:e6:1c:d1:cd: 24:66:52:c9:21:de:3c:da:f0:43:da:db:5c:8d:76: 21:70:64:11:a4:22:90:3b:70:b5:ac:c9:3d:46:32: 70:03:52:99:f4:37:4b:84:b3:49:08:ce:a6:38:77: bb:a9:e4:ed:03:2f:f5:b4:e2:d5:b0:b2:58:3f:a1: 78:9c:d0:e5:47:4f:43:db:82:2b:c9:c8:ba:a4:6f: f4:d5:30:5b:c7:f9:5c:81:a8:d4:ee:80:86:91:fe: da:4c:fa:f4:1b:bd:fe:2f:a5:77:19:b0:34:55:14: 22:2a:dc:47:90:6d:9d:34:da:2a:e3:d4:6d:38:eb: 59:83:96:7c:e5:d5:87:04:46:f7:c9:23:97:63:16: 33:15:c9:df:7c:58:f2:bf:7c:e4:eb:a4:9b:95:18: db:2e:bc:fd:42:ec:11:64:da:0f:00:3a:4f:49:a9: c7:f1:4c:2e:34:2b:b5:d0:a7:f6:f4:3e:7e:ec:c7: 7c:8b:c5:94:bd:e9:d1:fb:08:0b:4c:80:01:4d:1a: fc:8e:36:16:7a:1a:e2:86:c3:51:c3:c1:67:cc:ec: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:BB:4F:0C:1A:BB:BF:F4:1B:E3:17:B7:7E:F0:B9:C6:F4:F1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/230028db-3e9f-361e-a682-bef62b430b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:64:dd:0c:50:85:34:43:80:1c:51:e3:e6:ab:89:cd:48:82: ff:35:9f:02:b0:71:97:36:8f:84:41:8d:de:75:60:94:c1:47: 92:aa:8f:da:eb:0e:7c:df:d2:4f:2e:00:ce:6a:2b:3b:78:94: 95:e7:b7:08:94:58:97:6d:e0:48:4e:1f:4e:38:b7:60:11:ec: b4:3f:40:6a:14:14:ac:66:61:e5:9c:d4:a1:7f:ee:f9:fa:7a: 12:5b:40:43:37:0d:71:63:6c:55:61:56:8f:bf:bb:b7:1a:bf: d9:15:a5:6d:8c:b9:93:b6:59:fe:a5:d8:36:4c:c8:9d:d8:31: 54:a9:b4:56:00:a3:c7:1b:e2:2c:c2:22:bd:30:e6:9e:47:90: 6f:1d:41:c4:4f:e2:28:86:d0:d0:f5:1c:ac:aa:81:c6:e5:00: 17:6a:ae:c7:28:b5:4b:6a:5c:8a:90:05:02:0c:a5:87:be:0a: 15:e0:0f:ff:31:d5:96:c8:df:5c:ba:05:77:56:25:53:57:41: 29:0f:3c:ef:e8:4e:ee:3d:c2:7d:61:5b:26:4c:61:de:df:60: 2d:84:07:fa:ff:b0:3b:24:ee:99:5a:7f:e6:3f:f2:65:9f:91: a3:f3:8a:6d:88:4c:64:2b:87:17:36:89:77:a9:2c:26:0f:a2: e3:ee:d6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYF6ZXNBtaF6ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmY3Y2NmNmMtOTg0Yy00ODI0LTlhMDgtNTZkZTc3MTBlZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVq0l+RvNazpjAyKdsTWLBSmvvcI/DHzx7CS YtqN/rxy82lCb54HkOYc0c0kZlLJId482vBD2ttcjXYhcGQRpCKQO3C1rMk9RjJw A1KZ9DdLhLNJCM6mOHe7qeTtAy/1tOLVsLJYP6F4nNDlR09D24Iryci6pG/01TBb x/lcgajU7oCGkf7aTPr0G73+L6V3GbA0VRQiKtxHkG2dNNoq49RtOOtZg5Z85dWH BEb3ySOXYxYzFcnffFjyv3zk66SblRjbLrz9QuwRZNoPADpPSanH8UwuNCu10Kf2 9D5+7Md8i8WUvenR+wgLTIABTRr8jjYWehrihsNRw8FnzOxPmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8Pu08MGru/9BvjF7d+8LnG9PGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMwMDI4ZGItM2U5Zi0z NjFlLWE2ODItYmVmNjJiNDMwYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZk3QxQhTRDgBxR4+aric1Igv81nwKwcZc2j4RBjd51YJTBR5Kqj9rr Dnzf0k8uAM5qKzt4lJXntwiUWJdt4EhOH044t2AR7LQ/QGoUFKxmYeWc1KF/7vn6 ehJbQEM3DXFjbFVhVo+/u7cav9kVpW2MuZO2Wf6l2DZMyJ3YMVSptFYAo8cb4izC Ir0w5p5HkG8dQcRP4iiG0ND1HKyqgcblABdqrscotUtqXIqQBQIMpYe+ChXgD/8x 1ZbI31y6BXdWJVNXQSkPPO/oTu49wn1hWyZMYd7fYC2EB/r/sDsk7plaf+Y/8mWf kaPzim2ITGQrhxc2iXepLCYPouPu1s4= -----END CERTIFICATE-----Generated at Fri Sep 25 16:22:28 2026 by rpki-client