$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33a9b052-87ad-3059-8505-306b91835c56.roa File: 33a9b052-87ad-3059-8505-306b91835c56.roa (raw, json) Hash identifier: 8kleTe0xpGCbFTzBrEAhcmzFnmpvsmZqLX91YCwvpD4= Subject key identifier: 6B:B8:84:BF:4C:56:FC:BD:B9:4D:A1:37:09:B3:F9:04:F3:D2:3B:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD87812CBC2AF87C1FCCB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33a9b052-87ad-3059-8505-306b91835c56.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:87:81:2c:bc:2a:f8:7c:1f:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=017a0a75-9a8f-468e-8520-7b648b4e598d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:9a:52:9d:a2:6a:c3:b6:10:88:1d:9e:27: 2f:87:58:18:45:aa:af:56:eb:ce:df:cb:cb:f0:ea: c4:50:07:41:74:e3:54:79:bd:d0:35:ed:07:a3:21: 8d:5b:11:a3:7a:81:3f:df:57:49:8e:e2:00:d9:fc: 8e:78:0e:2f:6f:0a:ef:13:1b:c8:c9:fb:5b:62:a8: d9:ba:92:e7:4a:f8:a5:a6:07:8e:ac:e5:95:b5:b8: d1:d7:61:23:06:d2:78:85:47:f4:32:13:df:14:2d: db:84:4e:46:39:de:75:79:19:3f:73:bf:1f:86:22: e8:27:11:71:b1:df:01:42:94:2b:89:78:24:68:ee: 8e:13:93:58:c9:a0:3c:06:a7:38:af:08:a0:b9:7c: 60:ca:30:6f:e2:e6:75:bb:86:5b:18:b2:39:d3:1c: 26:5b:3a:84:0f:dd:9f:16:a1:ae:53:b6:16:da:97: cf:eb:80:2c:93:de:de:96:b2:2d:2f:84:e8:df:18: dd:ce:58:c3:a2:26:1d:2c:5c:48:83:1f:c5:01:03: 64:c7:bd:68:7f:c2:9f:2a:f0:4c:67:53:7c:d2:0c: 97:ac:e5:11:ec:57:68:ab:bb:40:9e:e7:67:05:20: 82:3f:60:de:69:cc:3b:af:3d:69:15:61:e0:0b:bb: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B8:84:BF:4C:56:FC:BD:B9:4D:A1:37:09:B3:F9:04:F3:D2:3B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33a9b052-87ad-3059-8505-306b91835c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:60:ca:20:7f:fd:70:48:35:2b:c6:a0:63:24:35:00:77:6a: 27:2e:c1:97:46:88:12:5e:84:3c:64:77:8a:49:7f:1c:7e:d6: 3b:ad:07:97:68:03:6b:44:6e:ba:99:f1:4e:06:31:49:25:3f: 37:b7:62:ca:93:90:63:37:8d:9f:33:54:16:b1:dd:23:25:d9: e3:de:43:f3:04:47:f4:dc:5d:8a:be:b1:12:c8:34:3e:f5:76: a5:aa:17:a8:54:d0:b4:ca:c1:be:ef:1e:7d:51:83:62:3f:4a: 9d:ae:a5:d7:61:1b:56:91:38:f3:41:1f:97:e4:33:3e:1d:8d: 7d:62:64:61:bd:d4:3b:c1:e1:bc:42:b1:21:87:f5:1f:13:60: 65:d7:dc:ed:98:0c:7e:74:2d:8c:53:f4:af:d5:34:6b:58:41: 52:fb:47:01:69:18:0f:5a:63:b9:c4:85:aa:7e:73:fe:44:6c: ca:9e:1c:78:f3:ba:75:f9:df:0a:96:0f:de:00:d3:50:58:06: 5a:8b:31:c4:a8:59:a6:ba:8e:4b:8f:7c:fa:2c:ff:b5:d8:75: 18:35:38:66:d9:e1:4b:09:9d:b3:29:95:4e:ff:b5:c3:74:59: 06:c0:dd:82:7f:79:a0:b9:55:13:94:a6:20:46:48:3a:ba:18: e0:f6:1a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYeBLLwq+HwfzLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDE3YTBhNzUtOWE4Zi00NjhlLTg1MjAtN2I2NDhiNGU1OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nqaUp2iasO2EIgdnicvh1gYRaqvVuvO38vL 8OrEUAdBdONUeb3QNe0HoyGNWxGjeoE/31dJjuIA2fyOeA4vbwrvExvIyftbYqjZ upLnSvilpgeOrOWVtbjR12EjBtJ4hUf0MhPfFC3bhE5GOd51eRk/c78fhiLoJxFx sd8BQpQriXgkaO6OE5NYyaA8Bqc4rwiguXxgyjBv4uZ1u4ZbGLI50xwmWzqED92f FqGuU7YW2pfP64Ask97elrItL4To3xjdzljDoiYdLFxIgx/FAQNkx71of8KfKvBM Z1N80gyXrOUR7Fdoq7tAnudnBSCCP2Deacw7rz1pFWHgC7vQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu4hL9MVvy9uU2hNwmz+QTz0jtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNhOWIwNTItODdhZC0z MDU5LTg1MDUtMzA2YjkxODM1YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGI6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJgyiB//XBINSvGoGMkNQB3aicuwZdGiBJehDxkd4pJfxx+1jutB5do A2tEbrqZ8U4GMUklPze3YsqTkGM3jZ8zVBax3SMl2ePeQ/MER/TcXYq+sRLIND71 dqWqF6hU0LTKwb7vHn1Rg2I/Sp2upddhG1aROPNBH5fkMz4djX1iZGG91DvB4bxC sSGH9R8TYGXX3O2YDH50LYxT9K/VNGtYQVL7RwFpGA9aY7nEhap+c/5EbMqeHHjz unX53wqWD94A01BYBlqLMcSoWaa6jkuPfPos/7XYdRg1OGbZ4UsJnbMplU7/tcN0 WQbA3YJ/eaC5VROUpiBGSDq6GOD2Gj4= -----END CERTIFICATE-----Generated at Sat Sep 26 17:35:37 2026 by rpki-client