$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa File: 42560064-0659-32dc-a3b0-1a01cfca664e.roa (raw, json) Hash identifier: TQbihhHEhIEgjITKXtlrq3b3unzGSDTcbVoIco72//I= Subject key identifier: D2:44:67:DE:2F:9A:BE:73:FA:45:62:0A:18:B7:03:70:30:88:48:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD81ACCE03653C37957E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.0.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:81:ac:ce:03:65:3c:37:95:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=773e14d6-9e4c-4236-8f71-5a0d48f67c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:d1:90:a5:28:21:0a:fc:59:f2:49:84:f5: 16:ab:7e:9e:73:26:b4:f9:df:d0:24:88:79:99:db: 51:3e:0e:dc:c5:8b:a4:3a:8d:44:f0:d4:5a:ba:1f: 57:17:51:51:ce:75:63:fc:a7:2b:78:4f:90:d8:00: 64:58:1e:db:56:20:7f:a0:f6:0e:a0:77:02:36:4c: a9:42:7d:c3:42:c9:9d:b0:a1:ce:cc:d7:36:06:a0: 2a:ff:75:51:4e:16:2d:fb:33:c3:09:0c:7a:2b:b1: a4:11:2a:6a:96:fc:6c:b0:14:28:32:d8:ea:2b:44: f3:3e:fd:0d:5c:a4:50:d8:61:ac:85:2a:82:8a:78: e8:6e:b9:30:d8:52:c2:4a:62:c8:a2:ff:74:3f:50: a1:a5:ba:a5:20:cd:3c:80:83:8d:ed:0d:7e:7e:fa: 5c:ee:1c:c7:e7:b8:20:81:d4:9a:20:71:a3:88:a1: 69:20:a4:a8:fe:dd:95:f3:90:27:a9:c5:ac:57:12: d0:9c:8c:f5:2c:fa:de:d6:75:88:1f:ab:98:80:32: f2:d2:86:f6:28:b9:6c:66:22:b3:46:62:24:d4:ce: f0:bb:35:c4:97:65:50:26:ae:06:4b:74:8c:5b:ca: 4d:ab:59:c8:35:56:ed:36:b0:5e:d0:e5:91:bd:4f: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:44:67:DE:2F:9A:BE:73:FA:45:62:0A:18:B7:03:70:30:88:48:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c9:ad:91:40:65:ff:3f:d0:1f:64:47:a3:02:58:88:12:bb: 15:b6:30:d3:9a:92:28:ea:ec:61:dc:ae:e3:dd:b0:53:9c:dc: 88:b4:aa:8f:13:5d:b8:01:22:a7:b9:6a:4b:65:11:33:fb:a9: f8:14:b2:68:fd:f0:6c:54:e6:52:84:dd:5f:a2:fe:6f:59:a3: 57:f1:46:2a:4f:d8:3b:16:95:73:b1:10:cd:d9:67:d6:7f:15: 2f:db:1a:4d:19:8a:26:63:67:e1:38:24:ee:f0:cb:3a:43:74: 27:5e:1c:91:e4:b8:fb:08:1c:1d:9c:ad:ea:11:74:90:14:3d: 55:61:31:a3:67:d9:ed:46:b0:bc:37:d9:13:44:66:6c:e3:12: df:66:63:8f:9a:73:82:3d:4c:af:0c:bb:42:17:e5:cc:41:40: f9:87:d5:47:ab:16:a6:e4:ec:56:04:cf:10:f9:78:dc:df:f5: 42:d2:8f:b4:e3:d6:c0:de:c7:ba:d3:44:69:58:78:f5:69:0c: 60:54:40:4e:76:ab:fa:ee:5e:c0:47:ab:55:08:a7:32:ab:be: 07:ad:a4:c8:53:82:0c:58:f6:56:1c:af:55:07:17:5e:b6:7f: 26:d9:97:8d:15:49:db:6b:d6:16:27:1f:c7:19:77:b5:f6:ec: 02:3d:09:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYGszgNlPDeVfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NzczZTE0ZDYtOWU0Yy00MjM2LThmNzEtNWEwZDQ4ZjY3YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicLRkKUoIQr8WfJJhPUWq36ecya0+d/QJIh5 mdtRPg7cxYukOo1E8NRauh9XF1FRznVj/KcreE+Q2ABkWB7bViB/oPYOoHcCNkyp Qn3DQsmdsKHOzNc2BqAq/3VRThYt+zPDCQx6K7GkESpqlvxssBQoMtjqK0TzPv0N XKRQ2GGshSqCinjobrkw2FLCSmLIov90P1ChpbqlIM08gION7Q1+fvpc7hzH57gg gdSaIHGjiKFpIKSo/t2V85AnqcWsVxLQnIz1LPre1nWIH6uYgDLy0ob2KLlsZiKz RmIk1M7wuzXEl2VQJq4GS3SMW8pNq1nINVbtNrBe0OWRvU8xFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJEZ94vmr5z+kViChi3A3AwiEjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDI1NjAwNjQtMDY1OS0z MmRjLWEzYjAtMWEwMWNmY2E2NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrJrZFAZf8/0B9kR6MCWIgSuxW2MNOakijq7GHcruPdsFOc3Ii0qo8T XbgBIqe5aktlETP7qfgUsmj98GxU5lKE3V+i/m9Zo1fxRipP2DsWlXOxEM3ZZ9Z/ FS/bGk0ZiiZjZ+E4JO7wyzpDdCdeHJHkuPsIHB2creoRdJAUPVVhMaNn2e1GsLw3 2RNEZmzjEt9mY4+ac4I9TK8Mu0IX5cxBQPmH1UerFqbk7FYEzxD5eNzf9ULSj7Tj 1sDex7rTRGlYePVpDGBUQE52q/ruXsBHq1UIpzKrvgetpMhTggxY9lYcr1UHF162 fybZl40VSdtr1hYnH8cZd7X27AI9Cbg= -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:11 2026 by rpki-client