$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/522bfd84-2773-397f-bedc-ddb87685bc83.roa File: 522bfd84-2773-397f-bedc-ddb87685bc83.roa (raw, json) Hash identifier: enegbNqqK3zVz4E3dfg1ePuqk4X4KCVF/mbi7Aoa4Xc= Subject key identifier: A9:3A:D1:62:6E:05:4C:9D:02:20:A8:90:05:1A:F0:33:6C:73:FF:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD896DF65923E656EC6840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/522bfd84-2773-397f-bedc-ddb87685bc83.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.98.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:89:6d:f6:59:23:e6:56:ec:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=35ecf865-e13f-47bc-8c8f-ae0f4f5b163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:ce:43:66:e2:6e:68:59:eb:a9:a1:bd:8b: 53:cf:a3:2e:43:2d:53:55:ef:45:bd:e0:fa:8f:a4: 55:4f:b3:4f:9b:c6:0b:81:bf:15:45:f8:26:96:b4: cb:0d:b5:b8:df:9e:b9:fb:e2:18:ba:94:24:38:39: 24:c8:1f:21:9b:18:9d:18:49:ba:fe:2a:40:6a:41: f9:9b:b7:3f:e9:05:b1:9b:2d:de:1d:75:12:a9:f2: f9:05:c5:61:65:d8:79:14:54:84:6d:98:82:1f:f0: c9:3b:89:20:73:e3:8c:bc:60:03:fc:5e:73:8b:32: 82:34:43:c4:87:59:b9:b7:fb:6b:1b:b8:f7:f0:81: 25:f2:f5:ef:ad:ea:af:70:03:73:c4:6b:3c:e7:97: df:5d:7d:96:d9:dc:76:2d:8a:0b:d8:bb:6d:a3:d2: 32:59:b6:7b:a8:b7:47:90:3d:2f:49:ef:bf:35:7f: 73:31:31:de:8d:e0:0b:42:e2:1b:3e:60:15:7f:ca: c4:ac:e9:61:0b:6e:20:47:16:0f:cd:bf:07:42:1f: 66:69:2b:e0:e9:4d:56:a5:9e:7f:f0:4b:5f:de:8e: cc:9e:3b:db:22:c6:5f:39:05:b8:6b:92:53:2f:49: 21:da:d6:92:7b:f2:98:36:f6:25:95:a2:16:86:12: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3A:D1:62:6E:05:4C:9D:02:20:A8:90:05:1A:F0:33:6C:73:FF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/522bfd84-2773-397f-bedc-ddb87685bc83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:48:09:4d:b1:85:85:eb:1d:59:a8:d2:e6:c0:92:64:69:03: 97:4a:73:81:56:03:70:5f:22:14:6d:6c:84:0b:ad:f2:60:06: e3:0d:33:48:40:59:76:da:29:52:a3:b5:12:1e:d7:9a:5e:9b: f2:32:43:f4:e1:0f:26:b5:02:5a:53:85:39:60:e9:b6:86:fd: 91:cb:ac:b5:8d:4a:00:c0:15:2d:4a:a7:99:8e:07:21:6d:97: 86:f8:15:a1:65:a4:a1:c8:df:b3:d9:2d:6c:4e:d7:85:c6:ab: 95:c3:39:f6:55:6c:b5:24:5f:ec:87:30:6f:36:75:45:19:27: 1a:db:54:67:52:5b:2b:9c:41:78:6a:82:9b:c9:bb:0e:13:88: 20:d4:7a:d5:ec:21:a5:b4:78:35:c1:97:2c:a8:fa:ae:99:e5: de:9c:7d:b0:19:85:52:5f:56:94:2a:a9:98:d8:d0:59:78:94: ed:c6:b3:11:ca:48:9b:4e:53:26:c2:ae:b9:a7:9b:eb:9e:cc: 99:39:2c:2e:fb:91:b6:30:83:3f:fa:bc:fe:fd:c1:07:a2:b9: 0c:cb:79:a8:e9:ff:df:9d:16:fb:af:e8:e5:cd:a7:d6:9d:e3: b0:c9:c8:24:b8:a2:48:6b:f4:56:be:59:d1:fd:58:be:d9:ed: cd:02:7b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYlt9lkj5lbsaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MzVlY2Y4NjUtZTEzZi00N2JjLThjOGYtYWUwZjRmNWIxNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8zOQ2bibmhZ66mhvYtTz6MuQy1TVe9FveD6 j6RVT7NPm8YLgb8VRfgmlrTLDbW43565++IYupQkODkkyB8hmxidGEm6/ipAakH5 m7c/6QWxmy3eHXUSqfL5BcVhZdh5FFSEbZiCH/DJO4kgc+OMvGAD/F5zizKCNEPE h1m5t/trG7j38IEl8vXvreqvcANzxGs855ffXX2W2dx2LYoL2Ltto9IyWbZ7qLdH kD0vSe+/NX9zMTHejeALQuIbPmAVf8rErOlhC24gRxYPzb8HQh9maSvg6U1WpZ5/ 8Etf3o7MnjvbIsZfOQW4a5JTL0kh2taSe/KYNvYllaIWhhLGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk60WJuBUydAiCokAUa8DNsc/+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTIyYmZkODQtMjc3My0z OTdmLWJlZGMtZGRiODc2ODViYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9ICU2xhYXrHVmo0ubAkmRpA5dKc4FWA3BfIhRtbIQLrfJgBuMNM0hA WXbaKVKjtRIe15pem/IyQ/ThDya1AlpThTlg6baG/ZHLrLWNSgDAFS1Kp5mOByFt l4b4FaFlpKHI37PZLWxO14XGq5XDOfZVbLUkX+yHMG82dUUZJxrbVGdSWyucQXhq gpvJuw4TiCDUetXsIaW0eDXBlyyo+q6Z5d6cfbAZhVJfVpQqqZjY0Fl4lO3GsxHK SJtOUybCrrmnm+uezJk5LC77kbYwgz/6vP79wQeiuQzLeajp/9+dFvuv6OXNp9ad 47DJyCS4okhr9Fa+WdH9WL7Z7c0CezA= -----END CERTIFICATE-----Generated at Thu Sep 24 21:26:24 2026 by rpki-client