$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa File: 5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa (raw, json) Hash identifier: PVXcQV8vrRbkjMQy2C1+GB2h+jXZqRgV58nl9xclTYU= Subject key identifier: CE:1F:06:1D:56:97:01:4A:4B:C9:69:BC:E5:6C:96:9B:1A:58:47:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F94D32D9B9C6B89DA23DD8000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 22773 IP address blocks: 68.227.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:2d:9b:9c:6b:89:da:23:dd:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=ad59c50c-c697-4b10-baea-325af2f88d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:41:43:5c:55:e4:de:1b:d0:86:51:e2:d5: f5:23:bf:26:29:57:0b:b5:61:04:6c:2f:27:7e:7b: d7:9b:69:f4:5b:4f:82:6a:80:0b:4d:f6:3d:72:0e: 27:53:97:ce:16:4a:7d:94:bf:4b:11:df:24:c8:c2: dc:89:95:ec:f6:2c:c0:a3:fa:48:cd:14:03:d1:0c: 31:8a:30:bc:dc:d8:73:09:d6:b4:31:1a:ba:f9:81: 4c:c3:74:d7:2b:74:b6:f1:a3:ff:28:fe:d9:25:41: 1d:e4:35:1c:08:bc:6e:a4:04:3f:cf:c0:20:25:8e: 7f:48:e5:93:93:7c:49:20:b3:a1:5f:ef:2a:e6:5a: fb:73:1c:70:73:46:99:96:4e:42:be:b2:24:44:fd: 02:95:08:e6:db:17:e5:61:02:e5:f0:fc:82:0a:df: e7:a9:e6:a2:bc:e8:49:82:c2:ef:fa:59:a7:15:28: 08:89:59:05:f6:60:e2:92:e4:75:0a:b5:5f:ae:92: 1c:3d:0c:3e:d5:b0:69:ec:81:13:c7:3e:c3:9b:b3: e1:d2:5a:c0:bb:50:10:79:bc:3f:f3:e0:9c:34:49: ac:ab:f4:d9:5a:58:6e:3e:3f:cb:1f:e0:4c:2b:b5: ef:0b:01:32:ad:06:58:74:fc:56:b4:d2:49:07:01: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1F:06:1D:56:97:01:4A:4B:C9:69:BC:E5:6C:96:9B:1A:58:47:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d9:08:aa:6e:18:c1:76:b3:8e:b5:f8:13:99:f4:4f:ad:49: e2:00:13:4e:aa:31:9e:32:05:78:3a:58:d1:03:44:f5:0f:14: 97:30:4e:6d:27:87:99:32:ff:cc:34:7d:5d:9e:b2:a2:ab:d3: d9:7f:33:0a:5b:68:02:1c:24:97:79:72:e3:6c:ab:02:b4:be: 52:23:bc:f6:c4:a0:60:a3:09:4a:bd:cc:4a:8f:ad:ec:9e:d0: 91:83:bc:d7:e2:e3:4a:3b:b9:09:a2:d1:a5:61:d6:cc:c6:8e: fb:c6:57:81:59:a7:fa:47:b9:c6:ee:07:ff:8e:66:c5:a4:8a: 57:f8:86:b9:b4:3f:e5:5c:74:f9:f9:3b:64:b6:d1:e8:8a:b8: 8f:2e:55:7c:a7:60:3d:b5:a9:d4:21:6e:d2:22:1f:c7:0b:a4: 8e:15:c5:2e:fd:f4:97:ae:61:df:dd:11:24:15:99:74:43:80: 97:eb:93:3c:25:40:6c:48:5b:21:a9:aa:8f:8a:59:2b:af:70: 01:fe:1e:66:d5:22:8c:a2:23:49:79:f1:7f:e3:47:c2:57:0a: bf:76:e2:1e:c0:51:b4:f5:b6:72:96:80:34:a8:6a:e4:f7:66: 9e:3d:32:19:70:aa:64:f9:59:66:d7:74:94:2b:0a:f6:e9:27: 44:6f:16:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0y2bnGuJ2iPdgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YWQ1OWM1MGMtYzY5Ny00YjEwLWJhZWEtMzI1YWYyZjg4ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx9BQ1xV5N4b0IZR4tX1I78mKVcLtWEEbC8n fnvXm2n0W0+CaoALTfY9cg4nU5fOFkp9lL9LEd8kyMLciZXs9izAo/pIzRQD0Qwx ijC83NhzCda0MRq6+YFMw3TXK3S28aP/KP7ZJUEd5DUcCLxupAQ/z8AgJY5/SOWT k3xJILOhX+8q5lr7cxxwc0aZlk5CvrIkRP0ClQjm2xflYQLl8PyCCt/nqeaivOhJ gsLv+lmnFSgIiVkF9mDikuR1CrVfrpIcPQw+1bBp7IETxz7Dm7Ph0lrAu1AQebw/ 8+CcNEmsq/TZWlhuPj/LH+BMK7XvCwEyrQZYdPxWtNJJBwHaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4fBh1WlwFKS8lpvOVslpsaWEfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWE3NmUxMWMtZTFmYy0z MGE3LWI4ZDctMzI1NjNiOWNlNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/ZCKpuGMF2s461+BOZ9E+tSeIAE06qMZ4yBXg6WNEDRPUPFJcwTm0n h5ky/8w0fV2esqKr09l/MwpbaAIcJJd5cuNsqwK0vlIjvPbEoGCjCUq9zEqPreye 0JGDvNfi40o7uQmi0aVh1szGjvvGV4FZp/pHucbuB/+OZsWkilf4hrm0P+VcdPn5 O2S20eiKuI8uVXynYD21qdQhbtIiH8cLpI4VxS799JeuYd/dESQVmXRDgJfrkzwl QGxIWyGpqo+KWSuvcAH+HmbVIoyiI0l58X/jR8JXCr924h7AUbT1tnKWgDSoauT3 Zp49MhlwqmT5WWbXdJQrCvbpJ0RvFvw= -----END CERTIFICATE-----Generated at Sun Nov 15 13:02:45 2026 by rpki-client