$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa File: 020c3c8f-8831-3fe1-88b6-126bf2096e89.roa (raw, json) Hash identifier: 2w9LuumWcMhktZyhzvjOdjiCi8fBKUqujQ93bpAQAq0= Subject key identifier: D0:69:24:02:97:19:7A:05:4F:34:73:60:F6:5B:D5:0D:32:71:5B:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3CE2958000C86B9BCBE66700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.2.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:95:80:00:c8:6b:9b:cb:e6:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=a8d28fcb-7cc0-4267-a73e-65a34b546120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:a8:bb:f1:00:fc:71:dc:c3:a7:d6:c4:5d: 6d:51:a3:82:0a:77:2b:b4:99:b0:37:3a:0e:5d:d6: cc:a5:6d:da:6a:0c:74:45:fb:37:46:37:c1:22:80: fe:df:18:ab:ac:db:9b:2d:e6:42:a9:3c:99:06:98: b3:0a:2a:73:fc:22:3d:63:02:15:69:42:38:85:32: b8:a1:14:36:b9:e0:8e:e7:da:b9:cf:10:12:4a:5d: 58:0c:37:4c:be:4b:48:1a:21:2a:32:8d:e7:1a:62: 1a:fb:27:aa:83:38:05:0c:8d:52:a6:5d:a8:c9:3e: bd:5f:d9:89:03:f8:b2:ae:a5:0f:21:f2:f9:0f:78: 67:97:f5:d1:73:d6:78:c8:b2:24:c4:c8:ae:81:d6: 10:42:c3:63:76:cb:be:0a:37:b1:46:ea:d2:b8:de: cb:32:5b:c6:97:7e:b2:dd:36:43:6c:46:07:7d:c8: 0c:2e:dd:ba:4f:07:0a:c8:e2:f3:30:48:36:cb:bd: 81:df:83:99:c1:0c:96:36:89:3f:20:6e:f8:44:ff: f2:5e:2f:d3:30:fb:23:87:72:03:c9:21:77:7e:fb: 6c:60:55:c3:4e:cd:61:71:05:06:7d:c7:7e:25:71: 0b:60:51:8a:b0:50:4a:38:a7:e1:b0:4d:b8:d3:c9: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:69:24:02:97:19:7A:05:4F:34:73:60:F6:5B:D5:0D:32:71:5B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:94:07:12:bd:3a:f3:0c:db:f7:d4:2a:ea:66:0f:73:f7:e8: 56:4f:c6:53:b1:01:21:54:d3:8d:50:70:5b:f2:1a:14:76:23: 73:5b:69:f5:2f:be:2d:27:5c:ec:59:e4:dd:8f:4d:04:b9:95: 51:12:93:80:19:df:46:52:ca:95:8f:07:df:b2:c4:83:99:70: e5:66:fc:c6:d1:69:f3:3e:3a:31:43:df:8b:40:d0:a8:65:e5: 48:d8:4c:74:b7:60:fa:f0:19:5d:81:d2:fd:a5:81:11:6e:79: ee:72:2a:66:e9:f4:42:98:4a:16:cb:b4:56:41:a0:3a:48:ec: bc:b6:2f:fe:b4:b0:ff:de:2b:70:ad:2e:df:3b:96:66:31:8e: 90:25:e2:ba:d5:c3:35:16:f8:d0:01:e8:87:69:39:f0:f5:0d: 78:d4:e0:cc:19:5b:c2:90:e3:d5:34:73:18:88:76:fa:49:c1: cb:de:b8:dd:76:6a:38:2f:1f:91:69:20:34:55:05:35:35:ea: e4:20:6a:94:09:5d:8c:fc:f0:a2:e2:74:ca:5e:3b:57:4a:c8: a5:ef:cc:6a:1c:46:52:c1:90:29:e0:4e:ce:cf:2b:d8:a0:46: 3b:4b:25:7e:d3:6f:42:3c:d8:7e:53:4c:a6:f4:72:28:eb:a7: 40:8c:88:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pWAAMhrm8vmZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YThkMjhmY2ItN2NjMC00MjY3LWE3M2UtNjVhMzRiNTQ2MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDuou/EA/HHcw6fWxF1tUaOCCncrtJmwNzoO XdbMpW3aagx0Rfs3RjfBIoD+3xirrNubLeZCqTyZBpizCipz/CI9YwIVaUI4hTK4 oRQ2ueCO59q5zxASSl1YDDdMvktIGiEqMo3nGmIa+yeqgzgFDI1Spl2oyT69X9mJ A/iyrqUPIfL5D3hnl/XRc9Z4yLIkxMiugdYQQsNjdsu+CjexRurSuN7LMlvGl36y 3TZDbEYHfcgMLt26TwcKyOLzMEg2y72B34OZwQyWNok/IG74RP/yXi/TMPsjh3ID ySF3fvtsYFXDTs1hcQUGfcd+JXELYFGKsFBKOKfhsE2408kTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBpJAKXGXoFTzRzYPZb1Q0ycVseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDIwYzNjOGYtODgzMS0z ZmUxLTg4YjYtMTI2YmYyMDk2ZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOUBxK9OvMM2/fUKupmD3P36FZPxlOxASFU041QcFvyGhR2I3NbafUv vi0nXOxZ5N2PTQS5lVESk4AZ30ZSypWPB9+yxIOZcOVm/MbRafM+OjFD34tA0Khl 5UjYTHS3YPrwGV2B0v2lgRFuee5yKmbp9EKYShbLtFZBoDpI7Ly2L/60sP/eK3Ct Lt87lmYxjpAl4rrVwzUW+NAB6IdpOfD1DXjU4MwZW8KQ49U0cxiIdvpJwcveuN12 ajgvH5FpIDRVBTU16uQgapQJXYz88KLidMpeO1dKyKXvzGocRlLBkCngTs7PK9ig RjtLJX7Tb0I82H5TTKb0cijrp0CMiHs= -----END CERTIFICATE-----Generated at Thu Sep 24 11:35:40 2026 by rpki-client