$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa File: 214fea33-50f7-3e4a-a684-32bb0c924857.roa (raw, json) Hash identifier: wxgEd7tef/M1XJYD7Tpk0w8Rak0waUm9WediTdQjXqQ= Subject key identifier: 5E:16:16:92:24:23:E4:B6:3F:17:09:53:FF:4C:FF:69:5C:57:99:33 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F3FAD2A2B061464BCF6E2AE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 68.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2a:2b:06:14:64:bc:f6:e2:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=8c2a8fca-3f98-42b5-8cb4-85ff9f16641f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:9e:1e:2a:d4:7b:07:d8:c2:4d:bb:8f:35: d0:8a:e5:fc:e2:51:ba:dc:b3:87:16:f1:d0:6d:27: e7:6a:2a:cf:9d:e5:9b:65:cf:f9:d1:c3:ee:99:18: cb:81:5e:5b:72:6d:19:c9:3d:da:e7:38:25:b8:dd: 19:33:00:35:4d:b8:6e:80:7e:ab:6d:19:0b:9d:da: 61:5f:15:67:d6:9c:83:98:b6:b2:62:99:fc:5f:d7: 54:d6:ce:38:c5:c8:87:c9:50:76:62:80:81:dd:61: ed:a3:01:7e:e3:a1:c0:5f:e1:eb:c6:a0:26:48:65: 7f:ea:fc:38:73:79:cf:57:d1:e6:eb:30:80:2e:38: 22:67:55:b8:54:18:1f:da:6d:4e:5f:57:b4:c9:79: 6c:dc:66:c3:97:52:39:43:a9:17:61:be:2d:36:5b: 33:8e:b5:32:9c:0c:17:fd:b2:1f:5f:58:80:77:57: dc:0b:49:dc:a3:a6:c6:a5:96:ff:a7:95:d4:46:e6: 1a:1f:01:84:86:d5:00:90:29:c0:d9:95:86:ba:c4: 3e:ec:60:2a:e8:1e:f9:2b:d4:82:54:1b:01:83:15: f7:bb:a6:79:63:77:10:17:20:91:3a:15:cf:79:83: 56:69:f2:fb:d9:e0:24:5d:04:5d:b3:48:18:20:ae: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:16:16:92:24:23:E4:B6:3F:17:09:53:FF:4C:FF:69:5C:57:99:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:06:b4:c6:81:e3:5e:a1:56:59:b7:78:c6:ea:f2:7b:55:5d: a6:e6:52:7a:db:fa:4f:c9:ef:a9:c7:39:21:01:c7:2e:c5:11: 65:f1:09:60:53:82:a2:c3:d4:08:1c:18:1d:eb:84:5b:20:88: bb:03:b2:e9:5f:28:9e:18:ab:b8:31:29:de:95:47:6e:e4:67: 79:78:7f:90:a9:f2:b8:a0:5a:ef:ea:71:80:74:2c:d1:4e:87: c4:4b:e1:b5:33:1f:49:6e:28:a0:c6:6e:80:96:b0:c4:b6:a7: 2c:c5:ce:9b:cd:ff:ad:fe:91:75:ef:62:d2:43:f7:e7:78:76: 43:63:ac:1e:e7:e0:55:fe:13:a7:fa:fb:87:69:d1:fe:57:4d: 07:a8:b8:1d:60:e0:7b:45:c7:91:76:3b:1d:d4:ce:c0:12:da: 34:47:4c:e3:ab:63:5b:17:27:0f:98:86:45:84:e3:09:db:8e: f0:7d:ce:1b:a6:30:7f:48:f5:a3:40:e0:6c:66:49:68:4a:70: 0c:aa:25:f5:49:8d:e9:86:21:24:9d:fe:b4:05:e8:e9:10:3f: 1c:86:e8:b2:44:02:be:3d:fe:8e:66:7f:13:6b:01:8b:82:75: a2:cf:b8:28:87:a8:30:df:bf:ab:e6:cf:e2:f7:6c:0b:55:ca: 0d:11:73:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSorBhRkvPbirgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OGMyYThmY2EtM2Y5OC00MmI1LThjYjQtODVmZjlmMTY2NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpqeHirUewfYwk27jzXQiuX84lG63LOHFvHQ bSfnairPneWbZc/50cPumRjLgV5bcm0ZyT3a5zgluN0ZMwA1TbhugH6rbRkLndph XxVn1pyDmLayYpn8X9dU1s44xciHyVB2YoCB3WHtowF+46HAX+HrxqAmSGV/6vw4 c3nPV9Hm6zCALjgiZ1W4VBgf2m1OX1e0yXls3GbDl1I5Q6kXYb4tNlszjrUynAwX /bIfX1iAd1fcC0nco6bGpZb/p5XURuYaHwGEhtUAkCnA2ZWGusQ+7GAq6B75K9SC VBsBgxX3u6Z5Y3cQFyCROhXPeYNWafL72eAkXQRds0gYIK68YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4WFpIkI+S2PxcJU/9M/2lcV5kzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE0ZmVhMzMtNTBmNy0z ZTRhLWE2ODQtMzJiYjBjOTI0ODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8GtMaB416hVlm3eMbq8ntVXabmUnrb+k/J76nHOSEBxy7FEWXxCWBT gqLD1AgcGB3rhFsgiLsDsulfKJ4Yq7gxKd6VR27kZ3l4f5Cp8rigWu/qcYB0LNFO h8RL4bUzH0luKKDGboCWsMS2pyzFzpvN/63+kXXvYtJD9+d4dkNjrB7n4FX+E6f6 +4dp0f5XTQeouB1g4HtFx5F2Ox3UzsAS2jRHTOOrY1sXJw+YhkWE4wnbjvB9zhum MH9I9aNA4GxmSWhKcAyqJfVJjemGISSd/rQF6OkQPxyG6LJEAr49/o5mfxNrAYuC daLPuCiHqDDfv6vmz+L3bAtVyg0Rc5o= -----END CERTIFICATE-----Generated at Tue Sep 22 21:09:46 2026 by rpki-client