$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa File: 214fea33-50f7-3e4a-a684-32bb0c924857.roa (raw, json) Hash identifier: wI8yIxzm1tlUV5aY6HIb3N/K24GDN/e4pSHoStM6X6U= Subject key identifier: 53:DE:D9:4B:0F:B2:D0:4D:FE:F8:FF:01:A6:8C:F8:71:4F:D1:E0:CD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9D4A5EC5353AB95C48888D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 22773 IP address blocks: 68.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:5e:c5:35:3a:b9:5c:48:88:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=1c6e2a41-65c4-4d22-8e75-e7a5ad83493f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:1f:54:a8:dd:42:ad:c3:86:4a:a3:07:f8: bd:6b:a3:08:d1:f1:ed:5b:fe:a4:ef:09:2a:1c:13: 78:0b:a0:d5:6c:d5:53:67:d5:f2:d9:ce:e8:7e:a5: 8c:3e:8f:c5:57:af:90:d2:45:51:29:8b:36:be:57: 43:c0:75:05:e9:12:cb:c0:19:2c:db:48:1e:a7:6f: b2:9a:f4:d8:58:b8:f6:9c:32:e7:45:06:77:0f:69: a3:99:83:13:5e:4c:2a:5c:d1:20:fb:b6:1a:7d:76: 2b:c3:b1:96:9d:2d:8a:2c:03:3f:cc:04:65:42:ee: fd:26:e5:25:62:38:bb:55:0b:75:93:61:d2:36:c6: 2f:cd:89:92:ac:48:4f:58:f3:d4:67:69:b9:58:c7: b3:88:d6:11:17:b5:38:6a:40:1e:6f:62:51:47:3e: 8e:21:29:b9:17:c8:4f:99:04:57:db:72:cf:3f:50: 21:ed:9e:ed:36:c5:0d:63:2e:ea:c2:4b:51:bc:d0: b5:67:46:05:5c:58:a1:8e:c1:36:59:e6:4a:45:97: bf:30:4b:3b:ef:67:b7:66:cc:4f:d7:48:dd:49:ff: e5:1e:6b:47:76:14:d8:09:32:d2:f1:2f:c0:ce:ff: f4:60:a8:5e:a5:55:47:d6:81:26:33:08:14:b9:d8: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DE:D9:4B:0F:B2:D0:4D:FE:F8:FF:01:A6:8C:F8:71:4F:D1:E0:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214fea33-50f7-3e4a-a684-32bb0c924857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:00:c4:42:5c:69:99:c0:54:5d:98:49:9d:8c:2b:c8:2f:77: 37:13:9b:e9:f6:7f:f3:f5:e0:5d:68:97:f2:9a:47:25:a0:38: 52:ec:d7:cc:7d:ee:75:23:43:f0:93:26:d3:df:dd:1e:0e:4c: 2e:0b:35:c1:02:64:5b:d0:d2:9f:80:e6:79:0a:68:78:24:5f: a7:2e:1a:e8:db:20:42:89:9b:9b:79:64:d3:55:90:86:b9:67: 9b:3f:1e:5b:1d:a2:1e:9d:87:b1:87:af:b6:bd:5b:42:4c:69: ee:ce:fa:52:be:8b:46:5e:e7:66:8f:d2:01:20:4a:f6:76:14: 72:4e:3c:50:4f:73:88:59:45:d4:32:61:7b:54:cf:9a:12:8e: 20:58:12:37:c4:dd:84:fd:43:55:b2:af:c3:17:93:a5:b6:5b: 8b:a5:9e:13:5a:20:17:81:09:b4:05:57:19:84:51:17:27:b1: 28:2a:24:94:4d:92:bc:b6:e0:01:5a:21:5b:1a:cf:d1:74:9f: 46:94:ff:9e:c6:fc:93:b6:8f:71:ae:c4:a8:03:ba:b0:58:d1: 17:e1:59:fd:37:7e:1f:0d:a7:2b:b7:fe:ba:d2:8b:0d:67:52: 6d:a4:95:36:09:3a:f2:92:41:bf:de:6d:fe:d5:b4:0a:3f:d7: eb:c9:e2:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSl7FNTq5XEiIjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MWM2ZTJhNDEtNjVjNC00ZDIyLThlNzUtZTdhNWFkODM0OTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR8fVKjdQq3DhkqjB/i9a6MI0fHtW/6k7wkq HBN4C6DVbNVTZ9Xy2c7ofqWMPo/FV6+Q0kVRKYs2vldDwHUF6RLLwBks20gep2+y mvTYWLj2nDLnRQZ3D2mjmYMTXkwqXNEg+7YafXYrw7GWnS2KLAM/zARlQu79JuUl Yji7VQt1k2HSNsYvzYmSrEhPWPPUZ2m5WMeziNYRF7U4akAeb2JRRz6OISm5F8hP mQRX23LPP1Ah7Z7tNsUNYy7qwktRvNC1Z0YFXFihjsE2WeZKRZe/MEs772e3ZsxP 10jdSf/lHmtHdhTYCTLS8S/Azv/0YKhepVVH1oEmMwgUudgQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPe2UsPstBN/vj/AaaM+HFP0eDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE0ZmVhMzMtNTBmNy0z ZTRhLWE2ODQtMzJiYjBjOTI0ODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgAxEJcaZnAVF2YSZ2MK8gvdzcTm+n2f/P14F1ol/KaRyWgOFLs18x9 7nUjQ/CTJtPf3R4OTC4LNcECZFvQ0p+A5nkKaHgkX6cuGujbIEKJm5t5ZNNVkIa5 Z5s/Hlsdoh6dh7GHr7a9W0JMae7O+lK+i0Ze52aP0gEgSvZ2FHJOPFBPc4hZRdQy YXtUz5oSjiBYEjfE3YT9Q1Wyr8MXk6W2W4ulnhNaIBeBCbQFVxmEURcnsSgqJJRN kry24AFaIVsaz9F0n0aU/57G/JO2j3GuxKgDurBY0RfhWf03fh8Npyu3/rrSiw1n Um2klTYJOvKSQb/ebf7VtAo/1+vJ4to= -----END CERTIFICATE-----Generated at Tue Jul 28 21:44:16 2026 by rpki-client