$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20605175-4d6b-3bab-89c7-74c6ac46921f.roa File: 20605175-4d6b-3bab-89c7-74c6ac46921f.roa (raw, json) Hash identifier: EEG8v3B8S6gKEh1VyH1MOAk6Gz+mGk0/jF8KcEjVNig= Subject key identifier: 84:58:A3:14:B1:00:1D:6B:3C:F0:4B:A6:02:CC:29:01:D8:CA:49:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A5074B0CFA2B2080D340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20605175-4d6b-3bab-89c7-74c6ac46921f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 68.228.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a5:07:4b:0c:fa:2b:20:80:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e25e6c1c-a49f-4648-9ec0-ef3568c10f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6b:8d:4d:9c:6a:49:f8:77:a2:03:63:87:31: f1:ea:7b:33:8d:4a:d5:ba:e1:fb:6b:72:11:ad:39: 02:76:24:e7:51:fa:86:23:18:22:6a:87:29:35:d4: a6:6e:d3:03:2f:10:8a:b1:49:76:44:f4:fe:cf:02: 29:94:7f:d6:76:83:41:0d:aa:83:0f:4a:70:54:68: 87:17:6e:dc:75:9e:ad:d9:c0:cd:cd:05:0b:ef:e5: de:5e:e0:d2:31:d0:ae:b7:f6:43:d0:1e:ec:d1:13: 0c:94:f6:44:91:aa:b5:bb:0a:42:95:f8:b7:2d:d1: 0a:67:bb:6f:77:b7:ea:36:96:2c:61:1d:65:ff:8d: 81:b9:e8:da:71:b3:8e:21:7c:3f:28:e2:ed:a2:05: 24:13:9b:2b:05:75:14:fc:3a:bf:19:6f:cc:3e:16: fe:e2:d6:e6:6c:de:8a:b9:21:b6:d0:29:e1:ae:5d: af:3f:13:74:a6:57:d4:6d:03:e5:90:05:a4:68:5c: 84:13:b3:ed:2b:d7:2a:3e:b1:3a:da:fd:43:ee:0d: 06:07:34:82:62:0b:46:27:f8:0b:46:7d:20:e6:98: 23:2b:3d:3d:91:35:01:0b:17:df:01:5e:9e:fe:b1: de:10:08:2e:38:9f:5f:29:96:9d:a8:77:d1:ef:ba: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:A3:14:B1:00:1D:6B:3C:F0:4B:A6:02:CC:29:01:D8:CA:49:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20605175-4d6b-3bab-89c7-74c6ac46921f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:28:42:ca:c4:c5:e8:43:83:d2:0a:14:27:10:b3:2d:be:47: d0:23:87:d7:7f:73:af:12:a4:3a:f0:79:5d:5c:91:a6:3d:58: 95:a5:b2:47:fc:aa:96:76:51:a7:51:f0:74:11:96:0f:f7:52: 0a:69:40:a3:90:6e:76:01:2f:86:73:36:35:75:d5:fc:01:5d: dc:d6:c0:05:5d:25:0a:df:cb:63:f2:d1:92:9c:61:34:f5:33: be:5c:5a:64:00:7e:a9:d0:45:ed:78:61:a5:ce:08:b0:40:f2: 38:17:93:c2:58:9b:08:bf:d1:18:38:61:76:ce:4c:e2:02:9f: 34:aa:4b:a0:cf:1d:1b:e5:d8:62:1f:b4:cd:c9:fb:8c:73:93: 0c:dc:9c:66:05:f3:9c:7c:64:c1:42:84:da:db:4e:d2:2e:76: ff:83:4e:09:bd:5d:5e:80:4a:24:df:5d:94:4b:d8:bc:cb:c9: 5c:5f:ba:18:36:b6:30:d4:20:7f:43:f9:4b:f1:67:a8:9d:43: 4f:3e:4a:66:fa:df:55:db:34:1f:c2:93:9f:12:7c:e1:65:70: fe:99:b3:42:51:f3:47:9a:a1:56:91:d7:e5:b3:6a:33:08:fd: b3:8c:f0:4d:be:64:30:d2:6e:6b:45:db:cf:f5:84:f6:5f:f7: 3f:7d:d3:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqUHSwz6KyCA00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTI1ZTZjMWMtYTQ5Zi00NjQ4LTllYzAtZWYzNTY4YzEwZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWuNTZxqSfh3ogNjhzHx6nszjUrVuuH7a3IR rTkCdiTnUfqGIxgiaocpNdSmbtMDLxCKsUl2RPT+zwIplH/WdoNBDaqDD0pwVGiH F27cdZ6t2cDNzQUL7+XeXuDSMdCut/ZD0B7s0RMMlPZEkaq1uwpClfi3LdEKZ7tv d7fqNpYsYR1l/42BuejacbOOIXw/KOLtogUkE5srBXUU/Dq/GW/MPhb+4tbmbN6K uSG20Cnhrl2vPxN0plfUbQPlkAWkaFyEE7PtK9cqPrE62v1D7g0GBzSCYgtGJ/gL Rn0g5pgjKz09kTUBCxffAV6e/rHeEAguOJ9fKZadqHfR77rt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRYoxSxAB1rPPBLpgLMKQHYykkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2MDUxNzUtNGQ2Yi0z YmFiLTg5YzctNzRjNmFjNDY5MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0oQsrExehDg9IKFCcQsy2+R9Ajh9d/c68SpDrweV1ckaY9WJWlskf8 qpZ2UadR8HQRlg/3UgppQKOQbnYBL4ZzNjV11fwBXdzWwAVdJQrfy2Py0ZKcYTT1 M75cWmQAfqnQRe14YaXOCLBA8jgXk8JYmwi/0Rg4YXbOTOICnzSqS6DPHRvl2GIf tM3J+4xzkwzcnGYF85x8ZMFChNrbTtIudv+DTgm9XV6ASiTfXZRL2LzLyVxfuhg2 tjDUIH9D+UvxZ6idQ08+Smb631XbNB/Ck58SfOFlcP6Zs0JR80eaoVaR1+WzajMI /bOM8E2+ZDDSbmtF28/1hPZf9z9903Q= -----END CERTIFICATE-----Generated at Mon Oct 5 02:00:22 2026 by rpki-client