$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/204cdf36-328f-3a84-a19d-55d10bec3d56.roa File: 204cdf36-328f-3a84-a19d-55d10bec3d56.roa (raw, json) Hash identifier: LH+MhQjdu9gtzwoqx5i6biHPgsnuI2V+9jst/XoA3OE= Subject key identifier: 2A:C2:92:E7:17:8D:7A:3A:30:5F:60:8C:E7:AB:4D:B7:7D:F6:EB:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539EAF9DBD05ED8BE1D19700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/204cdf36-328f-3a84-a19d-55d10bec3d56.roa Signing time: Mon 28 Sep 2026 16:27:17 +0000 ROA not before: Mon 28 Sep 2026 16:27:17 +0000 ROA not after: Sun 27 Dec 2026 17:27:17 +0000 asID: 22773 IP address blocks: 68.13.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9e:af:9d:bd:05:ed:8b:e1:d1:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:27:17 2026 GMT Not After : Dec 27 17:27:17 2026 GMT Subject: CN=4ef81e82-e5f8-45ff-b8f7-92e53a6bb92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:fc:32:c7:1e:bc:08:43:9d:b9:39:68:59: bd:8f:45:a8:4a:71:ce:92:89:99:9e:86:a3:f9:69: 72:eb:bc:81:da:8f:49:b1:65:4b:f8:ce:d1:7f:4f: 6e:16:e4:9d:31:95:64:8a:58:0f:a6:8d:dd:79:71: 9d:a1:36:0a:7e:3f:96:0b:04:e7:2b:04:f5:fb:fa: dc:f0:54:cc:4e:70:83:14:c6:d4:5a:55:12:ec:64: 4e:80:63:cc:34:c0:11:2c:1c:f4:1f:2b:d3:60:a7: da:d8:3e:0f:94:93:6f:f9:0d:31:4c:0c:fd:0e:7e: 69:9d:a3:00:a8:d5:1b:a0:ac:19:f4:46:6c:46:12: eb:6e:d5:64:7e:e0:93:c5:0a:60:25:44:dc:bd:a0: 36:96:4d:66:82:56:6e:78:e2:b9:e0:ac:e5:c1:bd: 6d:dd:1c:bd:e0:b4:f5:bc:a5:fe:ef:a9:a7:f6:e7: 87:d5:c3:0c:d0:e5:cc:62:17:3e:da:1f:3c:25:48: 60:9d:e9:33:8d:a1:a6:75:dc:0b:a7:cf:6f:dc:5c: b6:47:5a:19:57:e7:90:20:fe:42:4c:06:2b:69:db: a1:b1:4c:47:d7:7d:5c:e1:09:2b:9f:63:cf:e6:b6: 7b:84:99:09:66:b6:84:2f:8e:19:61:19:56:db:27: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:92:E7:17:8D:7A:3A:30:5F:60:8C:E7:AB:4D:B7:7D:F6:EB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/204cdf36-328f-3a84-a19d-55d10bec3d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.13.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c0:26:e8:df:bd:0c:4a:93:07:ed:3d:a4:9b:ee:12:e6:d2: ff:0c:86:18:74:4d:5e:a2:fb:3d:b3:50:91:d1:94:9b:3c:be: 51:19:18:01:76:5b:a8:b0:87:7f:a6:db:39:33:90:f9:eb:5a: 49:0b:cc:ff:06:1f:52:9e:f5:6f:b2:fc:41:45:8f:3a:5a:32: 22:e3:61:1f:74:0e:ed:4f:e5:88:02:c2:f3:72:5f:ff:02:45: 9e:03:25:d1:c2:83:b8:76:5d:bd:d4:40:b3:43:0e:5d:00:b2: b9:55:73:1f:45:2e:78:f4:41:18:b7:36:17:26:4d:ce:c6:d8: f0:63:c9:ee:7d:eb:30:f6:74:07:b1:25:83:eb:d4:8a:9e:d3: 3e:49:43:d8:c0:70:29:1c:c4:80:b0:5e:57:4b:84:5b:be:5a: c2:dc:43:14:11:29:5b:fb:19:38:41:25:4d:70:e8:f1:e9:29: 6d:b6:c6:5f:34:6b:12:47:5c:ea:13:b0:e8:38:ba:28:7b:06: 41:e1:c8:36:a8:d8:6d:58:00:6a:09:5c:e6:59:61:79:5c:5c: 48:88:0f:2c:6a:40:ee:af:f8:31:26:35:e8:db:0b:8d:58:89: 3c:41:99:e8:b2:80:52:d4:70:9c:39:18:cf:d1:8b:ea:51:bd: f9:fb:f7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tnq+dvQXti+HRlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjcxN1oXDTI2MTIyNzE3MjcxN1owLzEtMCsGA1UEAxMk NGVmODFlODItZTVmOC00NWZmLWI4ZjctOTJlNTNhNmJiOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDr8MscevAhDnbk5aFm9j0WoSnHOkomZnoaj +Wly67yB2o9JsWVL+M7Rf09uFuSdMZVkilgPpo3deXGdoTYKfj+WCwTnKwT1+/rc 8FTMTnCDFMbUWlUS7GROgGPMNMARLBz0HyvTYKfa2D4PlJNv+Q0xTAz9Dn5pnaMA qNUboKwZ9EZsRhLrbtVkfuCTxQpgJUTcvaA2lk1mglZueOK54Kzlwb1t3Ry94LT1 vKX+76mn9ueH1cMM0OXMYhc+2h88JUhgnekzjaGmddwLp89v3Fy2R1oZV+eQIP5C TAYraduhsUxH131c4Qkrn2PP5rZ7hJkJZraEL44ZYRlW2yegiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrCkucXjXo6MF9gjOerTbd99uuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA0Y2RmMzYtMzI4Zi0z YTg0LWExOWQtNTVkMTBiZWMzZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRA0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDAJujfvQxKkwftPaSb7hLm0v8Mhhh0TV6i+z2zUJHRlJs8vlEZGAF2 W6iwh3+m2zkzkPnrWkkLzP8GH1Ke9W+y/EFFjzpaMiLjYR90Du1P5YgCwvNyX/8C RZ4DJdHCg7h2Xb3UQLNDDl0AsrlVcx9FLnj0QRi3NhcmTc7G2PBjye596zD2dAex JYPr1Iqe0z5JQ9jAcCkcxICwXldLhFu+WsLcQxQRKVv7GThBJU1w6PHpKW22xl80 axJHXOoTsOg4uih7BkHhyDao2G1YAGoJXOZZYXlcXEiIDyxqQO6v+DEmNejbC41Y iTxBmeiygFLUcJw5GM/Ri+pRvfn79xk= -----END CERTIFICATE-----Generated at Thu Oct 1 22:29:01 2026 by rpki-client