$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa File: 033950d8-0213-3cac-a0c6-a58cf35f17df.roa (raw, json) Hash identifier: lOXvxGtm9fMp1pTdl1pRenrCj4KtZe0HlAW2I3savM0= Subject key identifier: D6:70:FC:E3:50:17:34:2D:0F:AD:DA:79:BA:5E:AD:BE:F3:A3:03:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2133F9DDC9ED227854880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.111.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:13:3f:9d:dc:9e:d2:27:85:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e59aa991-a171-4353-8ed1-eeed4dfcbc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:4b:ec:5b:b4:cc:d0:0a:18:11:64:5e:27: 09:8a:55:21:2a:d7:2c:51:b0:c0:e8:6b:4f:de:0c: 9b:0a:16:22:b0:82:af:9f:55:d7:12:6c:c0:14:ed: d5:02:34:c6:b5:56:ec:8e:1e:9b:c2:8a:20:32:d6: 27:45:b0:6f:5d:af:16:95:66:aa:34:e1:dc:d1:16: b4:0a:3a:59:a1:a2:de:54:21:a6:9d:fc:48:65:ab: 55:75:bc:38:00:6c:39:09:e8:fc:7f:7e:b4:f9:ff: d3:63:a3:a7:04:63:26:43:6f:f9:1d:06:8b:d6:37: 89:75:a7:29:cf:00:1e:5e:9c:4f:f1:88:92:d5:1c: 07:a6:b4:60:6a:cd:5c:96:51:a6:29:04:f6:c0:9d: 7e:57:8e:a7:a5:7b:f5:c1:41:e8:89:0e:05:07:05: 22:1a:65:47:91:e3:36:88:8b:22:af:a1:95:2a:df: 46:5d:3f:9d:3c:4c:34:f6:90:54:0a:ef:e3:a0:27: a9:54:29:ef:4f:84:3f:00:4c:3d:71:6e:7e:a6:ff: 7a:4f:ab:04:ab:df:c1:38:60:b5:d3:5a:00:f0:3f: 21:30:0c:91:f1:1e:cc:3e:07:b9:74:ff:9f:cc:45: a4:db:a2:ae:8d:76:99:86:13:a4:66:32:41:a8:ac: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:FC:E3:50:17:34:2D:0F:AD:DA:79:BA:5E:AD:BE:F3:A3:03:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:56:9d:4a:6b:3e:3f:fb:75:e2:93:b6:d0:ce:40:ff:bf:a0: 8e:74:67:35:fc:f1:9d:ff:23:88:35:c4:08:12:d6:28:74:58: 5e:61:c2:70:3a:94:9e:a9:2d:78:db:f5:e3:c6:d0:b6:1f:fc: 0b:60:5c:b6:6f:69:ff:7a:5f:97:37:34:44:9a:a9:d4:14:68: 36:5a:09:c5:b1:df:50:ae:b7:ae:29:9f:21:52:e3:d7:7a:e8: 19:bb:7b:06:83:f6:82:e9:54:e9:e9:54:1a:2d:30:e8:21:02: dd:a9:19:d4:5a:21:0e:65:02:8e:f7:01:36:19:fa:16:e2:7e: df:08:b2:5a:e7:f2:b4:75:0c:5a:ed:9c:13:a3:20:85:93:f2: c4:ec:7c:8a:78:c9:6c:13:37:4c:0c:e0:2b:c0:1b:08:d0:4a: 98:7e:70:35:53:e9:be:dc:8a:b0:74:b3:53:b6:c4:c0:04:37: 56:fd:f8:ed:17:24:7d:d0:70:ce:67:05:44:85:3b:61:08:1d: 3f:35:5c:82:2a:74:ed:03:5b:21:09:f3:11:34:6e:81:93:b5: aa:84:cd:e3:a2:a5:71:93:eb:1b:9f:3d:6f:86:e4:6b:04:5c: 48:11:c4:e4:00:f8:7c:a8:84:36:ce:95:82:e5:e6:39:3b:4a: a6:7b:0b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hM/ndye0ieFSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTU5YWE5OTEtYTE3MS00MzUzLThlZDEtZWVlZDRkZmNiYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbFL7Fu0zNAKGBFkXicJilUhKtcsUbDA6GtP 3gybChYisIKvn1XXEmzAFO3VAjTGtVbsjh6bwoogMtYnRbBvXa8WlWaqNOHc0Ra0 CjpZoaLeVCGmnfxIZatVdbw4AGw5Cej8f360+f/TY6OnBGMmQ2/5HQaL1jeJdacp zwAeXpxP8YiS1RwHprRgas1cllGmKQT2wJ1+V46npXv1wUHoiQ4FBwUiGmVHkeM2 iIsir6GVKt9GXT+dPEw09pBUCu/joCepVCnvT4Q/AEw9cW5+pv96T6sEq9/BOGC1 01oA8D8hMAyR8R7MPge5dP+fzEWk26KujXaZhhOkZjJBqKyDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZw/ONQFzQtD63aebperb7zowOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMzOTUwZDgtMDIxMy0z Y2FjLWEwYzYtYTU4Y2YzNWYxN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVWnUprPj/7deKTttDOQP+/oI50ZzX88Z3/I4g1xAgS1ih0WF5hwnA6 lJ6pLXjb9ePG0LYf/AtgXLZvaf96X5c3NESaqdQUaDZaCcWx31Cut64pnyFS49d6 6Bm7ewaD9oLpVOnpVBotMOghAt2pGdRaIQ5lAo73ATYZ+hbift8Islrn8rR1DFrt nBOjIIWT8sTsfIp4yWwTN0wM4CvAGwjQSph+cDVT6b7cirB0s1O2xMAEN1b9+O0X JH3QcM5nBUSFO2EIHT81XIIqdO0DWyEJ8xE0boGTtaqEzeOipXGT6xufPW+G5GsE XEgRxOQA+HyohDbOlYLl5jk7SqZ7C1I= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:51 2025 by rpki-client