$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/035bd612-332f-3100-81ad-9f758470d0ee.roa File: 035bd612-332f-3100-81ad-9f758470d0ee.roa (raw, json) Hash identifier: a02Zt9w4mobt1RSmHyJtt6o30jw18/+xW91Wc32WC0w= Subject key identifier: B5:7B:AD:3B:97:60:EE:57:99:EF:99:22:1F:64:30:9F:0F:27:EE:5F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373F7158D69D7388F0BD40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/035bd612-332f-3100-81ad-9f758470d0ee.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3f:71:58:d6:9d:73:88:f0:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b0f7d9f3-7ecf-49b3-b075-1f85719de3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:8a:60:90:44:21:1d:39:e9:21:bc:3a:96: 02:b2:b4:e0:21:20:05:08:6e:30:59:7f:bb:83:69: 83:d2:28:ca:35:17:26:38:3b:aa:44:47:9a:66:6b: bc:89:ba:05:7e:b0:61:a6:e5:cc:4e:0e:b0:aa:00: 47:23:7f:ba:e0:1e:66:3c:b9:29:4e:03:93:5e:dd: 70:3e:5f:66:8e:81:4d:05:cb:a7:29:b1:00:4a:82: 29:d2:f2:12:c0:60:25:68:56:9d:1c:c9:9b:88:70: 48:f4:e0:40:b6:83:f2:9c:e4:e9:18:c0:b5:f9:c7: 05:e6:f3:b8:d9:53:23:c4:0d:b5:36:76:79:c6:15: 97:35:c1:6b:1a:4d:c8:91:c1:44:b6:f9:df:27:22: 9d:8b:05:58:6f:0c:b6:29:a7:2c:64:a4:ce:52:c8: 84:4d:95:48:66:52:24:f4:55:b7:bf:bf:66:21:c4: af:d1:5b:24:b6:e3:3e:aa:d0:a6:06:89:c0:e7:b3: 45:81:1b:31:fa:7f:52:34:e7:5f:df:b1:47:d7:de: 33:78:ba:f5:f0:fb:9b:f1:51:12:ed:27:b2:d9:4f: dd:33:c9:88:b5:c7:3c:1c:6b:0e:d7:cd:83:db:39: 5b:86:ad:b3:22:c1:3b:ee:c0:35:01:d6:cb:97:7e: 95:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:AD:3B:97:60:EE:57:99:EF:99:22:1F:64:30:9F:0F:27:EE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/035bd612-332f-3100-81ad-9f758470d0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:55:3c:c3:f5:68:70:7a:a4:5f:76:ea:6d:56:4e:6b:fb:14: 41:bf:bc:d6:14:c9:c3:17:12:32:f1:b5:dc:5d:21:3a:e1:ca: 82:7e:1a:81:0d:42:51:23:60:26:cd:0c:63:61:ca:45:17:2a: 67:7a:6e:15:30:5b:d3:f9:3e:62:8f:d9:c3:c3:c6:53:01:a8: 61:0c:5d:60:f5:3e:b1:6e:8a:b6:f1:58:02:f9:95:d7:ca:79: bb:90:fe:64:3c:0d:63:b7:0d:34:e7:ec:08:07:2e:ca:ad:eb: 84:f9:c9:9b:d8:7e:1a:22:14:6b:89:ff:42:23:20:42:b2:f6: 68:24:96:d9:7e:28:3a:fb:31:1c:eb:61:7a:5f:95:06:e1:6e: 25:89:4c:11:f9:01:e7:09:42:62:ba:72:2a:b6:2d:44:7e:a7: 25:d0:18:7f:58:94:1d:db:d6:8a:f3:4f:b3:ca:69:53:49:c0: ad:77:8d:ba:8a:39:68:df:46:28:f4:58:f5:b7:5d:43:7c:e5: 76:a1:5a:1d:c2:66:1b:6c:9e:0f:87:59:d7:37:2c:21:dc:a4: 05:c0:17:28:20:16:c6:b2:58:43:73:94:b3:92:32:1d:5c:03: ae:6f:7a:74:a3:dc:95:a9:e6:02:e9:af:e2:96:22:31:52:e5: bb:45:25:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNz9xWNadc4jwvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjBmN2Q5ZjMtN2VjZi00OWIzLWIwNzUtMWY4NTcxOWRlM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcuKYJBEIR056SG8OpYCsrTgISAFCG4wWX+7 g2mD0ijKNRcmODuqREeaZmu8iboFfrBhpuXMTg6wqgBHI3+64B5mPLkpTgOTXt1w Pl9mjoFNBcunKbEASoIp0vISwGAlaFadHMmbiHBI9OBAtoPynOTpGMC1+ccF5vO4 2VMjxA21NnZ5xhWXNcFrGk3IkcFEtvnfJyKdiwVYbwy2KacsZKTOUsiETZVIZlIk 9FW3v79mIcSv0VsktuM+qtCmBonA57NFgRsx+n9SNOdf37FH194zeLr18Pub8VES 7Sey2U/dM8mItcc8HGsO182D2zlbhq2zIsE77sA1AdbLl36VJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV7rTuXYO5Xme+ZIh9kMJ8PJ+5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDM1YmQ2MTItMzMyZi0z MTAwLTgxYWQtOWY3NTg0NzBkMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARANZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1VPMP1aHB6pF926m1WTmv7FEG/vNYUycMXEjLxtdxdITrhyoJ+GoEN QlEjYCbNDGNhykUXKmd6bhUwW9P5PmKP2cPDxlMBqGEMXWD1PrFuirbxWAL5ldfK ebuQ/mQ8DWO3DTTn7AgHLsqt64T5yZvYfhoiFGuJ/0IjIEKy9mgkltl+KDr7MRzr YXpflQbhbiWJTBH5AecJQmK6ciq2LUR+pyXQGH9YlB3b1orzT7PKaVNJwK13jbqK OWjfRij0WPW3XUN85XahWh3CZhtsng+HWdc3LCHcpAXAFyggFsayWENzlLOSMh1c A65venSj3JWp5gLpr+KWIjFS5btFJa4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:54 2025 by rpki-client