$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03ba287c-4954-30d5-9c50-82957d27ba68.roa File: 03ba287c-4954-30d5-9c50-82957d27ba68.roa (raw, json) Hash identifier: xPiUU+8tHbLG9o0zy1Qju/9zKTObDDbE5fGoQ7qnWrA= Subject key identifier: 5B:10:89:B2:AA:75:A2:0D:AC:A1:1E:17:01:DF:B4:CD:38:8B:23:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FCF856E6FE5027CFB1C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03ba287c-4954-30d5-9c50-82957d27ba68.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fc:f8:56:e6:fe:50:27:cf:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=6b897b55-e808-4479-baa9-655de395c163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:fd:7c:81:02:22:ff:e4:39:91:fe:cb:61: bb:fd:16:0c:55:53:55:4f:11:26:63:81:45:da:bc: 85:06:b7:b3:cd:a4:29:4d:71:c4:67:5f:0d:bc:da: f3:c5:38:02:f0:e5:8e:4a:36:1f:71:8a:1e:ad:78: 19:70:05:03:90:6e:a6:76:fc:6c:ec:bb:65:15:0c: 80:64:3d:44:b3:d9:fe:fa:47:8c:0c:56:7a:d7:5d: 7e:15:41:2b:e3:85:df:0b:c4:26:c2:57:45:17:e2: 74:ac:fa:3d:9e:71:66:66:4e:93:35:e2:d1:db:a9: d1:67:96:1a:dd:97:24:52:fe:3a:83:27:67:b6:fe: b9:01:6c:4a:0f:10:d9:18:af:84:e3:b4:fb:3e:27: e3:44:48:58:1b:bc:c6:8e:e0:1c:c0:55:ab:c0:3b: fa:2c:ac:e4:ef:08:d6:e8:bc:89:30:52:f2:5e:17: 98:98:f2:b4:96:18:a5:1d:8f:c9:c1:28:99:99:02: 60:06:e6:12:8f:8f:f3:cf:21:65:f6:ba:29:09:3c: d3:5e:e2:54:f3:23:6c:d2:b5:f8:73:04:89:2b:ef: 8a:f8:04:50:73:06:76:d7:6f:d4:85:74:78:13:c5: 00:52:1a:99:8f:c1:40:68:cf:00:a5:bc:5f:4c:0a: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:89:B2:AA:75:A2:0D:AC:A1:1E:17:01:DF:B4:CD:38:8B:23:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03ba287c-4954-30d5-9c50-82957d27ba68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:86:5e:d1:28:40:97:b0:21:1e:b1:71:bd:57:4c:c6:fb:68: c5:b7:52:e2:7f:2a:26:be:ee:13:b2:24:b7:9c:a5:68:f1:6b: 30:b5:a9:73:64:e9:51:2c:65:69:fe:4b:57:ef:df:92:ee:7c: 55:8b:b2:d8:24:23:7a:b9:42:c8:4f:d0:6b:70:e5:75:41:16: 8a:5d:39:7f:db:cd:10:b5:74:a5:a7:33:f2:5f:90:ee:22:16: d1:2c:a9:0b:ff:3b:6f:76:ce:ea:c1:10:bc:23:92:fc:92:a6: da:6c:c1:ee:a4:e8:8b:03:83:ea:32:14:8f:a5:bd:ca:4e:2b: b4:7a:8c:70:54:f1:53:77:61:06:f9:bc:a5:3f:36:8e:fa:35: 3b:3b:33:0a:c4:c6:e5:5b:73:b0:7c:67:42:7d:f1:3d:29:62: 0d:fa:90:b0:1c:16:74:8c:7d:01:bd:9d:03:2f:56:d5:f1:d4: 6e:3a:cc:5e:b2:36:39:56:f1:2b:5f:84:24:24:47:a1:e3:cb: 68:bf:69:ae:1b:1e:af:e5:52:cc:fc:22:9e:3b:8d:d4:f9:a2: ca:6d:5b:02:af:fc:7a:3a:3f:3d:26:4c:4e:3c:01:29:a1:87: 43:0d:14:b1:36:38:a4:db:a5:23:fe:47:bd:23:a1:af:33:22: 2d:e3:37:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvz4Vub+UCfPscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NmI4OTdiNTUtZTgwOC00NDc5LWJhYTktNjU1ZGUzOTVjMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdD9fIECIv/kOZH+y2G7/RYMVVNVTxEmY4FF 2ryFBrezzaQpTXHEZ18NvNrzxTgC8OWOSjYfcYoerXgZcAUDkG6mdvxs7LtlFQyA ZD1Es9n++keMDFZ6111+FUEr44XfC8QmwldFF+J0rPo9nnFmZk6TNeLR26nRZ5Ya 3ZckUv46gydntv65AWxKDxDZGK+E47T7PifjREhYG7zGjuAcwFWrwDv6LKzk7wjW 6LyJMFLyXheYmPK0lhilHY/JwSiZmQJgBuYSj4/zzyFl9ropCTzTXuJU8yNs0rX4 cwSJK++K+ARQcwZ212/UhXR4E8UAUhqZj8FAaM8ApbxfTArP+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsQibKqdaINrKEeFwHftM04iyOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDNiYTI4N2MtNDk1NC0z MGQ1LTljNTAtODI5NTdkMjdiYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCGXtEoQJewIR6xcb1XTMb7aMW3UuJ/Kia+7hOyJLecpWjxazC1qXNk 6VEsZWn+S1fv35LufFWLstgkI3q5QshP0Gtw5XVBFopdOX/bzRC1dKWnM/JfkO4i FtEsqQv/O292zurBELwjkvySptpswe6k6IsDg+oyFI+lvcpOK7R6jHBU8VN3YQb5 vKU/No76NTs7MwrExuVbc7B8Z0J98T0pYg36kLAcFnSMfQG9nQMvVtXx1G46zF6y NjlW8StfhCQkR6Hjy2i/aa4bHq/lUsz8Ip47jdT5osptWwKv/Ho6Pz0mTE48ASmh h0MNFLE2OKTbpSP+R70joa8zIi3jN/8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:04 2025 by rpki-client