$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0697c643-8cb1-3280-9026-46fae04cfa19.roa File: 0697c643-8cb1-3280-9026-46fae04cfa19.roa (raw, json) Hash identifier: xesww0S5SmSQYQfQMzSBWAzCpqsJ7ccjRE+pSaz89BM= Subject key identifier: 67:88:E2:CF:57:3D:89:60:B0:5C:9A:4D:02:F6:5E:16:A5:16:8E:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4B6E4D69FBE21AA6D110 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0697c643-8cb1-3280-9026-46fae04cfa19.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.228.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4b:6e:4d:69:fb:e2:1a:a6:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=639acb2e-295e-44cb-a09f-453342895cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:60:c1:04:3e:cb:03:3b:b6:86:4a:a6:0a: 05:b9:4b:dd:b5:de:08:56:01:70:48:dc:a1:ec:c2: c1:b9:ac:67:3f:dd:a4:fe:76:3f:d6:0a:1e:36:4a: 57:88:c7:ab:9f:be:b4:c8:8c:7d:8a:9e:9a:0e:56: 8a:37:df:70:51:37:26:0b:35:50:bf:d2:cf:da:eb: fb:11:a8:11:c8:76:fe:97:0b:92:65:7c:96:c7:69: 70:11:4d:57:6e:c5:85:4a:5f:1c:56:2a:28:39:c7: b8:8b:1e:2b:cf:90:67:21:2d:a8:bb:b6:8f:6a:b0: 1f:ca:b1:e7:f4:99:6f:b0:02:0d:42:34:aa:c4:0c: 98:33:0f:6a:5e:c8:d9:59:97:a0:2f:41:51:8b:9a: b0:6a:47:40:5f:01:13:ac:87:d2:84:14:40:ec:c0: bd:c6:34:ab:19:75:82:e1:27:18:46:f9:b6:0c:ef: 74:b1:01:e1:ed:ac:59:68:ab:00:f6:25:f0:a5:ea: d2:9d:6a:75:eb:e0:89:ac:fa:8c:39:e3:86:1a:0f: 70:95:d0:44:5b:35:48:97:1a:a0:4f:69:b9:12:97: 59:00:bf:a5:4a:8b:78:2a:e9:7d:89:05:3c:a6:4a: 9c:e9:d6:11:31:80:99:4e:bc:2f:a1:18:b3:bd:80: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:E2:CF:57:3D:89:60:B0:5C:9A:4D:02:F6:5E:16:A5:16:8E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0697c643-8cb1-3280-9026-46fae04cfa19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:40:42:45:f3:56:a7:f3:34:0e:42:e5:3b:e5:08:14:5d:9c: 69:6f:e8:b7:36:72:53:91:7c:4d:b7:19:b4:77:b0:cb:2e:c4: 9b:48:ac:e5:ad:63:0d:4e:fb:16:59:19:72:ff:11:a9:3d:15: d1:31:6d:82:4c:06:5e:43:56:0f:dd:6b:3e:d7:2d:57:68:29: 84:dd:11:0f:ec:01:28:c8:3b:60:fe:98:b9:56:08:b6:93:05: fa:8f:1e:7f:67:ee:b5:ab:6e:bd:14:0b:f8:19:03:f0:ba:da: 83:4b:82:96:42:d2:a2:e5:2e:53:c7:3f:20:7b:0b:13:ec:16: d8:37:18:87:7b:63:50:41:ea:04:60:31:58:cd:04:b4:a8:94: c5:68:f0:5a:75:6a:d1:f2:2c:22:a4:7c:07:3b:ba:e4:be:18: ec:44:2e:af:f5:1b:4e:48:af:19:0e:75:a2:76:5f:38:7b:19: 75:3a:3b:22:27:bf:b6:20:e7:d2:09:82:7b:05:62:fd:d8:e2: da:9b:58:13:54:d1:f2:10:77:6e:37:52:8b:09:0f:58:2b:56: af:8c:c6:0a:cf:c7:f8:e7:d2:32:7e:4a:90:e4:29:5b:e4:bf: 38:3b:a6:bd:6e:1a:22:53:2b:3b:7f:57:62:66:30:07:6c:c7: 2c:fb:b8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEtuTWn74hqm0RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NjM5YWNiMmUtMjk1ZS00NGNiLWEwOWYtNDUzMzQyODk1Y2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/pgwQQ+ywM7toZKpgoFuUvdtd4IVgFwSNyh 7MLBuaxnP92k/nY/1goeNkpXiMern760yIx9ip6aDlaKN99wUTcmCzVQv9LP2uv7 EagRyHb+lwuSZXyWx2lwEU1XbsWFSl8cViooOce4ix4rz5BnIS2ou7aParAfyrHn 9JlvsAINQjSqxAyYMw9qXsjZWZegL0FRi5qwakdAXwETrIfShBRA7MC9xjSrGXWC 4ScYRvm2DO90sQHh7axZaKsA9iXwperSnWp16+CJrPqMOeOGGg9wldBEWzVIlxqg T2m5EpdZAL+lSot4Kul9iQU8pkqc6dYRMYCZTrwvoRizvYANrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeI4s9XPYlgsFyaTQL2XhalFo4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDY5N2M2NDMtOGNiMS0z MjgwLTkwMjYtNDZmYWUwNGNmYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROQlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxAQkXzVqfzNA5C5TvlCBRdnGlv6Lc2clORfE23GbR3sMsuxJtIrOWt Yw1O+xZZGXL/Eak9FdExbYJMBl5DVg/daz7XLVdoKYTdEQ/sASjIO2D+mLlWCLaT BfqPHn9n7rWrbr0UC/gZA/C62oNLgpZC0qLlLlPHPyB7CxPsFtg3GId7Y1BB6gRg MVjNBLSolMVo8Fp1atHyLCKkfAc7uuS+GOxELq/1G05IrxkOdaJ2Xzh7GXU6OyIn v7Yg59IJgnsFYv3Y4tqbWBNU0fIQd243UosJD1grVq+MxgrPx/jn0jJ+SpDkKVvk vzg7pr1uGiJTKzt/V2JmMAdsxyz7uNg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:00 2025 by rpki-client