$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa File: 0ffa109c-e6b7-3412-9583-bea9431f560f.roa (raw, json) Hash identifier: XwUUROPJdH4NmDGMnl4Xg4AypZ4iv9iysQAOMp4A4qA= Subject key identifier: 04:4A:D6:75:CD:2A:3C:8E:23:04:82:0C:DD:A3:4A:24:54:A9:78:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24018C301A5DF593D8E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.225.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:40:18:c3:01:a5:df:59:3d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=8656397b-472b-49fe-a981-916e9a07e86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:68:de:4d:29:75:af:ce:73:8a:85:65:94: 81:75:68:53:01:fc:46:7c:77:d3:41:ad:06:84:29: 34:35:82:d9:ab:43:d3:7b:a3:00:4f:d5:2d:f1:ab: 79:b6:a4:e1:2c:96:76:a4:1c:22:c8:8e:b5:98:b9: ab:7f:4c:e6:e7:1c:45:f0:6e:7f:ea:1e:74:cc:52: c1:b3:a5:eb:1f:63:7f:ff:65:08:5f:89:9d:e0:f5: 58:f7:24:76:29:c9:63:2f:65:aa:ee:72:db:98:b5: 5d:ce:f2:31:e1:5a:a1:ba:02:68:a9:f5:73:34:b4: 06:d2:0b:fa:ff:25:54:a7:f4:29:4d:b1:ae:98:be: ae:e0:92:49:ad:9e:9d:5c:ba:5f:fc:39:17:0f:e6: 60:b0:5b:ff:b9:d5:9d:e4:22:dd:15:00:29:a7:57: d5:73:84:44:1b:5b:4b:bb:7f:c5:51:84:3c:1f:6f: 84:d5:af:2c:69:71:4d:29:be:22:bc:5c:f6:e5:b6: c7:8a:f3:55:6f:13:01:42:25:e0:bb:5e:ae:25:4d: 22:0a:c8:15:51:ce:4e:14:5f:bb:7e:a9:e6:6b:5c: 7a:f2:54:30:13:7b:34:b6:03:92:9d:9c:c4:2c:b1: 58:6f:95:1f:3a:00:92:5a:8d:7c:c9:9b:04:b6:c6: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4A:D6:75:CD:2A:3C:8E:23:04:82:0C:DD:A3:4A:24:54:A9:78:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:60:d3:7d:7d:48:a1:66:fe:a3:d1:5a:91:d4:89:bd:45:d6: d1:63:75:0a:c6:05:51:c0:d4:6a:99:5b:03:25:3b:39:99:35: f8:34:08:43:2a:72:15:39:81:b0:7d:5f:36:0b:d8:d8:bf:1c: 67:77:f1:b4:95:cb:9d:10:cd:b2:02:50:c9:e1:06:d3:07:c1: 1e:c4:ff:d8:e6:c0:e9:81:d7:5b:44:23:49:8f:6d:23:4a:42: f6:2a:27:e4:ec:07:bc:da:32:e4:2a:4f:49:75:30:54:82:a3: f6:16:95:ef:4a:ff:7d:72:61:a6:2e:e1:38:c1:c0:a7:35:d5: 1e:8a:de:d9:83:b0:9f:f4:69:0e:c7:75:e9:c1:3a:ee:8e:f7: e8:1c:fe:79:5e:6e:7b:b2:e0:7d:0b:4b:7c:b6:6b:14:ef:e9: 2e:9d:8f:9d:e2:52:54:ec:48:a0:4e:17:8e:e7:07:13:d9:e9: e9:c9:ee:97:5f:c0:ec:1c:4f:38:63:7e:ba:c3:4c:56:79:b6: 4b:30:06:07:3f:c7:1c:8b:80:d6:e4:c7:0c:40:23:ec:f5:32: 6d:94:98:77:5b:af:d8:48:f1:41:10:a3:cf:5f:0a:93:26:69: 4c:81:e8:52:28:65:7f:3f:fe:5b:95:c6:93:3f:df:24:41:91: de:61:14:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kAYwwGl31k9jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODY1NjM5N2ItNDcyYi00OWZlLWE5ODEtOTE2ZTlhMDdlODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mRo3k0pda/Oc4qFZZSBdWhTAfxGfHfTQa0G hCk0NYLZq0PTe6MAT9Ut8at5tqThLJZ2pBwiyI61mLmrf0zm5xxF8G5/6h50zFLB s6XrH2N//2UIX4md4PVY9yR2KcljL2Wq7nLbmLVdzvIx4VqhugJoqfVzNLQG0gv6 /yVUp/QpTbGumL6u4JJJrZ6dXLpf/DkXD+ZgsFv/udWd5CLdFQApp1fVc4REG1tL u3/FUYQ8H2+E1a8saXFNKb4ivFz25bbHivNVbxMBQiXgu16uJU0iCsgVUc5OFF+7 fqnma1x68lQwE3s0tgOSnZzELLFYb5UfOgCSWo18yZsEtsb4qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARK1nXNKjyOIwSCDN2jSiRUqXh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZmYTEwOWMtZTZiNy0z NDEyLTk1ODMtYmVhOTQzMWY1NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFg0319SKFm/qPRWpHUib1F1tFjdQrGBVHA1GqZWwMlOzmZNfg0CEMq chU5gbB9XzYL2Ni/HGd38bSVy50QzbICUMnhBtMHwR7E/9jmwOmB11tEI0mPbSNK QvYqJ+TsB7zaMuQqT0l1MFSCo/YWle9K/31yYaYu4TjBwKc11R6K3tmDsJ/0aQ7H denBOu6O9+gc/nlebnuy4H0LS3y2axTv6S6dj53iUlTsSKBOF47nBxPZ6enJ7pdf wOwcTzhjfrrDTFZ5tkswBgc/xxyLgNbkxwxAI+z1Mm2UmHdbr9hI8UEQo89fCpMm aUyB6FIoZX8//luVxpM/3yRBkd5hFJw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:01 2025 by rpki-client