$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/133e8afe-5d51-329a-8e64-18cfe52f3556.roa File: 133e8afe-5d51-329a-8e64-18cfe52f3556.roa (raw, json) Hash identifier: vhFte/y9M7/B+kSoaXvLKOd8JfBS91DoPVvW4bWCe98= Subject key identifier: 15:84:47:49:04:63:87:92:AD:C8:28:41:12:EF:04:F8:96:20:01:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F3553D868C02CC81EF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/133e8afe-5d51-329a-8e64-18cfe52f3556.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f3:55:3d:86:8c:02:cc:81:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=6bd4f88c-9aa5-465e-ac7a-391f86f96da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:9c:cd:5d:75:9b:71:a5:97:ef:c6:74:28: b2:ba:7d:74:fe:7b:da:be:70:fb:3a:64:bd:0b:0c: 05:f8:6f:fd:19:8b:bf:7e:13:39:fc:40:ad:89:19: 9a:9c:95:5e:f5:6a:7d:0e:22:da:6a:0e:9f:4d:66: 06:81:de:f7:68:8d:53:7b:38:8f:6e:49:0e:23:3e: 49:b6:05:03:53:c1:7e:bf:ad:7b:54:fa:83:9f:ce: fc:57:86:54:92:2c:7c:46:2b:81:0c:d6:de:1c:1b: ff:2d:26:84:c0:db:5b:ad:8b:9e:0e:1c:f2:61:ab: 35:dd:48:f9:c3:8e:35:57:cf:f1:8b:a0:01:63:19: 89:25:46:16:46:6e:ef:c9:c8:19:b7:ff:4e:66:96: f0:1c:a1:85:17:7a:b5:b7:42:3d:0b:0c:87:32:4d: 71:d0:04:39:50:75:ed:cb:91:12:48:3d:91:bd:06: 6a:6a:cd:b4:55:2d:88:00:d9:37:3b:a1:51:d0:26: c9:58:48:c3:8f:da:ed:a9:5e:62:3a:dc:84:75:43: fb:5e:54:ea:6a:ba:32:9e:58:fa:31:35:27:9d:7d: 12:e4:af:05:b1:c1:6a:bb:b7:3a:2a:b2:bc:5f:0c: f2:1b:ca:15:77:65:83:15:ac:00:14:b6:7e:60:74: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:47:49:04:63:87:92:AD:C8:28:41:12:EF:04:F8:96:20:01:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/133e8afe-5d51-329a-8e64-18cfe52f3556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d1:3a:5d:96:1b:18:0b:57:aa:94:bd:cd:e9:c9:56:4b:d1: 73:a4:c5:f1:be:e7:df:0b:d4:5f:f3:fc:dd:99:b2:9c:59:c5: 78:48:72:31:4a:dd:49:69:ed:24:19:5f:3f:f5:1c:70:d7:42: f7:c2:42:99:e9:4f:62:47:ff:ea:76:d6:50:1a:b4:16:cc:ee: cc:86:4c:14:3a:54:91:a4:c5:34:71:74:72:93:03:57:7b:42: 3f:26:94:e3:20:70:57:74:f0:79:39:fa:fe:ad:d8:c7:6d:fd: e3:28:08:eb:d7:8b:71:c0:15:08:ca:e9:c4:84:f4:ff:07:db: 8e:09:e1:78:a8:29:1e:52:35:3a:fe:95:20:c7:2b:07:0c:7f: ef:75:06:95:61:df:3e:49:32:94:69:e4:a1:8c:ce:82:c3:e8: 00:d3:d9:19:58:c1:42:ff:e3:e2:2c:eb:fa:1c:c4:cc:03:6c: d9:7c:bf:37:6a:1c:49:a1:7c:3a:38:03:9e:ff:36:c1:f7:58: 8c:b7:fc:a5:1a:7e:b9:0e:73:e5:d8:90:d1:7d:1e:3b:15:16: 33:8f:34:45:a2:54:e7:11:a9:7e:cd:fd:83:4a:3d:51:4d:b4: 1f:61:a3:8a:c9:fb:c9:43:56:04:65:3b:c2:67:ed:64:03:69: b0:bb:b1:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvNVPYaMAsyB70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NmJkNGY4OGMtOWFhNS00NjVlLWFjN2EtMzkxZjg2Zjk2ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SczV11m3Gll+/GdCiyun10/nvavnD7OmS9 CwwF+G/9GYu/fhM5/ECtiRmanJVe9Wp9DiLaag6fTWYGgd73aI1TeziPbkkOIz5J tgUDU8F+v617VPqDn878V4ZUkix8RiuBDNbeHBv/LSaEwNtbrYueDhzyYas13Uj5 w441V8/xi6ABYxmJJUYWRm7vycgZt/9OZpbwHKGFF3q1t0I9CwyHMk1x0AQ5UHXt y5ESSD2RvQZqas20VS2IANk3O6FR0CbJWEjDj9rtqV5iOtyEdUP7XlTqaroynlj6 MTUnnX0S5K8FscFqu7c6KrK8XwzyG8oVd2WDFawAFLZ+YHQ1kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWER0kEY4eSrcgoQRLvBPiWIAGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMzZThhZmUtNWQ1MS0z MjlhLThlNjQtMThjZmU1MmYzNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXROl2WGxgLV6qUvc3pyVZL0XOkxfG+598L1F/z/N2ZspxZxXhIcjFK 3Ulp7SQZXz/1HHDXQvfCQpnpT2JH/+p21lAatBbM7syGTBQ6VJGkxTRxdHKTA1d7 Qj8mlOMgcFd08Hk5+v6t2Mdt/eMoCOvXi3HAFQjK6cSE9P8H244J4XioKR5SNTr+ lSDHKwcMf+91BpVh3z5JMpRp5KGMzoLD6ADT2RlYwUL/4+Is6/ocxMwDbNl8vzdq HEmhfDo4A57/NsH3WIy3/KUafrkOc+XYkNF9HjsVFjOPNEWiVOcRqX7N/YNKPVFN tB9ho4rJ+8lDVgRlO8Jn7WQDabC7sag= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:28 2025 by rpki-client