$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa File: 1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa (raw, json) Hash identifier: cmQP7f7ICMA/T1jXh0tq9gE8zgDvOZFlwLx6nnrGCMU= Subject key identifier: F1:34:92:1E:E2:2D:C5:C3:8B:62:28:52:D8:02:71:6B:75:CF:AB:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22D3DE4F7FBB447FAEA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2d:3d:e4:f7:fb:b4:47:fa:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ecce8b6b-8142-4551-b461-42fb8f53a58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:cd:65:6f:da:7e:a2:2c:c2:de:0b:88:a6: fb:af:6b:94:67:68:51:4c:8f:91:37:ba:bd:92:76: 44:52:64:fe:ed:8d:7e:fe:dc:03:31:f5:e4:e0:75: e6:f4:6b:9c:59:7b:89:79:40:bc:39:c1:03:d7:32: 31:f3:15:be:fc:17:63:99:d1:fd:c8:28:35:4a:47: ae:40:44:f4:4e:40:d3:8e:51:45:a1:75:fb:d0:06: 5a:d3:6a:8e:17:ab:48:18:00:ed:6b:f5:51:79:8c: 12:8d:c0:c0:6c:94:47:52:51:b3:6b:21:49:08:33: 81:ef:90:85:d8:a7:a2:c1:80:36:28:21:5e:de:42: 3f:a9:d8:83:32:22:6e:0c:69:a8:78:ea:95:87:77: 48:75:26:22:a8:7e:aa:16:09:f9:7a:e9:ee:4b:6c: 8b:92:0b:0a:9f:ba:b3:76:29:57:c2:a6:5d:83:08: 10:76:4a:68:55:95:06:fe:05:0e:c0:e8:0c:98:a6: 8a:97:f0:95:95:8d:47:bb:bd:c1:f5:3e:2f:2a:8f: b2:46:cb:4f:a3:f1:22:fa:3b:dc:ba:2e:a1:fd:36: 00:cc:30:2e:36:ad:30:99:4e:dc:b3:fb:58:84:25: 08:d0:f3:98:97:82:a6:db:92:1a:00:3c:9e:e7:1a: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:92:1E:E2:2D:C5:C3:8B:62:28:52:D8:02:71:6B:75:CF:AB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d0:04:07:69:da:54:22:a9:77:38:89:f1:b9:7a:dc:3b:66: a7:3f:34:f1:91:a2:28:ee:2a:0c:28:69:ae:f3:d9:66:9a:93: ee:fa:8f:7e:31:ef:fc:36:c7:bd:99:e5:ff:4c:8f:45:b0:42: ce:b4:74:a2:d2:56:c2:86:2b:6f:0e:5a:b7:b8:8c:b8:3c:b1: 28:f8:b3:aa:e7:81:ee:96:a3:8f:61:7e:7f:ec:92:7a:8c:fc: 41:07:55:35:72:85:25:06:32:7a:8a:a2:62:65:4f:05:0c:a5: 9c:fe:b8:d1:a9:6c:3e:09:41:4a:ea:dc:98:dd:42:e7:64:04: d5:aa:ec:56:5d:e1:1b:a0:80:b5:86:de:16:d5:e1:d2:74:a6: 90:ab:0b:fd:1b:38:08:8c:14:79:2b:e4:d2:03:88:76:f7:73: 05:4e:30:87:2d:17:17:8f:b5:40:e1:15:b1:17:91:0a:fb:7c: 69:be:e1:1e:eb:a4:a1:f9:29:d6:2b:60:61:3a:f8:1c:5a:e6: 6b:20:6b:c4:46:7b:8c:4d:b0:fb:cf:d0:20:ca:08:fa:47:25: 20:b3:aa:9e:00:e7:99:7c:2f:89:ba:e2:4b:b3:5a:a9:91:d9: 48:08:fb:fe:0a:ed:bd:38:72:b1:74:0e:82:ba:ce:c8:2f:88: d0:dd:20:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28i095Pf7tEf66gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZWNjZThiNmItODE0Mi00NTUxLWI0NjEtNDJmYjhmNTNhNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKLNZW/afqIswt4LiKb7r2uUZ2hRTI+RN7q9 knZEUmT+7Y1+/twDMfXk4HXm9GucWXuJeUC8OcED1zIx8xW+/BdjmdH9yCg1Skeu QET0TkDTjlFFoXX70AZa02qOF6tIGADta/VReYwSjcDAbJRHUlGzayFJCDOB75CF 2KeiwYA2KCFe3kI/qdiDMiJuDGmoeOqVh3dIdSYiqH6qFgn5eunuS2yLkgsKn7qz dilXwqZdgwgQdkpoVZUG/gUOwOgMmKaKl/CVlY1Hu73B9T4vKo+yRstPo/Ei+jvc ui6h/TYAzDAuNq0wmU7cs/tYhCUI0POYl4Km25IaADye5xpkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE0kh7iLcXDi2IoUtgCcWt1z6vvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWMwYTYwMjYtNmNlYi0z M2JlLWJmNDctMWZlZDQ4M2FiZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPQBAdp2lQiqXc4ifG5etw7Zqc/NPGRoijuKgwoaa7z2Waak+76j34x 7/w2x72Z5f9Mj0WwQs60dKLSVsKGK28OWre4jLg8sSj4s6rnge6Wo49hfn/sknqM /EEHVTVyhSUGMnqKomJlTwUMpZz+uNGpbD4JQUrq3JjdQudkBNWq7FZd4RuggLWG 3hbV4dJ0ppCrC/0bOAiMFHkr5NIDiHb3cwVOMIctFxePtUDhFbEXkQr7fGm+4R7r pKH5KdYrYGE6+Bxa5msga8RGe4xNsPvP0CDKCPpHJSCzqp4A55l8L4m64kuzWqmR 2UgI+/4K7b04crF0DoK6zsgviNDdIK8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:23 2025 by rpki-client