$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d2a5f6b-2782-3afa-a21c-3771c56ec4c0.roa File: 1d2a5f6b-2782-3afa-a21c-3771c56ec4c0.roa (raw, json) Hash identifier: U6FiO2JnQMAgMhfW5r/4QY5YsFq9UTeXVBdyKzJNo50= Subject key identifier: CC:83:23:A0:A8:AA:96:90:88:FE:48:F2:1B:19:A9:EE:03:E8:F2:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2157EC51E6093B59D0080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d2a5f6b-2782-3afa-a21c-3771c56ec4c0.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:15:7e:c5:1e:60:93:b5:9d:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c073a531-44fd-4b6b-a2ac-36b33c7e389d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:94:97:a0:e4:0e:e9:08:d7:53:ac:2a:d2: 15:46:f9:19:68:06:2f:7a:4c:0b:0b:5b:b4:a0:5e: 23:90:4a:31:7e:dc:31:c7:1e:eb:88:9f:d6:3f:70: ad:e2:37:db:4a:d0:41:2c:97:6b:72:4a:b9:06:5d: d5:a9:3b:3e:3a:83:8b:a0:e9:7a:9b:43:36:5b:1c: 54:c9:e5:46:1d:76:1c:6e:66:24:3e:a6:f5:18:02: 01:1a:b0:38:94:df:aa:3e:53:31:a5:f0:84:84:25: da:57:59:4f:9f:b4:41:62:6a:47:f6:09:df:3f:53: 4d:f6:11:62:82:b8:79:e5:cf:46:d3:4f:4b:47:72: 21:67:02:e9:93:c5:06:4a:bc:6a:8e:d1:b6:da:be: a2:66:9b:85:08:ee:30:90:9d:bf:6f:2b:ad:20:ac: 36:2c:3d:25:10:45:50:82:10:6a:4f:68:21:80:fc: 75:28:9d:61:6a:c3:8f:17:36:3c:9d:38:f7:4e:20: 45:ba:1a:82:46:22:d2:5e:03:d6:6f:b1:d4:a6:36: 79:ae:4c:58:dc:e3:9c:9c:0f:d0:9b:06:92:c7:2f: 00:31:8f:4d:dc:c4:af:23:3f:57:fa:69:fa:0d:e9: 74:cf:bc:06:2f:cf:ea:82:53:5b:d4:7b:8c:39:2d: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:23:A0:A8:AA:96:90:88:FE:48:F2:1B:19:A9:EE:03:E8:F2:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d2a5f6b-2782-3afa-a21c-3771c56ec4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ec:b4:e6:94:d3:5c:4a:2f:6f:54:7f:3d:31:0c:62:a7:c0: 72:d2:3d:09:40:04:c7:9f:f7:1b:e9:f1:12:0b:54:2f:df:a5: 12:02:49:05:98:a2:39:83:44:dc:f3:5f:2f:4a:bd:db:e5:29: c6:ac:61:d3:26:19:da:05:44:2f:71:18:2b:e4:1a:0d:cd:a9: 38:ba:22:05:25:65:e5:52:39:d0:5a:9c:3e:fc:8d:6c:41:cc: 08:e2:df:28:ba:94:dd:85:3b:87:ba:0f:0b:19:c2:ee:c8:1f: ef:64:63:5c:3a:b4:d3:89:a0:a1:d0:2e:a2:5a:af:a0:61:5a: 49:3c:da:60:5c:e9:3a:ff:5b:c0:7d:21:20:b9:93:03:62:e3: 43:42:0a:f9:7b:d5:d1:d7:19:b8:ee:7a:aa:9a:29:bc:05:8a: b9:4f:c6:b5:ae:6e:c1:6f:79:1e:19:a2:f0:a4:53:54:ad:a4: 08:fb:94:0d:14:7a:b5:e9:85:6b:77:39:9e:1a:0d:92:77:32: b9:d4:eb:08:ba:bf:d8:b3:0a:c3:50:5e:6b:d2:c5:04:53:ad: b1:93:c6:52:5e:f1:7d:da:0f:5d:e3:86:a4:da:9a:a6:b1:9c: b0:10:37:8e:81:a8:74:d6:b6:ec:3a:13:55:f1:cb:28:92:93: 79:ae:65:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hV+xR5gk7WdAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzA3M2E1MzEtNDRmZC00YjZiLWEyYWMtMzZiMzNjN2UzODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSSUl6DkDukI11OsKtIVRvkZaAYvekwLC1u0 oF4jkEoxftwxxx7riJ/WP3Ct4jfbStBBLJdrckq5Bl3VqTs+OoOLoOl6m0M2WxxU yeVGHXYcbmYkPqb1GAIBGrA4lN+qPlMxpfCEhCXaV1lPn7RBYmpH9gnfP1NN9hFi grh55c9G009LR3IhZwLpk8UGSrxqjtG22r6iZpuFCO4wkJ2/byutIKw2LD0lEEVQ ghBqT2ghgPx1KJ1hasOPFzY8nTj3TiBFuhqCRiLSXgPWb7HUpjZ5rkxY3OOcnA/Q mwaSxy8AMY9N3MSvIz9X+mn6Del0z7wGL8/qglNb1HuMOS12QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyDI6CoqpaQiP5I8hsZqe4D6PI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQyYTVmNmItMjc4Mi0z YWZhLWEyMWMtMzc3MWM1NmVjNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRApYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfstOaU01xKL29Ufz0xDGKnwHLSPQlABMef9xvp8RILVC/fpRICSQWY ojmDRNzzXy9KvdvlKcasYdMmGdoFRC9xGCvkGg3NqTi6IgUlZeVSOdBanD78jWxB zAji3yi6lN2FO4e6DwsZwu7IH+9kY1w6tNOJoKHQLqJar6BhWkk82mBc6Tr/W8B9 ISC5kwNi40NCCvl71dHXGbjueqqaKbwFirlPxrWubsFveR4ZovCkU1StpAj7lA0U erXphWt3OZ4aDZJ3MrnU6wi6v9izCsNQXmvSxQRTrbGTxlJe8X3aD13jhqTamqax nLAQN46BqHTWtuw6E1XxyyiSk3muZfg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:12 2025 by rpki-client