$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21b0ec7c-19dc-3c76-92ff-224761fef2ed.roa File: 21b0ec7c-19dc-3c76-92ff-224761fef2ed.roa (raw, json) Hash identifier: f35xg4ospKUhLAR3iLAdmMLPEEndWrLafae/bgHl9CY= Subject key identifier: 23:02:A5:CB:CB:39:23:ED:5C:7F:2C:11:43:58:E6:97:AE:F0:A5:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C3937B9719152FDD5D780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21b0ec7c-19dc-3c76-92ff-224761fef2ed.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:39:37:b9:71:91:52:fd:d5:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=22cb2c72-157e-4f71-881e-0b84c0abda8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:3d:13:a3:cb:1a:95:41:dc:0b:7f:92:5e: 61:5c:ad:e3:d2:e3:b9:af:bb:c9:3f:22:5b:a4:eb: f6:e9:72:6b:4f:e4:c2:fd:4b:ff:40:97:aa:8a:eb: ce:0b:10:a8:5f:83:bf:02:9b:82:34:2c:68:d0:3d: 7f:39:ea:3f:c3:ef:d4:4b:01:f9:c8:2e:cb:74:06: c9:92:3e:fe:12:87:59:78:78:f4:76:2d:e1:76:bb: ff:7e:20:e5:f9:54:dc:54:86:67:dd:24:13:0b:6e: 0e:92:d9:33:e7:00:74:97:b6:36:65:67:46:fe:56: 07:3e:69:b0:c5:dc:30:29:73:cd:9b:9a:3e:d2:a3: 8a:12:f9:c6:41:07:03:b0:de:35:3a:29:88:00:88: 0f:1a:ca:2b:3a:3e:92:3b:7c:79:1c:ef:50:4b:23: 3d:39:dc:22:88:bd:92:c5:86:6d:90:2a:a8:6d:bc: f1:47:61:15:68:1a:17:3b:06:f7:cd:b2:a0:26:13: 61:26:da:db:16:1e:ba:3e:22:cd:38:bd:a4:a5:a9: 64:8d:1e:65:33:11:71:a7:66:04:10:5a:b8:d2:61: 78:36:1d:78:5f:b1:84:d5:a0:3d:5d:de:90:ff:8b: 1e:87:36:5c:23:66:e1:c4:1b:7f:e0:66:10:e0:50: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:A5:CB:CB:39:23:ED:5C:7F:2C:11:43:58:E6:97:AE:F0:A5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21b0ec7c-19dc-3c76-92ff-224761fef2ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c7:1e:06:eb:9d:a6:60:9b:62:a2:ca:11:d8:80:80:c1:8d: 1c:f7:81:df:84:4d:91:42:ed:bf:78:13:d3:9c:69:f8:68:f6: 62:44:b4:4d:8b:bc:4d:ab:25:cd:eb:3f:c4:90:c5:fa:ba:61: e5:7f:f9:0a:f8:65:2d:b7:0e:16:a9:0a:ba:74:63:c0:61:e9: 50:25:d8:fd:3a:e9:e1:a4:96:5a:d6:da:65:d7:05:b8:2b:40: 33:13:1b:40:3d:5e:78:b5:2e:c3:65:15:4f:de:60:fa:6f:6d: 19:ac:f2:d2:f2:12:20:43:d7:2a:b6:5c:29:bf:0f:5b:ff:13: 36:df:66:30:9f:23:d1:89:c1:88:1d:bd:6a:80:3e:e1:d3:dd: 26:7c:2f:22:b0:32:1b:34:cd:61:a2:4a:ab:8b:e6:8e:f6:63: 15:a3:b3:7b:6e:2a:52:4a:63:bd:bf:ac:a6:d0:67:b8:eb:93: 83:5d:46:bb:6c:db:30:a5:3c:55:e7:e2:13:b3:f9:ed:8a:2b: c8:90:f2:48:da:0b:6e:e7:1d:bd:54:56:0d:59:90:0d:97:24: 9c:f6:ed:96:bb:a7:ae:2f:fd:c9:84:22:7f:0b:21:85:37:ae: a2:4e:96:8f:f0:8d:5a:e1:63:ca:15:ec:46:60:e4:b8:6a:e8: 86:1a:ce:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDk3uXGRUv3V14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MjJjYjJjNzItMTU3ZS00ZjcxLTg4MWUtMGI4NGMwYWJkYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg749E6PLGpVB3At/kl5hXK3j0uO5r7vJPyJb pOv26XJrT+TC/Uv/QJeqiuvOCxCoX4O/ApuCNCxo0D1/Oeo/w+/USwH5yC7LdAbJ kj7+EodZeHj0di3hdrv/fiDl+VTcVIZn3SQTC24Oktkz5wB0l7Y2ZWdG/lYHPmmw xdwwKXPNm5o+0qOKEvnGQQcDsN41OimIAIgPGsorOj6SO3x5HO9QSyM9OdwiiL2S xYZtkCqobbzxR2EVaBoXOwb3zbKgJhNhJtrbFh66PiLNOL2kpalkjR5lMxFxp2YE EFq40mF4Nh14X7GE1aA9Xd6Q/4sehzZcI2bhxBt/4GYQ4FBjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMCpcvLOSPtXH8sEUNY5peu8KVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFiMGVjN2MtMTlkYy0z Yzc2LTkyZmYtMjI0NzYxZmVmMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTHHgbrnaZgm2KiyhHYgIDBjRz3gd+ETZFC7b94E9Ocafho9mJEtE2L vE2rJc3rP8SQxfq6YeV/+Qr4ZS23DhapCrp0Y8Bh6VAl2P066eGkllrW2mXXBbgr QDMTG0A9Xni1LsNlFU/eYPpvbRms8tLyEiBD1yq2XCm/D1v/EzbfZjCfI9GJwYgd vWqAPuHT3SZ8LyKwMhs0zWGiSquL5o72YxWjs3tuKlJKY72/rKbQZ7jrk4NdRrts 2zClPFXn4hOz+e2KK8iQ8kjaC27nHb1UVg1ZkA2XJJz27Za7p64v/cmEIn8LIYU3 rqJOlo/wjVrhY8oV7EZg5Lhq6IYazps= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:47 2025 by rpki-client