$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25acee3e-8915-3951-ab13-47e4eda65afd.roa File: 25acee3e-8915-3951-ab13-47e4eda65afd.roa (raw, json) Hash identifier: qI1eHlGDvP/S/4DSe5ftaFCZXHo/XIXcbo4dQOPt2FA= Subject key identifier: 95:38:98:E6:2A:A3:AC:17:D2:FA:E6:18:05:97:7B:00:2C:7B:1A:33 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2262A33098E86FFAD8000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25acee3e-8915-3951-ab13-47e4eda65afd.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:26:2a:33:09:8e:86:ff:ad:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ef62f3af-26de-40a8-9566-8d817552fa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:a0:16:4d:2d:6e:77:6a:8e:94:d6:f1:8f: 2e:2e:fb:fc:ce:e1:ec:0c:b1:0f:0b:4d:67:cb:01: 59:0e:18:d2:03:35:ae:f6:96:09:b3:e0:02:51:46: ec:f5:f1:a5:fe:c0:af:87:6f:0e:86:3e:b7:d9:41: 57:dd:69:cd:63:b6:38:d0:94:94:bd:c8:89:99:d0: 8e:e7:ab:0b:af:fc:f6:b2:57:8f:4f:94:1d:a0:8f: ea:f3:62:c7:29:66:a1:21:e1:bb:4c:47:aa:4e:31: a6:ce:35:68:d1:a6:bd:dc:fc:1f:7a:c6:4e:9f:6e: c4:45:43:5a:e6:45:de:3f:20:65:8f:a1:dc:2b:26: ea:0e:e2:54:e5:2b:62:3d:89:51:05:c8:08:55:77: f4:d3:d5:b4:08:c3:1b:0b:ba:26:5b:8e:56:c4:d3: e0:bc:05:c7:dc:4b:0a:eb:bc:ab:09:3d:81:dd:25: 42:ef:67:91:5e:36:c9:78:96:c3:39:da:46:da:87: c3:aa:10:ac:49:c0:be:83:cb:c7:a4:f9:ef:dc:9a: 1f:06:23:36:11:06:81:b9:78:b6:db:fb:4c:14:d3: 80:57:67:bb:10:cb:1b:a7:e7:8c:d9:fc:31:93:70: 93:03:f1:da:00:31:84:14:14:cc:df:a4:b4:65:cf: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:38:98:E6:2A:A3:AC:17:D2:FA:E6:18:05:97:7B:00:2C:7B:1A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25acee3e-8915-3951-ab13-47e4eda65afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:49:e7:73:57:ff:ef:08:f1:a7:12:ef:67:cf:0e:e1:77:03: 34:08:df:87:7a:a5:3a:a8:10:2b:38:22:ed:fd:79:e5:39:e3: 33:58:41:ea:47:d4:f0:ee:af:6f:c6:25:b8:97:6f:20:86:a9: dd:23:c6:de:7c:50:8f:82:91:64:fb:6a:d5:15:c8:38:52:57: be:dc:05:39:2f:6e:d7:ac:ce:1e:28:61:a2:f3:5e:95:e4:77: 8c:70:ba:fd:15:9c:3d:08:73:f6:cc:5a:c0:e2:42:8e:29:89: 1a:4e:db:57:21:22:6f:5a:3f:08:87:f5:41:8e:5e:b8:09:e7: e7:6e:5c:0a:b5:26:34:2f:bf:a4:96:a4:8e:0d:b5:14:3e:13: 20:38:11:a4:9a:f5:aa:86:a9:b7:6f:52:1d:3e:90:54:be:90: 4a:97:01:60:76:b3:5b:62:c8:c2:32:77:3c:3e:c7:5a:5d:31: 0d:15:13:93:5c:b3:ca:a2:f6:9f:e4:17:ee:a4:b6:e4:30:9b: 93:f3:9b:95:0e:2c:92:87:66:02:c3:44:4b:7f:5e:7e:5c:65: 67:5a:ec:1b:2c:df:04:68:14:a8:8a:1d:72:07:a6:72:77:8a: 0c:61:09:0f:4a:72:59:ce:05:19:a4:37:8b:8d:6d:ed:72:ae: cb:eb:a6:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iYqMwmOhv+tgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZWY2MmYzYWYtMjZkZS00MGE4LTk1NjYtOGQ4MTc1NTJmYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZOgFk0tbndqjpTW8Y8uLvv8zuHsDLEPC01n ywFZDhjSAzWu9pYJs+ACUUbs9fGl/sCvh28Ohj632UFX3WnNY7Y40JSUvciJmdCO 56sLr/z2slePT5QdoI/q82LHKWahIeG7TEeqTjGmzjVo0aa93PwfesZOn27ERUNa 5kXePyBlj6HcKybqDuJU5StiPYlRBcgIVXf009W0CMMbC7omW45WxNPgvAXH3EsK 67yrCT2B3SVC72eRXjbJeJbDOdpG2ofDqhCsScC+g8vHpPnv3JofBiM2EQaBuXi2 2/tMFNOAV2e7EMsbp+eM2fwxk3CTA/HaADGEFBTM36S0Zc9UVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU4mOYqo6wX0vrmGAWXewAsexozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVhY2VlM2UtODkxNS0z OTUxLWFiMTMtNDdlNGVkYTY1YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9J53NX/+8I8acS72fPDuF3AzQI34d6pTqoECs4Iu39eeU54zNYQepH 1PDur2/GJbiXbyCGqd0jxt58UI+CkWT7atUVyDhSV77cBTkvbteszh4oYaLzXpXk d4xwuv0VnD0Ic/bMWsDiQo4piRpO21chIm9aPwiH9UGOXrgJ5+duXAq1JjQvv6SW pI4NtRQ+EyA4EaSa9aqGqbdvUh0+kFS+kEqXAWB2s1tiyMIydzw+x1pdMQ0VE5Nc s8qi9p/kF+6ktuQwm5Pzm5UOLJKHZgLDREt/Xn5cZWda7Bss3wRoFKiKHXIHpnJ3 igxhCQ9KclnOBRmkN4uNbe1yrsvrphQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:45 2025 by rpki-client