$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa File: 2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa (raw, json) Hash identifier: xeDVnkTd2Ab/pSb0GJ2ZIYiTTBUmhD9ecrM/2vYVpjQ= Subject key identifier: F1:B6:B7:8F:22:2C:15:A0:3F:8B:8A:75:B7:09:FA:7E:FE:C2:5A:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C226570F604E91B255A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:22:65:70:f6:04:e9:1b:25:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=31f9bfef-e262-4aeb-a2d1-c71ab05fd6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:f3:df:86:01:95:f8:5f:16:66:6b:e1:84: 64:78:49:1f:ba:59:5c:77:93:a4:92:15:14:b2:59: 1b:76:b8:8a:39:b2:44:4c:c5:62:b4:07:51:6b:05: fc:43:86:ab:cd:ee:06:73:58:61:bf:77:a4:35:21: 48:5f:82:27:b2:a6:ee:81:28:68:71:21:c3:52:d0: b7:ec:c0:a6:92:7c:be:4d:91:18:bb:ac:8a:54:d3: 76:57:b8:c5:2c:3a:55:30:07:be:b8:b3:1a:38:d3: a0:b6:34:09:a5:ac:ad:97:11:d8:da:de:25:68:b0: b8:a3:cc:35:ce:20:fa:95:0d:8b:9a:29:93:90:01: 92:8f:7a:33:ea:ef:9d:04:37:b7:26:8e:c6:e0:d7: c7:87:b4:38:3d:0a:2f:49:23:34:8c:1a:38:46:9e: 1c:59:a9:d6:e9:4e:02:8e:6e:b4:43:f8:95:6a:c7: 95:e7:0c:89:54:b1:12:cb:da:a4:20:ca:e6:20:a1: 15:f8:fc:17:a4:a9:0b:b1:75:ad:39:37:91:c1:4f: f8:6f:1d:cd:b6:c1:f0:51:2d:4c:79:a7:48:14:01: 6b:1b:1d:50:84:00:20:c5:36:54:4e:9d:67:8b:69: 1d:2e:1b:54:6c:0f:73:fb:fd:ef:fb:c8:36:ad:66: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B6:B7:8F:22:2C:15:A0:3F:8B:8A:75:B7:09:FA:7E:FE:C2:5A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9e:e7:4d:3d:70:43:39:b2:d6:b0:77:34:51:0d:ac:71:fd: a3:a0:66:57:51:02:8f:4b:5a:b5:e6:8b:c2:b3:4b:36:e6:6a: b3:33:0e:6f:74:2e:ba:d9:90:bc:5f:ec:b5:0b:71:51:35:45: 43:b5:98:8a:32:56:25:21:65:dc:1c:88:3c:21:4b:bd:25:83: 8d:2c:fb:fb:64:8f:3c:62:1f:d8:1f:5a:8a:aa:7c:6a:d7:ce: f6:a7:cb:e1:f3:6c:67:61:15:a1:e8:fa:5a:73:9e:8a:1d:ec: 7c:04:d3:1c:f9:4b:88:c0:9a:09:74:5e:9a:08:00:af:9e:1a: 0a:37:39:fe:81:e4:2e:c7:92:ae:21:1d:44:74:5f:50:88:dc: 61:f4:6d:96:14:a0:01:79:ae:d3:9b:99:e4:1d:63:db:53:fc: c0:c0:86:75:d8:4d:54:0d:57:e5:a6:58:a0:72:d6:2c:07:19: 11:6f:ef:43:96:b1:a2:0b:e8:a5:0d:6d:c0:ab:76:df:37:3f: 10:b8:f8:46:3b:69:c8:de:5a:93:1d:af:30:73:08:28:38:89: f8:f6:44:ca:8e:0f:73:3b:f0:9f:a5:34:88:8e:50:e5:56:4b: 7b:84:e0:46:8c:81:2a:52:dc:4b:d1:19:bb:e9:3d:10:e4:e9: ed:de:99:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCJlcPYE6RslWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MzFmOWJmZWYtZTI2Mi00YWViLWEyZDEtYzcxYWIwNWZkNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qfz34YBlfhfFmZr4YRkeEkfullcd5OkkhUU slkbdriKObJETMVitAdRawX8Q4arze4Gc1hhv3ekNSFIX4InsqbugShocSHDUtC3 7MCmkny+TZEYu6yKVNN2V7jFLDpVMAe+uLMaONOgtjQJpaytlxHY2t4laLC4o8w1 ziD6lQ2LmimTkAGSj3oz6u+dBDe3Jo7G4NfHh7Q4PQovSSM0jBo4Rp4cWanW6U4C jm60Q/iVaseV5wyJVLESy9qkIMrmIKEV+PwXpKkLsXWtOTeRwU/4bx3NtsHwUS1M eadIFAFrGx1QhAAgxTZUTp1ni2kdLhtUbA9z+/3v+8g2rWYekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG2t48iLBWgP4uKdbcJ+n7+wlr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk0NWI1OTUtMWRkYi0z OTc4LTgyZjYtNGIzYTNjZDIyZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEme5009cEM5stawdzRRDaxx/aOgZldRAo9LWrXmi8KzSzbmarMzDm90 LrrZkLxf7LULcVE1RUO1mIoyViUhZdwciDwhS70lg40s+/tkjzxiH9gfWoqqfGrX zvany+HzbGdhFaHo+lpznood7HwE0xz5S4jAmgl0XpoIAK+eGgo3Of6B5C7Hkq4h HUR0X1CI3GH0bZYUoAF5rtObmeQdY9tT/MDAhnXYTVQNV+WmWKBy1iwHGRFv70OW saIL6KUNbcCrdt83PxC4+EY7acjeWpMdrzBzCCg4ifj2RMqOD3M78J+lNIiOUOVW S3uE4EaMgSpS3EvRGbvpPRDk6e3emU8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:32 2025 by rpki-client