$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa File: 2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa (raw, json) Hash identifier: WnFnIZjvegDJG5vp43AzTbDoGf5Ujb8cnDsxjuEq4Ik= Subject key identifier: 01:17:08:F1:77:A7:61:92:94:4D:37:DF:16:FC:3D:D9:A6:50:04:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C533AE51E7E7580F6F200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:53:3a:e5:1e:7e:75:80:f6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=541c9a2d-fd79-4bba-918a-5b72fadf74aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:32:62:b1:f7:67:37:7c:95:d7:94:2b:e9: 0b:c8:11:d5:89:f0:22:83:d6:2d:61:92:6a:d0:3f: 8e:12:a4:00:43:64:c7:e4:f4:96:37:13:27:35:e5: cb:9b:4c:ec:f4:9b:b4:aa:e0:f9:c4:ab:9e:a1:64: 57:a0:cf:c4:64:c0:04:86:2f:d5:65:fa:78:64:e3: 5e:7f:cc:35:72:c0:2b:b8:b4:de:07:a8:d5:87:4e: 3c:38:93:57:c0:c1:ed:07:87:8c:06:c3:a9:0c:ff: 77:ba:de:71:47:cb:e4:52:87:05:84:dd:2c:a2:15: 28:56:3d:74:36:e6:ac:03:dd:61:5c:71:ed:00:34: 15:0e:e0:b0:75:2f:b3:cc:95:88:24:54:57:30:16: 62:58:6e:86:75:3c:22:2f:6a:e0:fa:2e:48:15:31: 0a:0a:0b:5c:f7:79:7d:24:57:60:3b:7e:f5:57:cc: 56:b6:d0:49:6d:6c:0d:66:27:62:e0:c5:48:e2:98: 29:42:76:a9:a5:cb:04:60:67:5b:83:31:0e:df:8f: 99:3a:3b:df:f9:07:5a:a0:fb:6e:45:43:cc:d5:df: f5:94:db:17:8e:43:79:df:3b:bb:ff:61:82:8e:6b: f6:1e:de:ef:52:90:e3:b9:bc:8c:a7:87:30:28:e1: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:08:F1:77:A7:61:92:94:4D:37:DF:16:FC:3D:D9:A6:50:04:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba29e2b-9f53-328e-8abc-a2ef2f371814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:28:12:66:e8:92:e6:cd:5e:b3:12:d1:06:70:65:ce:aa:0a: 3f:a4:3e:e7:1f:ab:ea:71:e5:49:29:ea:f0:e5:b3:58:ad:4b: aa:79:0e:b3:ed:f1:0d:14:f2:17:0f:ec:8b:0a:2a:bf:4e:c1: 15:96:cd:e6:ce:6d:e6:fe:20:66:01:10:a2:9b:92:1f:09:aa: 7b:15:76:7d:0f:8d:86:b8:47:6f:a4:e5:6d:4a:10:f5:ef:c2: 90:0f:3d:57:36:6e:64:e6:6f:84:ed:7d:36:e6:74:ea:07:3e: a7:f4:99:07:dd:6a:6b:d5:34:c0:06:e9:68:9b:d2:3e:ac:5a: c3:70:c9:5e:fc:f3:24:1b:5c:e5:67:f3:3e:09:48:ec:d4:40: a5:15:75:23:f7:d0:b6:eb:96:af:cd:98:5d:9e:91:5e:6d:88: f2:6c:f6:c2:45:85:1d:11:b5:63:3f:a1:d9:10:3e:74:aa:6a: 0a:dd:9e:7d:12:a7:00:fe:49:a3:ce:d2:46:d1:cf:eb:5f:22: 62:26:50:ae:ec:ed:ff:8b:90:92:0d:63:03:ec:93:26:75:ee: 79:80:34:a0:60:37:ad:65:96:80:02:0f:fc:0e:03:d3:c9:ea: 62:44:d9:10:30:43:71:49:e2:54:9a:7e:ed:f2:7d:a6:1d:aa: 44:17:d5:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFM65R5+dYD28gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTQxYzlhMmQtZmQ3OS00YmJhLTkxOGEtNWI3MmZhZGY3NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aoyYrH3Zzd8ldeUK+kLyBHVifAig9YtYZJq 0D+OEqQAQ2TH5PSWNxMnNeXLm0zs9Ju0quD5xKueoWRXoM/EZMAEhi/VZfp4ZONe f8w1csAruLTeB6jVh048OJNXwMHtB4eMBsOpDP93ut5xR8vkUocFhN0sohUoVj10 NuasA91hXHHtADQVDuCwdS+zzJWIJFRXMBZiWG6GdTwiL2rg+i5IFTEKCgtc93l9 JFdgO371V8xWttBJbWwNZidi4MVI4pgpQnappcsEYGdbgzEO34+ZOjvf+QdaoPtu RUPM1d/1lNsXjkN53zu7/2GCjmv2Ht7vUpDjubyMp4cwKOHBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEXCPF3p2GSlE033xb8PdmmUAQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJhMjllMmItOWY1My0z MjhlLThhYmMtYTJlZjJmMzcxODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4oEmbokubNXrMS0QZwZc6qCj+kPucfq+px5Ukp6vDls1itS6p5DrPt 8Q0U8hcP7IsKKr9OwRWWzebObeb+IGYBEKKbkh8JqnsVdn0PjYa4R2+k5W1KEPXv wpAPPVc2bmTmb4TtfTbmdOoHPqf0mQfdamvVNMAG6Wib0j6sWsNwyV788yQbXOVn 8z4JSOzUQKUVdSP30Lbrlq/NmF2ekV5tiPJs9sJFhR0RtWM/odkQPnSqagrdnn0S pwD+SaPO0kbRz+tfImImUK7s7f+LkJINYwPskyZ17nmANKBgN61lloACD/wOA9PJ 6mJE2RAwQ3FJ4lSafu3yfaYdqkQX1bk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:11 2025 by rpki-client