$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa File: 2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa (raw, json) Hash identifier: ES0cmY04oRVE+2lKC+JyqcvnCNiLHzr4Z9es6u06EBE= Subject key identifier: 42:A7:E9:D4:46:26:CA:0D:99:57:1F:D4:41:D5:DF:6F:31:22:7F:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2647C37FF89746837D3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:64:7c:37:ff:89:74:68:37:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a0445e6e-c4c0-47a2-aa7b-b6ce87d35623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:31:f5:81:ce:0c:b8:92:aa:06:83:fa:47: 25:96:df:6b:a8:3d:3b:4b:47:3a:22:85:e7:f8:21: 90:5c:32:d2:21:13:2c:a8:3d:f6:9c:1e:7b:ad:29: f5:34:9e:40:7c:7c:b8:ab:98:4a:a6:c1:72:3b:86: e3:59:62:b2:f7:c3:83:42:4b:3e:60:69:fa:d2:7a: 95:11:a1:61:62:ec:50:b6:fd:3c:bb:ab:7a:32:09: c9:13:3f:70:a0:45:06:49:6c:d2:f3:33:b6:b9:84: 30:10:e2:3d:1a:7f:3e:f7:f3:90:72:d4:12:06:e8: 09:6f:4d:c6:5a:95:e8:f2:e0:5e:bc:ae:65:a9:a9: 34:fc:3a:0f:20:bc:e5:51:5d:a2:62:22:74:38:b1: 84:7f:1f:33:ec:b2:57:6f:ac:f1:82:48:3c:a6:1d: d7:a3:dd:3f:7e:ef:c4:dc:86:65:44:d7:5f:b5:69: ee:b3:bf:86:e4:36:d6:83:d3:ba:aa:97:49:73:ce: 41:a3:5e:bf:fb:0a:68:43:16:39:ff:90:8e:32:34: e0:1d:9c:2b:e8:ab:00:b4:67:49:8b:42:69:58:85: dd:06:ee:63:10:37:60:fc:bc:d2:b5:04:0a:34:5f: d7:d2:65:e3:70:69:30:12:cd:f4:61:75:79:fe:5e: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A7:E9:D4:46:26:CA:0D:99:57:1F:D4:41:D5:DF:6F:31:22:7F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:34:9f:25:03:25:73:46:7d:d5:ed:9b:c5:ef:6e:d4:1f:1e: 83:af:59:af:30:39:a9:e6:29:7d:aa:8a:d3:f0:b6:69:5d:ad: c2:54:e5:07:7e:0f:dc:4a:ff:dd:ee:27:33:80:1e:56:80:34: 8c:6e:55:b7:76:2d:d2:5f:77:99:8d:3f:f5:dc:b1:4b:69:aa: be:cd:d8:4a:0d:aa:c5:c5:b7:6a:97:a1:2f:b8:b6:61:c9:b2: 22:de:6c:eb:fe:24:8e:03:43:55:8a:d3:0d:1f:18:93:9c:2c: ae:2d:b4:67:70:42:dd:be:7a:82:f1:ab:56:5d:77:b3:a6:b7: 05:35:6a:06:95:dd:e5:15:8e:84:17:35:4e:4b:ef:a9:8c:0c: 34:ef:3d:a0:6c:31:03:3f:ff:c2:a4:e9:49:7d:8a:50:ca:a3: cb:08:41:18:2a:46:93:84:18:75:40:00:8a:8d:23:13:32:08: c0:25:cb:92:7f:7f:26:ee:6d:b2:22:78:f1:d4:9a:3b:71:5e: 79:82:f5:71:2e:a2:1e:7c:94:a5:cb:91:64:0c:66:b4:cf:26: 3d:39:9f:cd:44:39:75:fe:92:af:78:c1:27:6a:8b:83:e7:88: c0:9b:ae:74:31:24:70:8d:80:d5:75:4d:b7:b1:5b:35:3b:b4: dc:d2:4c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mR8N/+JdGg308AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTA0NDVlNmUtYzRjMC00N2EyLWFhN2ItYjZjZTg3ZDM1NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrkx9YHODLiSqgaD+kcllt9rqD07S0c6IoXn +CGQXDLSIRMsqD32nB57rSn1NJ5AfHy4q5hKpsFyO4bjWWKy98ODQks+YGn60nqV EaFhYuxQtv08u6t6MgnJEz9woEUGSWzS8zO2uYQwEOI9Gn8+9/OQctQSBugJb03G WpXo8uBevK5lqak0/DoPILzlUV2iYiJ0OLGEfx8z7LJXb6zxgkg8ph3Xo90/fu/E 3IZlRNdftWnus7+G5DbWg9O6qpdJc85Bo16/+wpoQxY5/5COMjTgHZwr6KsAtGdJ i0JpWIXdBu5jEDdg/LzStQQKNF/X0mXjcGkwEs30YXV5/l6Q3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKn6dRGJsoNmVcf1EHV328xIn+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmVjYmYyNzEtYzMzNS0z M2I3LWJiYzktZGEwMGI0OGQzYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg0nyUDJXNGfdXtm8XvbtQfHoOvWa8wOanmKX2qitPwtmldrcJU5Qd+ D9xK/93uJzOAHlaANIxuVbd2LdJfd5mNP/XcsUtpqr7N2EoNqsXFt2qXoS+4tmHJ siLebOv+JI4DQ1WK0w0fGJOcLK4ttGdwQt2+eoLxq1Zdd7OmtwU1agaV3eUVjoQX NU5L76mMDDTvPaBsMQM//8Kk6Ul9ilDKo8sIQRgqRpOEGHVAAIqNIxMyCMAly5J/ fybubbIiePHUmjtxXnmC9XEuoh58lKXLkWQMZrTPJj05n81EOXX+kq94wSdqi4Pn iMCbrnQxJHCNgNV1TbexWzU7tNzSTIs= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:56 2025 by rpki-client