$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33e100ea-15e3-30de-b8ba-bc219489a081.roa File: 33e100ea-15e3-30de-b8ba-bc219489a081.roa (raw, json) Hash identifier: /1Zohf4EdoCNbY456Z44Q7Jb8eOCkCEhDRDYhV36DkA= Subject key identifier: 45:7A:9E:C5:78:82:A0:29:1F:32:AA:EF:34:C1:40:91:3E:48:5B:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AFC7E449D3AF1E026F6493380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33e100ea-15e3-30de-b8ba-bc219489a081.roa Signing time: Tue 26 Aug 2025 16:18:53 +0000 ROA not before: Tue 26 Aug 2025 16:18:53 +0000 ROA not after: Mon 24 Nov 2025 17:18:53 +0000 asID: 22773 IP address blocks: 68.8.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:7e:44:9d:3a:f1:e0:26:f6:49:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 26 16:18:53 2025 GMT Not After : Nov 24 17:18:53 2025 GMT Subject: CN=775da54f-34fc-4f86-83e2-1cf0604412ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:d1:ed:9c:8b:b5:c6:5c:10:0b:2d:0f:36: c4:c0:47:df:70:b6:9e:ce:59:4f:7f:6b:24:0b:8a: 36:92:af:eb:0a:d4:c3:7e:69:fe:dd:2b:2b:70:7e: dd:1f:a7:b7:bf:22:a9:f4:f9:b0:2f:af:fb:c9:cb: 89:84:f8:f3:5c:d5:3b:d3:6a:22:5e:4a:25:63:e0: b2:74:6f:37:d8:c5:b7:77:89:15:e8:1c:5c:51:9e: 42:53:65:bc:2a:1b:6a:1d:33:4f:f6:d7:f1:02:8a: 37:dc:6e:0e:36:31:94:0e:a2:3a:44:f1:37:08:04: 04:5e:12:22:0d:4a:bb:a9:a1:2c:a5:7a:2a:c5:97: d1:00:92:c1:1d:94:1b:58:b6:3b:62:d1:cc:ff:e3: 4b:a2:0a:03:8d:87:b2:5e:42:3c:a9:6c:eb:da:0c: 91:da:48:c9:d7:f0:9c:78:0e:03:a8:69:4b:d4:f1: fa:91:2c:19:98:64:f0:4e:41:03:0c:92:8c:31:53: 29:6a:a6:26:05:01:d3:6a:dd:55:1f:f6:5b:28:01: da:d8:80:96:d6:1d:8c:72:86:27:98:b8:7a:4b:8c: 8c:9b:0c:52:d8:8f:7d:aa:06:68:9c:75:67:46:2c: d1:28:57:96:53:94:ee:f2:77:9e:04:b3:6d:d9:63: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7A:9E:C5:78:82:A0:29:1F:32:AA:EF:34:C1:40:91:3E:48:5B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33e100ea-15e3-30de-b8ba-bc219489a081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9f:76:8c:6e:1a:bc:38:62:6f:70:09:16:06:ea:af:bd:2e: 20:46:97:f4:ce:36:17:41:4d:c9:16:e3:34:fe:d5:4c:45:ff: ae:e3:6c:d8:79:b8:31:d0:c2:80:be:e8:fc:27:a4:c4:c4:09: a3:3f:96:4e:41:56:35:ee:c7:af:04:6a:80:b1:50:c7:f1:75: aa:df:26:a3:1f:d0:df:27:04:cb:d2:78:c3:53:0a:b1:df:77: 1c:1f:74:06:4a:f9:16:8d:41:e1:10:bd:07:e7:53:63:27:85: d8:8b:70:69:d7:94:ff:36:02:4e:9c:b7:33:00:66:c6:5a:a9: 8e:c3:f2:b9:08:0e:8f:fa:80:b3:69:26:25:8a:b0:83:6e:7b: fa:94:12:5e:2d:e5:d5:e0:2f:c7:ed:4f:da:3e:6c:e3:25:e4: 57:79:2b:78:df:2b:19:f6:42:3a:60:28:46:5e:34:b2:2e:36: c1:b9:8c:58:f5:98:cd:20:b7:96:8d:7d:48:e0:18:5e:b1:79: c9:2a:b0:0d:87:05:a6:2a:c9:ca:75:66:c6:54:92:7e:ec:5b: 68:e6:d7:81:43:b0:9a:8e:51:07:86:ce:1a:64:b9:26:71:a8: 91:6a:b5:3e:7a:4b:3e:6f:9b:9b:36:1e:06:65:4d:1d:3a:51: 02:81:ac:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8fkSdOvHgJvZJM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNjE2MTg1M1oXDTI1MTEyNDE3MTg1M1owLzEtMCsGA1UEAxMk Nzc1ZGE1NGYtMzRmYy00Zjg2LTgzZTItMWNmMDYwNDQxMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3vR7ZyLtcZcEAstDzbEwEffcLaezllPf2sk C4o2kq/rCtTDfmn+3SsrcH7dH6e3vyKp9PmwL6/7ycuJhPjzXNU702oiXkolY+Cy dG832MW3d4kV6BxcUZ5CU2W8KhtqHTNP9tfxAoo33G4ONjGUDqI6RPE3CAQEXhIi DUq7qaEspXoqxZfRAJLBHZQbWLY7YtHM/+NLogoDjYeyXkI8qWzr2gyR2kjJ1/Cc eA4DqGlL1PH6kSwZmGTwTkEDDJKMMVMpaqYmBQHTat1VH/ZbKAHa2ICW1h2McoYn mLh6S4yMmwxS2I99qgZonHVnRizRKFeWU5Tu8neeBLNt2WPygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV6nsV4gqApHzKq7zTBQJE+SFsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNlMTAwZWEtMTVlMy0z MGRlLWI4YmEtYmMyMTk0ODlhMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACefdoxuGrw4Ym9wCRYG6q+9LiBGl/TONhdBTckW4zT+1UxF/67jbNh5 uDHQwoC+6PwnpMTECaM/lk5BVjXux68EaoCxUMfxdarfJqMf0N8nBMvSeMNTCrHf dxwfdAZK+RaNQeEQvQfnU2MnhdiLcGnXlP82Ak6ctzMAZsZaqY7D8rkIDo/6gLNp JiWKsINue/qUEl4t5dXgL8ftT9o+bOMl5Fd5K3jfKxn2QjpgKEZeNLIuNsG5jFj1 mM0gt5aNfUjgGF6xeckqsA2HBaYqycp1ZsZUkn7sW2jm14FDsJqOUQeGzhpkuSZx qJFqtT56Sz5vm5s2HgZlTR06UQKBrAo= -----END CERTIFICATE-----Generated at Mon Sep 15 06:15:23 2025 by rpki-client