$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3883a979-a3f0-3b9d-be94-23fc8a4c48a0.roa File: 3883a979-a3f0-3b9d-be94-23fc8a4c48a0.roa (raw, json) Hash identifier: YU2BzjLae7IhsS4l5qMBihtPT4z2lNcosfSBvqL1puQ= Subject key identifier: 7E:41:AE:8E:B4:52:BD:20:34:C8:59:5E:05:2A:6A:F3:D9:93:69:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20F2C966072E950627D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3883a979-a3f0-3b9d-be94-23fc8a4c48a0.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0f:2c:96:60:72:e9:50:62:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=208c5e4b-e692-4fd0-9689-db30e910d096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:23:d9:09:cf:e0:90:73:b5:c3:71:74:89: 5f:16:07:4d:47:ac:7c:8a:2d:a5:ba:bc:30:e0:68: b5:76:e5:01:80:14:43:24:03:89:43:24:ba:49:67: 03:92:87:5b:89:c1:43:08:b3:2a:46:00:8f:60:b0: 1a:59:ae:91:56:a7:57:2f:2b:ca:96:96:98:ad:a6: 4f:0d:0c:4d:30:97:cd:0b:cb:86:6a:31:3a:2e:eb: 50:1f:b9:6e:d2:76:fa:b2:23:69:d5:b1:da:6f:a2: c8:7e:a9:e5:67:e2:42:42:73:bb:65:a2:5e:7b:64: 9d:ae:bd:28:e7:d3:8e:0d:b8:66:18:6a:68:bd:bd: 51:6a:c6:7e:43:a3:82:ba:ce:3a:08:83:e2:a0:50: 23:e0:28:8c:38:3a:fa:54:ba:81:8d:bf:9e:a0:d7: 9a:54:dc:37:21:52:e8:1e:27:3d:63:f9:d1:5f:b6: 87:0a:07:86:0b:44:66:99:e5:e8:0f:d6:dd:9d:bf: d1:51:06:5b:de:53:57:4b:2d:c2:09:51:c2:57:6e: 16:a8:e6:34:21:a9:88:ef:79:84:a0:42:1f:b8:a9: 95:2a:fd:8a:0a:a8:c5:cb:06:90:b1:c1:91:eb:e1: c7:62:e1:7b:7c:2d:2b:61:9b:e5:81:83:ce:f1:26: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:41:AE:8E:B4:52:BD:20:34:C8:59:5E:05:2A:6A:F3:D9:93:69:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3883a979-a3f0-3b9d-be94-23fc8a4c48a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:29:a0:d0:af:48:bc:a9:72:a6:f2:da:1a:1b:e7:91:9e:56: f0:45:da:61:5e:df:34:ce:0e:c7:80:69:ed:2b:d9:e6:39:a9: 0c:c3:97:2f:2f:8e:06:7b:fd:47:ac:97:29:a9:11:2d:18:30: fe:62:64:4b:56:7a:cd:b1:c9:af:2f:1c:89:bd:41:bf:4e:ed: 0d:65:e4:46:42:81:30:35:7c:82:50:85:11:9f:13:e5:de:81: da:d0:a5:07:31:00:3c:10:29:08:5c:a0:0c:ea:1d:fc:c6:bc: d3:c0:b3:c4:eb:a6:ae:39:1b:ba:58:61:e6:78:69:e5:ff:3c: 4d:bd:ec:d3:45:49:0b:ce:76:79:88:c1:5b:a9:ac:0a:11:5a: b3:f2:b7:9b:8d:d1:39:c1:c7:0b:ab:d1:71:09:c8:94:f4:ca: a7:57:04:55:b0:28:72:8f:dc:66:ee:d8:41:ca:4d:d7:88:a6: 95:0f:48:78:47:79:7a:53:d2:49:cb:29:61:94:17:c3:e7:b4: 36:04:9d:7f:eb:46:06:58:c6:f2:2f:5e:7c:9f:4a:4c:a8:3d: ea:e4:be:7a:6a:da:a6:87:69:ab:43:5e:a8:7f:be:fd:34:de: 9d:db:d1:aa:be:a8:80:06:5a:24:b5:70:d6:dc:46:bd:34:24: e5:57:b8:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28g8slmBy6VBifYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjA4YzVlNGItZTY5Mi00ZmQwLTk2ODktZGIzMGU5MTBkMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEj2QnP4JBztcNxdIlfFgdNR6x8ii2lurww 4Gi1duUBgBRDJAOJQyS6SWcDkodbicFDCLMqRgCPYLAaWa6RVqdXLyvKlpaYraZP DQxNMJfNC8uGajE6LutQH7lu0nb6siNp1bHab6LIfqnlZ+JCQnO7ZaJee2Sdrr0o 59OODbhmGGpovb1RasZ+Q6OCus46CIPioFAj4CiMODr6VLqBjb+eoNeaVNw3IVLo Hic9Y/nRX7aHCgeGC0RmmeXoD9bdnb/RUQZb3lNXSy3CCVHCV24WqOY0IamI73mE oEIfuKmVKv2KCqjFywaQscGR6+HHYuF7fC0rYZvlgYPO8SYxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5Bro60Ur0gNMhZXgUqavPZk2kGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg4M2E5NzktYTNmMC0z YjlkLWJlOTQtMjNmYzhhNGM0OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUpoNCvSLypcqby2hob55GeVvBF2mFe3zTODseAae0r2eY5qQzDly8v jgZ7/UeslympES0YMP5iZEtWes2xya8vHIm9Qb9O7Q1l5EZCgTA1fIJQhRGfE+Xe gdrQpQcxADwQKQhcoAzqHfzGvNPAs8Trpq45G7pYYeZ4aeX/PE297NNFSQvOdnmI wVuprAoRWrPyt5uN0TnBxwur0XEJyJT0yqdXBFWwKHKP3Gbu2EHKTdeIppUPSHhH eXpT0knLKWGUF8PntDYEnX/rRgZYxvIvXnyfSkyoPerkvnpq2qaHaatDXqh/vv00 3p3b0aq+qIAGWiS1cNbcRr00JOVXuFE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:36 2025 by rpki-client