$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41217092-5b2c-31d1-a267-9ffe68a9747f.roa File: 41217092-5b2c-31d1-a267-9ffe68a9747f.roa (raw, json) Hash identifier: +PazLsS0QgaQZ1RT9VRxYkGUwh9/2B2gsiAP0w9+Ed4= Subject key identifier: 4E:53:A8:AB:0C:74:B1:B0:0A:19:C4:8A:12:9A:37:86:F5:6F:E0:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3746A1CC42CB8893AB2080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41217092-5b2c-31d1-a267-9ffe68a9747f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:46:a1:cc:42:cb:88:93:ab:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0a859450-5c7b-4cd5-aba0-573bdca2bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:6d:61:45:9d:bd:49:bd:80:25:a6:9a:20: c9:b1:d6:92:54:50:f1:f8:16:d0:65:9a:35:ee:b1: 0c:ce:4b:3e:d0:49:97:c7:98:c9:41:ba:de:46:2b: 51:29:57:7b:f8:4b:b3:a9:57:95:f9:fb:7f:06:99: 90:86:ff:a7:b3:fc:2e:2a:1c:99:0a:02:a1:58:9d: 78:ed:c3:63:b1:39:30:cb:ee:8b:4c:7c:d5:29:9c: 74:72:f1:9f:c5:28:f0:0f:06:2b:5a:0a:7d:3d:96: eb:17:18:14:a0:a7:a7:53:5f:bc:44:e6:75:c4:1b: 15:6a:38:d6:14:f2:e9:5c:10:52:a2:74:94:71:7d: 9e:26:40:e8:1f:db:0e:25:68:4a:21:83:37:2d:db: f4:e0:f1:bb:08:e4:e2:df:5a:17:4b:c9:9e:99:43: a0:90:e6:89:98:1d:af:da:d3:2d:c7:6f:43:5c:44: 1a:9e:0a:00:d5:0d:83:44:0f:d7:ae:4e:e2:00:95: 4b:58:eb:1f:ad:13:09:3a:90:f5:67:b3:36:03:6f: 01:ae:50:0f:23:c3:49:1e:58:62:cd:13:e8:41:77: e9:8e:c6:56:44:15:20:23:53:1b:07:25:6d:7b:aa: 44:e6:78:7d:48:46:da:60:ba:33:78:0d:56:ed:d9: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:53:A8:AB:0C:74:B1:B0:0A:19:C4:8A:12:9A:37:86:F5:6F:E0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41217092-5b2c-31d1-a267-9ffe68a9747f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:16:0a:ad:5a:41:48:cd:17:c7:c7:c2:11:14:f4:b8:d2:13: f5:94:5a:a6:6a:77:80:a6:83:7c:14:88:f6:10:6f:c5:f9:c5: 1b:7b:4a:c0:27:ef:8c:7c:60:df:f0:95:3d:51:d3:a3:92:84: 36:eb:bf:e4:6c:68:9b:3b:5c:64:99:cc:de:84:e1:d1:72:21: ee:89:e4:74:0f:6b:be:ea:e6:90:35:1c:1b:5f:f1:0f:db:ae: 86:a8:d0:d1:ef:58:e0:43:2a:aa:54:84:b3:a1:58:b4:51:c6: 41:2b:34:09:1a:84:39:00:89:4e:e8:a4:42:cc:80:fe:0c:e9: 0f:12:c7:60:22:24:e8:ed:4e:72:f4:be:0f:a4:b1:49:0c:8b: de:20:39:24:e9:01:71:04:06:7a:b0:e5:ec:9d:0b:71:3d:c0: 18:0f:df:62:7b:3c:4d:e5:10:55:22:dc:c2:cd:68:13:e5:36: 3c:18:e3:19:be:29:af:21:94:5e:25:1f:29:2f:9e:89:69:a0: ac:37:d7:39:52:27:01:57:08:0b:da:ec:89:47:08:b8:73:ea: ac:de:72:96:ce:54:f1:ae:71:a3:73:2a:e7:79:e8:fe:d3:63: 88:3b:50:54:53:55:dc:b4:10:db:77:2b:1e:9e:ad:97:48:f6: 4c:67:58:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0ahzELLiJOrIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGE4NTk0NTAtNWM3Yi00Y2Q1LWFiYTAtNTczYmRjYTJiY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bVtYUWdvUm9gCWmmiDJsdaSVFDx+BbQZZo1 7rEMzks+0EmXx5jJQbreRitRKVd7+EuzqVeV+ft/BpmQhv+ns/wuKhyZCgKhWJ14 7cNjsTkwy+6LTHzVKZx0cvGfxSjwDwYrWgp9PZbrFxgUoKenU1+8ROZ1xBsVajjW FPLpXBBSonSUcX2eJkDoH9sOJWhKIYM3Ldv04PG7COTi31oXS8memUOgkOaJmB2v 2tMtx29DXEQangoA1Q2DRA/Xrk7iAJVLWOsfrRMJOpD1Z7M2A28BrlAPI8NJHlhi zRPoQXfpjsZWRBUgI1MbByVte6pE5nh9SEbaYLozeA1W7dmY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5TqKsMdLGwChnEihKaN4b1b+AdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDEyMTcwOTItNWIyYy0z MWQxLWEyNjctOWZmZTY4YTk3NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMWCq1aQUjNF8fHwhEU9LjSE/WUWqZqd4Cmg3wUiPYQb8X5xRt7SsAn 74x8YN/wlT1R06OShDbrv+RsaJs7XGSZzN6E4dFyIe6J5HQPa77q5pA1HBtf8Q/b roao0NHvWOBDKqpUhLOhWLRRxkErNAkahDkAiU7opELMgP4M6Q8Sx2AiJOjtTnL0 vg+ksUkMi94gOSTpAXEEBnqw5eydC3E9wBgP32J7PE3lEFUi3MLNaBPlNjwY4xm+ Ka8hlF4lHykvnolpoKw31zlSJwFXCAva7IlHCLhz6qzecpbOVPGucaNzKud56P7T Y4g7UFRTVdy0ENt3Kx6erZdI9kxnWJw= -----END CERTIFICATE-----Generated at Thu Oct 16 04:49:57 2025 by rpki-client