$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa File: 44de805d-b8a8-38b5-8bac-cf6e3de61920.roa (raw, json) Hash identifier: eoS6A+2a4eJRQiQDFQv7i7M2gZFO84YM+zGJu/3YG94= Subject key identifier: AA:E0:21:1C:30:1D:60:84:E1:A5:14:AF:CE:61:53:D8:3E:62:20:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F231B38C97EF6986094B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:31:b3:8c:97:ef:69:86:09:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=82591d96-7170-4bea-99cd-de150a73e79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:02:f0:1a:7d:b1:35:93:13:2b:1f:95:04: 1a:41:5c:f7:3b:73:43:fe:ff:11:f7:0a:d6:f7:4d: 7a:57:53:3d:51:25:e1:df:43:7c:c4:76:69:24:0d: 3d:2e:da:1c:c7:44:a5:1a:96:a4:70:f1:b2:04:8a: 93:d8:79:92:7c:2d:5c:ec:56:ed:15:1f:80:81:76: 62:9e:e4:19:6e:8e:16:c7:90:04:02:cf:26:db:06: e3:7c:4b:4c:50:b5:9e:ba:6b:27:c0:c9:43:4f:d1: e8:3a:30:9e:a2:29:fc:ca:bb:34:de:fc:08:45:57: 63:8c:5b:bb:f0:ee:7c:d6:c5:42:95:41:a1:64:4f: 0a:92:53:ea:1a:9b:a9:ce:f9:ea:09:63:34:13:c3: 12:77:f6:c4:be:72:ad:5a:34:2e:00:79:d3:4d:52: 44:9d:6e:71:c6:14:89:bc:d8:0a:30:90:88:b9:e3: 54:e8:2d:f2:fc:a9:23:ee:90:d1:5f:b1:da:40:0e: 6f:11:d1:e0:2c:97:67:e7:bb:d4:3f:95:85:84:f3: 23:1c:dc:c9:b4:d5:95:57:76:0d:1c:df:01:01:f8: 32:49:42:02:ce:e2:79:00:6b:88:9e:90:88:a9:5e: af:15:e0:7e:88:77:0e:48:fd:9b:c2:90:b6:aa:75: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:21:1C:30:1D:60:84:E1:A5:14:AF:CE:61:53:D8:3E:62:20:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:34:0c:b8:24:9d:58:7c:4b:49:3b:01:c2:e3:dd:eb:12:d4: ab:6b:fe:38:e0:75:57:ca:bf:62:3a:1c:ef:74:56:9d:a1:f0: 93:97:d6:05:b7:07:13:30:25:1f:35:05:10:15:ab:0f:79:4d: d7:94:29:55:20:5a:20:0f:ed:35:26:dc:3b:e4:68:15:09:0c: 60:ca:f5:c1:a1:71:7a:44:3d:8e:1b:61:90:f0:c9:63:fc:56: 26:3a:b3:a0:67:15:66:f9:90:ab:de:46:48:a7:0c:ac:1d:25: f0:f2:1b:af:62:f6:45:df:e8:cb:ae:17:05:73:ba:ff:6b:ee: c5:8f:a0:b0:c4:c6:ff:0d:d7:d3:31:25:e0:f4:43:ab:c5:ac: b1:5c:10:a4:fd:f3:4d:ec:bc:da:dc:f7:a2:56:70:ca:1c:c2: bc:71:85:29:53:35:99:f7:d6:8f:07:d3:4e:09:cc:5c:5f:e3: 11:18:b4:f3:03:18:50:be:63:b6:f9:2a:65:42:c9:0a:af:45: 07:18:c0:d4:ee:78:91:81:01:06:64:81:72:ff:39:a1:8b:7d: 0c:d8:80:e4:53:fc:03:07:54:83:84:7e:40:3e:8d:14:7b:44: dc:85:98:fb:96:53:1a:82:5f:d5:71:70:e2:1a:a1:6d:72:9f: 46:dd:51:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jGzjJfvaYYJS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODI1OTFkOTYtNzE3MC00YmVhLTk5Y2QtZGUxNTBhNzNlNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM4C8Bp9sTWTEysflQQaQVz3O3ND/v8R9wrW 9016V1M9USXh30N8xHZpJA09Ltocx0SlGpakcPGyBIqT2HmSfC1c7FbtFR+AgXZi nuQZbo4Wx5AEAs8m2wbjfEtMULWeumsnwMlDT9HoOjCeoin8yrs03vwIRVdjjFu7 8O581sVClUGhZE8KklPqGpupzvnqCWM0E8MSd/bEvnKtWjQuAHnTTVJEnW5xxhSJ vNgKMJCIueNU6C3y/Kkj7pDRX7HaQA5vEdHgLJdn57vUP5WFhPMjHNzJtNWVV3YN HN8BAfgySUICzuJ5AGuInpCIqV6vFeB+iHcOSP2bwpC2qnUEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrgIRwwHWCE4aUUr85hU9g+YiCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDRkZTgwNWQtYjhhOC0z OGI1LThiYWMtY2Y2ZTNkZTYxOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAASMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ40DLgknVh8S0k7AcLj3esS1Ktr/jjgdVfKv2I6HO90Vp2h8JOX1gW3 BxMwJR81BRAVqw95TdeUKVUgWiAP7TUm3DvkaBUJDGDK9cGhcXpEPY4bYZDwyWP8 ViY6s6BnFWb5kKveRkinDKwdJfDyG69i9kXf6MuuFwVzuv9r7sWPoLDExv8N19Mx JeD0Q6vFrLFcEKT9803svNrc96JWcMocwrxxhSlTNZn31o8H004JzFxf4xEYtPMD GFC+Y7b5KmVCyQqvRQcYwNTueJGBAQZkgXL/OaGLfQzYgORT/AMHVIOEfkA+jRR7 RNyFmPuWUxqCX9VxcOIaoW1yn0bdUUM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:44 2025 by rpki-client