$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa File: 49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa (raw, json) Hash identifier: iA/7wN+0mN/pLV2GmckKanhDm6thidtoW3vZJpEFujg= Subject key identifier: 06:5B:2C:1B:C6:16:4E:E3:A3:CB:7E:8E:A0:0A:63:10:5C:6C:E7:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C22C80F9588BF675F52A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:22:c8:0f:95:88:bf:67:5f:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=bf028f0b-14bf-42f0-98d3-18c8192e006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:88:e7:8b:b9:57:69:74:27:cd:17:4b:12:9f: 49:9b:82:29:fb:3b:92:11:af:71:e8:51:34:77:46: 89:10:d8:93:1a:19:fd:60:02:0e:1f:10:26:14:1b: b2:2c:dc:b5:01:0c:8b:41:74:ef:7f:47:3d:35:3b: 6d:82:ab:c9:f0:10:d0:88:01:3b:d9:2d:b2:50:45: 81:36:9d:a2:f3:84:54:65:28:28:e2:0c:29:33:21: 81:2e:57:62:0e:60:ae:af:2d:48:fc:49:bd:a4:a6: 73:da:ec:b2:dd:41:6e:55:05:06:5e:4e:99:25:f4: f2:40:a9:47:7d:7f:22:94:97:d0:ab:14:6b:ea:5c: e4:46:65:a8:28:29:3e:b0:cc:f7:05:a7:06:e0:33: 49:67:06:f6:77:fc:06:25:e0:9e:4d:f4:67:73:8f: e3:f5:93:94:aa:02:d2:f4:1f:76:c7:89:c0:f2:5d: c5:f3:2c:7c:70:f1:ba:53:6b:6d:2a:17:d4:6c:d7: 1e:f9:5d:93:97:f9:50:4f:84:d3:ed:eb:2f:17:0c: b1:6d:3d:5d:b9:11:c7:7e:9a:ea:3e:64:14:e6:a0: e1:f1:18:b6:26:e5:b5:80:51:f1:be:60:da:38:e6: be:2f:80:ee:70:fb:9f:b1:7b:53:35:d3:9e:93:68: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:2C:1B:C6:16:4E:E3:A3:CB:7E:8E:A0:0A:63:10:5C:6C:E7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49afef7c-5ae6-35e8-92c3-b89f46cf8628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:12:06:e4:b0:bf:cc:76:9b:53:62:d2:3d:82:ec:60:af:59: 37:71:fa:e5:65:a9:cb:e9:54:4b:34:94:51:40:36:61:80:98: 1f:12:38:9e:b5:32:81:cb:41:d9:f4:3c:91:08:87:a7:07:54: fb:33:4f:05:0a:84:cd:4d:34:42:0d:de:0a:70:24:6d:6b:40: 75:b1:10:97:3d:a1:9b:15:a3:ee:91:46:f6:4f:ed:5d:0b:2e: 32:a4:b3:34:2a:91:61:69:05:6b:e7:1e:08:eb:42:38:29:8e: 40:a8:a0:26:f9:00:37:72:2b:4b:62:e9:c2:58:5f:e9:fe:e5: 91:6c:5b:d6:8c:66:7d:8b:8e:b0:ac:f1:67:9d:0f:b6:fd:1b: 2d:ba:83:5b:5f:25:69:cd:53:be:9c:72:94:2e:e6:59:5a:58: 71:f8:88:63:c2:5d:27:8d:29:29:13:c5:f3:28:f7:c9:5d:37: 7e:d5:a8:fe:3d:20:8a:67:29:a3:68:b5:ad:ca:c4:b4:10:00: 30:96:30:b4:21:62:45:98:99:b6:f8:e9:62:81:86:cc:44:bc: b1:4e:4a:0f:e5:d4:3a:dd:2a:de:dc:68:5d:41:63:ab:f0:7f: 35:5c:24:b5:d8:6a:a0:e5:ff:06:50:cc:72:22:c2:64:c9:29: 68:55:f6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCLID5WIv2dfUqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmYwMjhmMGItMTRiZi00MmYwLTk4ZDMtMThjODE5MmUwMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYjni7lXaXQnzRdLEp9Jm4Ip+zuSEa9x6FE0 d0aJENiTGhn9YAIOHxAmFBuyLNy1AQyLQXTvf0c9NTttgqvJ8BDQiAE72S2yUEWB Np2i84RUZSgo4gwpMyGBLldiDmCury1I/Em9pKZz2uyy3UFuVQUGXk6ZJfTyQKlH fX8ilJfQqxRr6lzkRmWoKCk+sMz3BacG4DNJZwb2d/wGJeCeTfRnc4/j9ZOUqgLS 9B92x4nA8l3F8yx8cPG6U2ttKhfUbNce+V2Tl/lQT4TT7esvFwyxbT1duRHHfprq PmQU5qDh8Ri2JuW1gFHxvmDaOOa+L4DucPufsXtTNdOek2j5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZbLBvGFk7jo8t+jqAKYxBcbOfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDlhZmVmN2MtNWFlNi0z NWU4LTkyYzMtYjg5ZjQ2Y2Y4NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACESBuSwv8x2m1Ni0j2C7GCvWTdx+uVlqcvpVEs0lFFANmGAmB8SOJ61 MoHLQdn0PJEIh6cHVPszTwUKhM1NNEIN3gpwJG1rQHWxEJc9oZsVo+6RRvZP7V0L LjKkszQqkWFpBWvnHgjrQjgpjkCooCb5ADdyK0ti6cJYX+n+5ZFsW9aMZn2LjrCs 8WedD7b9Gy26g1tfJWnNU76ccpQu5llaWHH4iGPCXSeNKSkTxfMo98ldN37VqP49 IIpnKaNota3KxLQQADCWMLQhYkWYmbb46WKBhsxEvLFOSg/l1DrdKt7caF1BY6vw fzVcJLXYaqDl/wZQzHIiwmTJKWhV9iQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:50 2025 by rpki-client