$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bfec914-c1f1-3f40-bd48-35d2e74453ec.roa File: 4bfec914-c1f1-3f40-bd48-35d2e74453ec.roa (raw, json) Hash identifier: eQa3h6u1k0gyKYM9cQED5w3eSxMczPBNFPwNy7npD7M= Subject key identifier: 83:71:86:C0:CD:06:B2:58:FF:5D:C8:E3:78:D8:6E:F2:A3:F5:AD:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067004720513E9603B4BD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bfec914-c1f1-3f40-bd48-35d2e74453ec.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:00:47:20:51:3e:96:03:b4:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c99215aa-fd36-4d9e-8a14-74e104c8f10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:94:1c:80:37:82:0a:8a:fa:4d:31:ac:31: e8:85:9a:09:31:74:68:61:e6:f8:4c:df:7e:e5:50: 69:85:0f:ab:f3:47:63:e6:f3:38:28:ef:79:45:6e: a4:4f:09:fe:c9:d1:d4:1c:b1:54:36:fb:88:41:bd: 32:5f:9e:b3:ed:d0:ac:17:ce:5c:94:65:07:72:53: 1b:e9:7a:8f:01:2c:af:55:13:4a:c1:db:63:c5:ab: 96:ca:14:2e:5d:93:e8:d3:65:7e:a0:97:ed:74:21: c6:b7:61:19:44:be:4d:93:21:ea:8a:69:00:cd:6a: 0c:ba:47:a2:83:42:5d:5c:5e:44:f4:81:31:4f:84: 09:6b:34:3b:68:69:1b:aa:13:d6:0e:df:b1:f6:2f: a6:75:1b:14:b2:e4:c1:3f:61:a5:30:77:d9:f1:30: f5:b9:64:84:5c:08:90:3c:27:cf:a2:21:da:5f:38: 05:0e:22:e3:38:8b:d6:02:14:c0:76:5c:96:ec:22: 91:82:00:c0:75:ab:37:64:b2:2b:bc:87:86:fd:41: 8c:29:26:7c:6a:3c:4f:1b:cb:cd:2b:f9:30:93:d6: 20:8f:89:c8:fc:fc:59:fd:fe:30:87:da:03:93:f5: f9:10:8d:68:f8:d3:e2:0f:bd:7f:29:80:c9:c0:33: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:86:C0:CD:06:B2:58:FF:5D:C8:E3:78:D8:6E:F2:A3:F5:AD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bfec914-c1f1-3f40-bd48-35d2e74453ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:56:d4:95:43:c1:ff:c2:78:cd:b0:d4:74:6f:03:01:4b:51: fe:40:1d:71:49:30:86:cf:4f:35:e1:40:08:0a:15:3b:ef:79: 2f:dd:84:06:38:5b:87:1b:61:fe:43:9f:66:51:83:90:a1:d5: 03:f5:6a:ae:0f:e5:53:6e:b0:e5:cc:e9:13:7d:de:be:e7:b4: c4:05:ae:44:1b:96:32:5b:4b:99:b1:e6:9f:b9:18:e6:c7:57: ae:ff:f0:b8:de:98:e2:27:37:ea:11:cc:0c:04:a4:fe:b8:ab: 2e:61:dc:e6:b3:19:e4:a5:cb:74:07:42:9a:e1:eb:83:93:44: a2:ad:c8:d2:dc:70:c4:e5:33:a7:a0:a9:3b:3d:05:30:19:72: c5:17:8f:35:28:b7:3c:f8:e1:4d:e1:af:92:3d:cb:f4:a2:ce: 1f:5f:c4:20:1a:f7:ca:7e:fa:35:cf:b7:2b:c0:1b:93:82:ab: 88:85:ef:fd:e7:5b:ba:04:7b:b0:b0:8e:8f:6d:de:18:71:07: 7f:0a:3e:ac:91:1b:31:9a:a4:37:f9:7e:97:b0:b2:3c:a2:9d: ea:45:c5:37:17:fb:62:ec:f1:40:ab:26:8f:c0:58:7c:f4:d3: 78:66:10:3c:5f:42:32:f8:08:0d:74:b9:9b:48:79:2c:a5:30: 9a:38:f0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwBHIFE+lgO0vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Yzk5MjE1YWEtZmQzNi00ZDllLThhMTQtNzRlMTA0YzhmMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY6UHIA3ggqK+k0xrDHohZoJMXRoYeb4TN9+ 5VBphQ+r80dj5vM4KO95RW6kTwn+ydHUHLFUNvuIQb0yX56z7dCsF85clGUHclMb 6XqPASyvVRNKwdtjxauWyhQuXZPo02V+oJftdCHGt2EZRL5NkyHqimkAzWoMukei g0JdXF5E9IExT4QJazQ7aGkbqhPWDt+x9i+mdRsUsuTBP2GlMHfZ8TD1uWSEXAiQ PCfPoiHaXzgFDiLjOIvWAhTAdlyW7CKRggDAdas3ZLIrvIeG/UGMKSZ8ajxPG8vN K/kwk9Ygj4nI/PxZ/f4wh9oDk/X5EI1o+NPiD71/KYDJwDPkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINxhsDNBrJY/13I43jYbvKj9a18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJmZWM5MTQtYzFmMS0z ZjQwLWJkNDgtMzVkMmU3NDQ1M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARODvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRW1JVDwf/CeM2w1HRvAwFLUf5AHXFJMIbPTzXhQAgKFTvveS/dhAY4 W4cbYf5Dn2ZRg5Ch1QP1aq4P5VNusOXM6RN93r7ntMQFrkQbljJbS5mx5p+5GObH V67/8LjemOInN+oRzAwEpP64qy5h3OazGeSly3QHQprh64OTRKKtyNLccMTlM6eg qTs9BTAZcsUXjzUotzz44U3hr5I9y/Sizh9fxCAa98p++jXPtyvAG5OCq4iF7/3n W7oEe7Cwjo9t3hhxB38KPqyRGzGapDf5fpewsjyinepFxTcX+2Ls8UCrJo/AWHz0 03hmEDxfQjL4CA10uZtIeSylMJo48FI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:30 2025 by rpki-client