$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa File: 4c1430d9-02cb-3481-8505-5f2be0891f36.roa (raw, json) Hash identifier: UKG/inO8O4IywDkNjxFezpML3W8ldw999Xqy1JdfL+w= Subject key identifier: AE:27:C8:19:44:D1:BB:E4:F6:04:B1:40:56:87:7E:5C:60:A4:18:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3742414BE2D376A5F3FF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:42:41:4b:e2:d3:76:a5:f3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a70afdd4-29ae-4866-b23b-6c2361ae9338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4b:b5:7e:a7:a6:74:fe:a5:8d:f7:15:39:31: 5d:0d:a8:48:d7:aa:19:bf:ce:97:90:b7:7d:f8:77: 16:93:c1:ff:60:d6:68:df:87:7d:ca:8c:0c:e8:a6: c6:fe:a4:05:69:dc:aa:e5:3f:73:f3:34:52:b5:5c: 3f:e4:19:f7:41:32:a8:22:19:d7:40:cc:f3:e7:a4: a7:72:06:63:48:6a:09:fd:94:21:95:98:a2:d9:2b: 96:70:f7:64:68:3b:1a:07:ae:93:4b:8f:ad:ca:2f: 43:80:6e:b9:bb:c2:b4:dd:c9:06:34:20:45:32:52: d6:d2:d6:1e:fd:2d:8f:57:f6:01:60:05:cf:08:b4: b0:37:f1:9a:96:21:0b:16:d8:4f:d1:71:79:33:7f: fe:b4:16:25:65:ae:81:6d:7e:32:8e:12:e5:f9:db: a4:0e:67:a6:d0:a9:bb:be:08:84:ca:61:2d:91:e1: 0d:19:46:2d:cd:00:6e:47:4f:10:44:8d:95:96:59: ed:e7:04:dd:1e:ec:16:f1:e6:9a:d9:cd:77:13:5e: 3c:b1:4c:00:ca:16:f9:57:7f:c6:26:b2:ca:67:39: a3:09:8a:64:74:3e:6c:a4:3d:48:ae:58:7c:58:cb: 13:b8:b2:d7:44:0f:f4:b3:83:2f:60:20:11:78:08: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:27:C8:19:44:D1:BB:E4:F6:04:B1:40:56:87:7E:5C:60:A4:18:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:09:a8:b5:e0:9c:83:8f:1b:5b:10:0a:84:5e:e3:ba:ce:c5: 4a:df:d7:0f:33:8f:4c:c4:9e:2a:8e:96:01:33:0f:3c:55:3a: 28:3c:e7:22:51:ed:5a:bc:19:95:55:df:b7:06:79:b1:ca:80: a0:18:77:df:46:70:44:4a:30:29:94:54:95:91:c5:5b:d3:55: c8:2a:d7:f4:34:e8:a1:ab:2c:a3:b6:74:07:52:a2:3a:69:e0: 1f:40:57:30:dd:36:03:df:88:7d:b9:3b:50:21:f8:bc:32:10: 17:26:74:f3:2b:09:b5:d2:b4:16:61:47:53:0e:de:c4:b3:53: 28:f4:58:94:ec:54:cc:52:8f:63:c1:8e:c9:34:28:91:65:83: df:b5:47:69:d4:8c:ad:60:28:73:5d:f8:7c:5b:47:42:1f:0f: 18:9b:d3:41:f4:0f:0b:a5:17:e3:8e:b0:ca:d8:00:2f:ef:d7: ba:58:e6:81:8f:db:85:18:7c:7d:b6:4f:2a:76:4c:ee:60:74: 3e:06:9f:84:a9:5c:53:16:b8:51:4c:a9:92:2d:b0:eb:52:fd: b4:c2:3d:af:ce:e9:3c:c5:aa:6f:15:67:eb:56:a8:9a:58:e0: 6d:1b:e1:7e:35:61:89:68:e0:13:6b:1a:a6:18:c2:85:28:d4: b4:20:bf:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0JBS+LTdqXz/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTcwYWZkZDQtMjlhZS00ODY2LWIyM2ItNmMyMzYxYWU5MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0u1fqemdP6ljfcVOTFdDahI16oZv86XkLd9 +HcWk8H/YNZo34d9yowM6KbG/qQFadyq5T9z8zRStVw/5Bn3QTKoIhnXQMzz56Sn cgZjSGoJ/ZQhlZii2SuWcPdkaDsaB66TS4+tyi9DgG65u8K03ckGNCBFMlLW0tYe /S2PV/YBYAXPCLSwN/GaliELFthP0XF5M3/+tBYlZa6BbX4yjhLl+dukDmem0Km7 vgiEymEtkeENGUYtzQBuR08QRI2Vllnt5wTdHuwW8eaa2c13E148sUwAyhb5V3/G JrLKZzmjCYpkdD5spD1Irlh8WMsTuLLXRA/0s4MvYCAReAilJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4nyBlE0bvk9gSxQFaHflxgpBhQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGMxNDMwZDktMDJjYi0z NDgxLTg1MDUtNWYyYmUwODkxZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwJqLXgnIOPG1sQCoRe47rOxUrf1w8zj0zEniqOlgEzDzxVOig85yJR 7Vq8GZVV37cGebHKgKAYd99GcERKMCmUVJWRxVvTVcgq1/Q06KGrLKO2dAdSojpp 4B9AVzDdNgPfiH25O1Ah+LwyEBcmdPMrCbXStBZhR1MO3sSzUyj0WJTsVMxSj2PB jsk0KJFlg9+1R2nUjK1gKHNd+HxbR0IfDxib00H0DwulF+OOsMrYAC/v17pY5oGP 24UYfH22Typ2TO5gdD4Gn4SpXFMWuFFMqZItsOtS/bTCPa/O6TzFqm8VZ+tWqJpY 4G0b4X41YYlo4BNrGqYYwoUo1LQgv1s= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:07 2025 by rpki-client