$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e380796-c2fa-3f3e-902f-946591bff2db.roa File: 4e380796-c2fa-3f3e-902f-946591bff2db.roa (raw, json) Hash identifier: y8TqF3D5huNdHU4iCW/UevBHfciCMrKZ4LECVLahA58= Subject key identifier: 35:8C:BA:A9:F6:2B:24:3E:74:0F:B4:CA:3F:F8:10:74:81:77:39:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2161338A04E15040F440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e380796-c2fa-3f3e-902f-946591bff2db.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:21:61:33:8a:04:e1:50:40:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=13d917f8-eac8-4a9c-83f9-2f51f67d9382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:17:a1:5f:e1:8d:09:8f:5f:81:12:81:74: a6:03:cd:4e:7c:fc:4d:7f:6b:1e:ac:3f:45:23:f3: 67:2a:56:b2:fa:d9:a8:b4:0c:85:9e:f7:84:c7:fe: a5:83:bf:0c:5d:ad:29:7e:ed:a7:d5:f6:dd:1c:c6: 78:27:4a:26:e6:4a:5d:53:66:75:e0:d1:0f:8d:6e: 41:3f:97:d9:13:85:a1:bf:17:b1:06:72:0c:27:c6: ea:c2:37:62:f3:a6:9c:8f:8e:ad:20:63:5f:96:aa: 18:b6:46:b0:20:53:12:b2:24:c0:a6:69:25:cc:fe: a6:ab:fa:ae:32:93:6e:0c:01:b3:6d:f1:65:a0:79: d7:44:62:3f:c2:7a:60:4b:de:36:bf:56:bc:af:88: db:ad:58:64:50:b8:f3:13:0f:1f:03:01:dd:5c:fc: 6d:4e:77:ab:c8:4d:a1:00:91:8f:52:3b:f0:8f:96: 63:d8:1f:3c:df:ee:25:37:a9:d4:20:23:a2:0f:f9: 3b:0d:61:54:b2:ae:ae:65:30:da:95:58:cf:ce:04: c1:cb:c3:d0:8f:92:4f:43:77:a4:1e:c7:99:3c:72: 35:f3:a9:2c:be:a1:9a:c2:fc:57:d7:b6:cb:bc:e7: 06:3b:bc:f8:7d:22:af:12:32:3a:e8:15:41:e2:e5: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:BA:A9:F6:2B:24:3E:74:0F:B4:CA:3F:F8:10:74:81:77:39:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e380796-c2fa-3f3e-902f-946591bff2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:00:86:a8:3d:29:f5:b0:b1:bf:55:a4:5e:32:13:db:2d:9f: 0d:4f:25:c1:c8:76:13:7f:16:f3:38:52:ad:ee:e3:e8:29:d6: ea:e2:5b:57:0a:2a:70:23:48:88:0f:20:de:dd:50:86:d0:b2: 05:5f:08:8a:61:9b:7b:d7:f0:7a:37:2a:86:01:b1:46:52:5a: 04:f0:f6:fc:d9:f2:d7:77:bb:12:52:02:88:d0:25:9d:22:72: 76:6f:09:63:a7:43:80:15:21:c3:09:3d:ac:48:f7:dc:a9:8a: 86:85:eb:5a:0d:4a:d5:fc:99:2a:48:cf:ef:ff:6a:13:d1:ae: b4:0e:0c:55:e0:16:56:56:33:09:fb:6d:f2:07:1e:8b:30:95: 68:06:c7:db:dd:45:e7:6d:8c:89:35:38:15:2b:20:2c:47:a8: 38:79:90:57:f3:01:2e:59:85:61:3a:7b:e2:de:0b:c8:69:17: 86:18:08:4d:25:33:9a:be:33:34:29:66:ee:87:83:b3:23:88: 39:c9:d1:bf:40:29:a5:f7:ea:3a:55:4f:ce:69:92:7e:af:95: a1:60:d6:ac:c6:ca:42:65:3e:01:5a:e4:6d:41:d2:65:35:97: 15:0c:34:be:dd:b0:83:b5:b6:65:ef:fe:c9:43:52:ad:b7:96: 6f:78:22:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCFhM4oE4VBA9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTNkOTE3ZjgtZWFjOC00YTljLTgzZjktMmY1MWY2N2Q5MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsQXoV/hjQmPX4ESgXSmA81OfPxNf2serD9F I/NnKlay+tmotAyFnveEx/6lg78MXa0pfu2n1fbdHMZ4J0om5kpdU2Z14NEPjW5B P5fZE4WhvxexBnIMJ8bqwjdi86acj46tIGNflqoYtkawIFMSsiTApmklzP6mq/qu MpNuDAGzbfFloHnXRGI/wnpgS942v1a8r4jbrVhkULjzEw8fAwHdXPxtTneryE2h AJGPUjvwj5Zj2B883+4lN6nUICOiD/k7DWFUsq6uZTDalVjPzgTBy8PQj5JPQ3ek HseZPHI186ksvqGawvxX17bLvOcGO7z4fSKvEjI66BVB4uVYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWMuqn2KyQ+dA+0yj/4EHSBdznFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGUzODA3OTYtYzJmYS0z ZjNlLTkwMmYtOTQ2NTkxYmZmMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcAhqg9KfWwsb9VpF4yE9stnw1PJcHIdhN/FvM4Uq3u4+gp1uriW1cK KnAjSIgPIN7dUIbQsgVfCIphm3vX8Ho3KoYBsUZSWgTw9vzZ8td3uxJSAojQJZ0i cnZvCWOnQ4AVIcMJPaxI99ypioaF61oNStX8mSpIz+//ahPRrrQODFXgFlZWMwn7 bfIHHoswlWgGx9vdRedtjIk1OBUrICxHqDh5kFfzAS5ZhWE6e+LeC8hpF4YYCE0l M5q+MzQpZu6Hg7MjiDnJ0b9AKaX36jpVT85pkn6vlaFg1qzGykJlPgFa5G1B0mU1 lxUMNL7dsIO1tmXv/slDUq23lm94Iig= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:14 2025 by rpki-client