$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa File: 4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa (raw, json) Hash identifier: pSK2xo9CGSRnWqo3prIB2byWK8ucBpm8hnRSyhSVHVs= Subject key identifier: 8A:A4:3C:52:1D:DB:EE:EE:AD:7C:0D:B1:69:21:32:C1:1D:51:AA:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373C7250215E164DF3F580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3c:72:50:21:5e:16:4d:f3:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4bf0479a-63da-436e-8542-877b7ae75054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:37:95:12:8d:6d:54:10:96:d5:f9:5f:ad: 23:5f:c9:08:e6:a1:77:a3:8d:91:e2:b4:39:60:2e: 86:7b:d4:af:12:bc:ed:bf:e9:ed:00:c1:be:87:18: 99:7f:3d:29:d9:dd:33:76:37:f8:94:c5:ab:15:7a: 82:0e:1b:c9:fa:8f:c7:1b:d6:67:e6:65:4a:7d:a0: 3e:83:60:c9:f9:77:ec:d4:6a:10:6e:bb:78:39:31: 9a:4e:31:8f:c7:d2:a6:6b:12:d0:8c:ea:e8:aa:04: a6:0c:6c:e4:1c:84:68:b3:5b:37:31:b8:14:32:81: 0a:50:78:d9:0e:a0:cc:4a:de:1c:dd:92:e7:54:b5: a8:a7:80:a2:0d:af:03:6b:bd:16:6f:b7:0e:c0:94: c2:bb:f8:ad:92:c9:15:45:2d:48:28:10:02:11:1e: a8:38:2a:0d:9b:ba:20:34:eb:a4:0a:06:e5:23:45: 3a:a6:ea:3b:cb:34:46:f5:ca:d2:67:b6:81:1b:ca: 98:77:13:4c:80:3f:2f:2f:d7:f5:3e:39:aa:28:be: 5d:fa:ea:ca:c0:59:d8:a8:6b:11:dc:d5:36:19:74: 5c:33:90:35:b0:b5:93:0f:73:fe:34:13:ef:c0:f0: c2:58:a9:9a:42:94:84:84:2a:2c:15:95:a7:b8:ca: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:3C:52:1D:DB:EE:EE:AD:7C:0D:B1:69:21:32:C1:1D:51:AA:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:00:f5:74:d8:c1:4e:65:0c:33:e7:e7:bb:9d:d3:af:14:c4: 5d:a8:cc:2b:e4:74:5d:3c:a4:fa:7c:bd:e3:9c:61:e5:3f:64: 9b:ad:c8:a5:1c:42:38:2b:cf:8b:3b:38:60:e6:03:6f:14:8f: 3a:be:ea:15:d7:6c:ff:48:f1:7e:4f:ce:95:f7:41:cb:7e:39: ca:49:a9:61:54:a1:70:8a:04:f1:1d:1c:1e:2c:61:02:50:8f: 5c:05:ae:59:1c:a7:26:f8:ea:bd:55:08:ae:8f:d7:f0:61:d8: 34:37:f2:12:b3:2c:04:e8:55:f8:1f:46:48:d6:0a:0f:f8:34: c3:48:10:a3:80:84:af:26:cf:42:99:2d:a7:15:92:c0:e8:e8: 53:ee:6b:da:45:bc:a5:bd:b0:7c:c6:a9:00:68:5f:d3:0b:7a: 83:e0:f7:82:62:4c:c8:b2:e4:66:a1:83:5d:75:b9:5a:2d:c9: ff:45:7b:50:ac:3e:dd:8b:de:8e:b0:5e:1f:5c:ce:7e:6e:da: b7:5c:b5:76:f5:ec:cb:68:20:9d:86:bb:08:47:8b:2f:e6:09: 78:63:d6:52:36:14:5b:4f:c6:3e:8a:63:a8:92:29:65:69:1d: 72:4a:29:e7:e2:8d:7f:a7:4d:c2:43:2c:17:e4:37:f9:b5:28: 98:4b:f8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzxyUCFeFk3z9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NGJmMDQ3OWEtNjNkYS00MzZlLTg1NDItODc3YjdhZTc1MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2M3lRKNbVQQltX5X60jX8kI5qF3o42R4rQ5 YC6Ge9SvErztv+ntAMG+hxiZfz0p2d0zdjf4lMWrFXqCDhvJ+o/HG9Zn5mVKfaA+ g2DJ+Xfs1GoQbrt4OTGaTjGPx9KmaxLQjOroqgSmDGzkHIRos1s3MbgUMoEKUHjZ DqDMSt4c3ZLnVLWop4CiDa8Da70Wb7cOwJTCu/itkskVRS1IKBACER6oOCoNm7og NOukCgblI0U6puo7yzRG9crSZ7aBG8qYdxNMgD8vL9f1PjmqKL5d+urKwFnYqGsR 3NU2GXRcM5A1sLWTD3P+NBPvwPDCWKmaQpSEhCosFZWnuMqVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqkPFId2+7urXwNsWkhMsEdUaq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGU3OWM0ZmQtMDNlOS0z ZDhkLThkZmUtOWJlNjIzY2NkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsA9XTYwU5lDDPn57ud068UxF2ozCvkdF08pPp8veOcYeU/ZJutyKUc Qjgrz4s7OGDmA28Ujzq+6hXXbP9I8X5PzpX3Qct+OcpJqWFUoXCKBPEdHB4sYQJQ j1wFrlkcpyb46r1VCK6P1/Bh2DQ38hKzLAToVfgfRkjWCg/4NMNIEKOAhK8mz0KZ LacVksDo6FPua9pFvKW9sHzGqQBoX9MLeoPg94JiTMiy5Gahg111uVotyf9Fe1Cs Pt2L3o6wXh9czn5u2rdctXb17MtoIJ2GuwhHiy/mCXhj1lI2FFtPxj6KY6iSKWVp HXJKKefijX+nTcJDLBfkN/m1KJhL+IE= -----END CERTIFICATE-----Generated at Thu Oct 16 01:36:39 2025 by rpki-client