$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/505b801d-1fc2-318a-ba18-d2ca5411569b.roa File: 505b801d-1fc2-318a-ba18-d2ca5411569b.roa (raw, json) Hash identifier: P6XrwLHSDopQDEShAICX4fPtM2TXz5OqiSmqnPyh4aU= Subject key identifier: EF:79:75:25:A7:A4:B8:D7:E3:23:F7:06:D8:C4:CD:19:E5:C9:7C:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27698CE3DC2F301ECBAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/505b801d-1fc2-318a-ba18-d2ca5411569b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.229.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:76:98:ce:3d:c2:f3:01:ec:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=127b9ac2-c182-407d-945a-c1c3b7d85146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:37:d7:80:80:a5:84:cc:32:2d:81:12:42: 57:b6:33:cb:d5:06:19:83:ce:04:89:b4:46:2b:d7: 2a:6c:4a:72:0c:8e:f8:f9:c5:06:d2:c6:e1:e4:78: 38:1d:a6:ba:45:67:9b:38:c4:cf:e0:8c:6e:35:96: af:10:47:ab:c8:b6:12:9f:0b:1d:5d:8e:cb:f7:8c: fe:9c:78:ca:f5:5d:3a:30:0d:f9:c2:03:ca:94:cf: ef:1a:d9:18:cc:73:e2:c3:03:85:51:80:72:ae:57: 42:a1:d7:c6:97:d7:67:e1:07:a8:77:49:a9:21:fa: 1f:b2:5e:58:db:28:47:a9:05:eb:64:26:e4:f8:2b: c2:06:bd:7b:61:87:69:ab:cb:ee:9e:e3:8a:ae:29: 3d:e6:0e:84:a5:68:98:18:6a:fc:93:01:75:fd:e0: f1:bb:bb:1f:df:e1:89:19:25:e1:6b:1c:45:2f:8c: f5:96:8b:30:61:5e:ae:84:95:be:ca:cf:6e:96:7b: ff:2b:04:3d:76:b1:fb:47:fe:87:2a:61:12:dd:00: 89:cd:8f:42:48:03:09:c8:e9:46:df:cd:9a:6b:eb: 2c:15:f8:66:1a:ce:6e:45:d6:8b:6e:89:ea:43:b2: 54:57:84:9a:75:60:fd:1f:3a:a1:99:89:ea:cb:b1: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:79:75:25:A7:A4:B8:D7:E3:23:F7:06:D8:C4:CD:19:E5:C9:7C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/505b801d-1fc2-318a-ba18-d2ca5411569b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:21:dd:63:c7:d8:ff:d5:dc:8a:a2:50:54:08:b7:48:8a:24: 1c:0b:86:18:fe:aa:85:1b:42:c4:a6:bd:01:e1:11:9d:11:04: 97:d9:ac:49:08:4c:b0:eb:a7:05:fd:3d:bd:e3:56:23:03:9e: bd:8e:4b:08:66:a6:66:e3:26:a8:70:9e:07:c6:0d:f0:a7:fb: f0:cf:8f:2b:6f:5d:80:30:06:77:c1:96:5b:7f:4c:d0:e1:34: a1:9a:5a:a4:a9:20:3b:4e:61:4d:94:a0:97:2e:a9:49:af:fa: 7b:86:17:ff:dd:82:10:9e:5c:36:87:37:2d:38:3c:02:d4:13: 81:6e:c7:d6:77:a5:0b:b5:6b:a9:a5:7c:87:c0:fa:8c:96:9f: 40:f2:a3:b9:ce:74:31:fd:15:27:e5:f4:eb:c1:f2:a2:44:45: e7:c7:07:e5:bb:a9:e1:f0:d9:9a:69:ea:45:11:60:5f:52:8b: c4:db:be:ff:7f:39:77:eb:44:93:50:b4:85:5e:ad:9b:3c:1a: 41:4b:8f:67:a7:7c:78:22:7d:86:ab:c6:a0:04:af:07:74:88: 1b:29:8a:0c:ad:4b:5b:28:84:c8:3e:c6:4b:94:7f:9a:6c:6e: 77:ca:10:94:e6:52:de:da:c8:c3:19:fc:6b:57:56:2a:56:df: 9b:d9:54:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28naYzj3C8wHsusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTI3YjlhYzItYzE4Mi00MDdkLTk0NWEtYzFjM2I3ZDg1MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDg314CApYTMMi2BEkJXtjPL1QYZg84EibRG K9cqbEpyDI74+cUG0sbh5Hg4Haa6RWebOMTP4IxuNZavEEeryLYSnwsdXY7L94z+ nHjK9V06MA35wgPKlM/vGtkYzHPiwwOFUYByrldCodfGl9dn4Qeod0mpIfofsl5Y 2yhHqQXrZCbk+CvCBr17YYdpq8vunuOKrik95g6EpWiYGGr8kwF1/eDxu7sf3+GJ GSXhaxxFL4z1loswYV6uhJW+ys9ulnv/KwQ9drH7R/6HKmES3QCJzY9CSAMJyOlG 382aa+ssFfhmGs5uRdaLbonqQ7JUV4SadWD9HzqhmYnqy7FBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO95dSWnpLjX4yP3BtjEzRnlyXwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTA1YjgwMWQtMWZjMi0z MThhLWJhMTgtZDJjYTU0MTE1NjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsh3WPH2P/V3IqiUFQIt0iKJBwLhhj+qoUbQsSmvQHhEZ0RBJfZrEkI TLDrpwX9Pb3jViMDnr2OSwhmpmbjJqhwngfGDfCn+/DPjytvXYAwBnfBllt/TNDh NKGaWqSpIDtOYU2UoJcuqUmv+nuGF//dghCeXDaHNy04PALUE4Fux9Z3pQu1a6ml fIfA+oyWn0Dyo7nOdDH9FSfl9OvB8qJERefHB+W7qeHw2Zpp6kURYF9Si8Tbvv9/ OXfrRJNQtIVerZs8GkFLj2enfHgifYarxqAErwd0iBspigytS1sohMg+xkuUf5ps bnfKEJTmUt7ayMMZ/GtXVipW35vZVAk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:14 2025 by rpki-client