$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54138f29-3e38-3b81-a0f0-0137e5de4112.roa File: 54138f29-3e38-3b81-a0f0-0137e5de4112.roa (raw, json) Hash identifier: m9+Jox1s5kGgXasHHqBri/Er0BA50mrCWEge8aaJGxM= Subject key identifier: 46:CC:38:23:31:CB:C6:4D:76:D2:0B:D6:02:27:5A:DD:5A:DA:74:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F285942E8D8D0FF4570200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54138f29-3e38-3b81-a0f0-0137e5de4112.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:85:94:2e:8d:8d:0f:f4:57:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6d1bbe4e-0a6b-4ec6-bf37-24d8e29a0f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:a8:ef:4a:0a:6b:77:02:ec:9b:97:6c:4f: 14:ad:0c:f2:da:c0:77:20:84:fa:42:4c:3e:d3:cc: 1c:a8:2f:f7:85:65:c7:3c:b2:89:eb:36:1b:51:a2: c0:8a:b5:dc:00:23:64:a0:87:3a:6c:3e:15:9c:f7: 8e:1f:1b:c5:ac:85:54:69:fe:d6:bd:3d:0a:e0:93: b0:f4:86:8b:59:49:c1:4b:b5:f7:41:39:45:78:fb: 2e:d7:20:38:0b:01:e4:aa:9b:ed:5b:fd:b0:d9:51: 9b:35:55:76:8d:92:13:a0:7b:02:fc:f4:2d:5d:9c: 13:c5:f6:50:96:4a:73:3a:f3:c8:7f:8c:e8:ba:f3: 74:fe:ca:c7:84:26:7f:cb:46:b7:fd:e0:b7:7f:24: 05:f8:37:61:3e:1b:50:43:5d:ea:cf:b8:86:11:a5: 55:6a:f8:fe:30:af:12:8e:8f:39:c5:6f:d8:e0:52: df:3c:bb:eb:07:79:e9:8c:d1:89:ce:57:67:45:fd: e4:19:1f:2f:45:22:df:28:00:69:93:eb:b8:f7:ee: 14:63:77:52:f7:72:28:65:8c:60:be:71:3e:63:47: 09:da:1e:a9:0e:0d:15:56:49:d4:b2:be:83:e1:6c: 83:c3:4b:fe:c6:5c:8c:a3:50:18:71:3a:f6:bd:48: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:38:23:31:CB:C6:4D:76:D2:0B:D6:02:27:5A:DD:5A:DA:74:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54138f29-3e38-3b81-a0f0-0137e5de4112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:76:c4:03:70:30:d9:81:35:ad:2a:c7:6b:0d:92:c4:c1:50: d9:7b:c3:d1:3c:84:bf:6e:13:4b:9a:59:25:1e:4a:44:0f:45: 17:6a:ae:86:f5:ca:69:00:69:5e:d5:e1:ee:74:df:78:32:b8: a0:70:60:6b:2b:bb:65:bd:8d:cd:70:d7:4d:08:e2:9c:a9:31: d2:dc:28:31:4e:7c:ae:83:e0:04:e7:eb:86:f7:e7:43:66:38: 1f:ad:c8:a1:fe:6b:7d:fc:39:99:65:9d:cd:8b:b1:70:b5:ae: eb:de:14:ce:86:7d:58:be:7f:dd:31:74:d8:e4:dc:cf:21:ce: 2a:30:fd:70:1c:4f:94:3a:24:24:1d:88:80:e4:f1:a7:b0:13: 78:a0:05:57:cc:13:46:49:39:fe:10:af:77:7c:f5:d3:8c:9b: 20:11:25:82:da:50:c1:a4:1d:43:f6:a3:97:c7:02:3c:0f:47: b2:83:df:d8:90:c7:d3:6e:2d:df:e6:4e:d4:85:da:da:db:ce: 8e:42:69:09:d6:a6:f9:ec:b6:eb:70:b5:82:68:99:b7:da:3e: 5f:10:43:dd:ac:0e:a3:3b:3c:6a:ea:ad:76:eb:ff:16:a0:33: c1:1a:3e:68:0e:3c:91:c2:ae:30:b6:41:fc:fc:ee:60:f2:15: ff:0d:84:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oWULo2ND/RXAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmQxYmJlNGUtMGE2Yi00ZWM2LWJmMzctMjRkOGUyOWEwZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDCo70oKa3cC7JuXbE8UrQzy2sB3IIT6Qkw+ 08wcqC/3hWXHPLKJ6zYbUaLAirXcACNkoIc6bD4VnPeOHxvFrIVUaf7WvT0K4JOw 9IaLWUnBS7X3QTlFePsu1yA4CwHkqpvtW/2w2VGbNVV2jZIToHsC/PQtXZwTxfZQ lkpzOvPIf4zouvN0/srHhCZ/y0a3/eC3fyQF+DdhPhtQQ13qz7iGEaVVavj+MK8S jo85xW/Y4FLfPLvrB3npjNGJzldnRf3kGR8vRSLfKABpk+u49+4UY3dS93IoZYxg vnE+Y0cJ2h6pDg0VVknUsr6D4WyDw0v+xlyMo1AYcTr2vUgKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbMOCMxy8ZNdtIL1gInWt1a2nQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTQxMzhmMjktM2UzOC0z YjgxLWEwZjAtMDEzN2U1ZGU0MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC12xANwMNmBNa0qx2sNksTBUNl7w9E8hL9uE0uaWSUeSkQPRRdqrob1 ymkAaV7V4e5033gyuKBwYGsru2W9jc1w100I4pypMdLcKDFOfK6D4ATn64b350Nm OB+tyKH+a338OZllnc2LsXC1ruveFM6GfVi+f90xdNjk3M8hziow/XAcT5Q6JCQd iIDk8aewE3igBVfME0ZJOf4Qr3d89dOMmyARJYLaUMGkHUP2o5fHAjwPR7KD39iQ x9NuLd/mTtSF2trbzo5CaQnWpvnstutwtYJombfaPl8QQ92sDqM7PGrqrXbr/xag M8EaPmgOPJHCrjC2Qfz87mDyFf8NhBc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:05 2025 by rpki-client