$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/584111ae-ec1f-3b37-8ec9-251a7981d66c.roa File: 584111ae-ec1f-3b37-8ec9-251a7981d66c.roa (raw, json) Hash identifier: DSAyCFV3GUjPZHI+ZYoNdRVZFc3xwClbNMhuBVPo89w= Subject key identifier: AF:AE:45:5C:01:EC:82:C4:3D:FD:0B:FA:78:FB:23:CA:BF:DB:C0:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C474379EF3DF5E1CEE700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/584111ae-ec1f-3b37-8ec9-251a7981d66c.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.225.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:47:43:79:ef:3d:f5:e1:ce:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=1da7550d-ffca-426d-b085-6131c28e3486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:85:39:a0:9e:a5:37:9c:06:84:6e:79:05:03: 8e:16:65:da:a1:9f:f4:4e:e5:dc:24:39:2b:be:79: 19:dd:13:e0:65:a0:a7:56:f9:55:d7:e9:98:4d:d9: 93:1b:24:9e:ea:f6:e0:22:24:09:03:e2:8b:75:d3: dd:a7:a7:f4:fd:f3:7c:3d:a5:3e:25:94:0e:81:2d: 7a:37:c2:bd:dd:ba:e9:30:c2:04:8d:0f:27:00:15: 7d:0e:97:be:0f:a4:eb:e2:af:d0:9f:8f:23:14:cf: 5e:e3:57:46:06:b4:33:92:38:e6:e5:d9:28:04:d3: a2:17:c6:0d:b3:d6:eb:df:5d:fd:58:19:53:76:d6: 82:f0:5e:b6:03:11:f4:5e:f8:7e:67:23:43:dc:eb: a5:73:35:6e:00:0d:2a:90:75:32:82:d1:f9:ff:a6: 61:44:34:c1:59:c9:6e:56:86:a2:78:1b:f3:3a:80: 03:f1:a8:34:55:05:3e:81:e5:0b:73:c7:80:94:2e: 60:d2:b3:b3:ed:f0:30:8c:99:02:a0:82:e4:a0:be: 79:c8:ce:e9:25:ab:9d:33:24:25:1e:2d:7a:d3:0e: c1:3a:64:3f:a9:7a:fa:79:ee:28:7e:ac:b8:6c:f2: 7d:ca:81:60:24:1c:63:32:3a:5e:b0:81:67:28:a5: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AE:45:5C:01:EC:82:C4:3D:FD:0B:FA:78:FB:23:CA:BF:DB:C0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/584111ae-ec1f-3b37-8ec9-251a7981d66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:81:78:2f:fc:11:c0:e5:31:4e:52:a9:ac:89:e8:cb:47:ec: 0c:e6:8c:d8:6f:8a:c0:6a:c9:d3:04:44:d9:c1:d6:25:3e:42: b4:a3:91:33:5b:09:00:5f:8a:f7:9a:ae:63:6c:55:35:bd:96: d9:ad:1f:f4:df:45:ca:92:d3:bb:14:3c:a9:12:95:6c:64:29: 1e:82:20:93:58:c9:f5:39:37:31:c3:37:c5:29:f7:c5:38:8e: 74:c7:f9:62:18:6f:83:2f:8d:c5:e5:9f:b8:13:e4:89:91:de: 17:f7:46:bc:34:67:8e:4f:64:cc:05:01:b6:b8:15:c4:83:2e: c5:ac:b7:77:24:35:6d:eb:47:0c:2f:a9:03:c6:aa:c2:02:89: f0:66:c9:4e:45:4e:6f:2b:af:4f:3a:45:70:66:23:f5:59:e4: 5a:ed:f9:29:1e:a5:1b:09:dc:8f:49:71:07:80:f7:f3:3c:0d: 35:4e:97:0f:08:a5:09:3f:15:46:9d:57:68:c1:0b:66:3f:d9: 3a:c2:eb:e4:74:ec:64:b1:a7:29:d9:d1:fb:3e:aa:d2:68:12: cc:5c:35:91:d2:f9:c4:1f:7b:4d:bc:0d:30:2e:10:cc:10:26: 4d:c0:3b:15:29:ac:85:ce:13:77:6c:c7:88:a1:e6:16:f1:44: eb:6f:86:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEdDee899eHO5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MWRhNzU1MGQtZmZjYS00MjZkLWIwODUtNjEzMWMyOGUzNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIU5oJ6lN5wGhG55BQOOFmXaoZ/0TuXcJDkr vnkZ3RPgZaCnVvlV1+mYTdmTGySe6vbgIiQJA+KLddPdp6f0/fN8PaU+JZQOgS16 N8K93brpMMIEjQ8nABV9Dpe+D6Tr4q/Qn48jFM9e41dGBrQzkjjm5dkoBNOiF8YN s9br3139WBlTdtaC8F62AxH0Xvh+ZyND3OulczVuAA0qkHUygtH5/6ZhRDTBWclu VoaieBvzOoAD8ag0VQU+geULc8eAlC5g0rOz7fAwjJkCoILkoL55yM7pJaudMyQl Hi160w7BOmQ/qXr6ee4ofqy4bPJ9yoFgJBxjMjpesIFnKKVFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+uRVwB7ILEPf0L+nj7I8q/28D/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg0MTExYWUtZWMxZi0z YjM3LThlYzktMjUxYTc5ODFkNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOBeC/8EcDlMU5SqayJ6MtH7AzmjNhvisBqydMERNnB1iU+QrSjkTNb CQBfivearmNsVTW9ltmtH/TfRcqS07sUPKkSlWxkKR6CIJNYyfU5NzHDN8Up98U4 jnTH+WIYb4MvjcXln7gT5ImR3hf3Rrw0Z45PZMwFAba4FcSDLsWst3ckNW3rRwwv qQPGqsICifBmyU5FTm8rr086RXBmI/VZ5Frt+SkepRsJ3I9JcQeA9/M8DTVOlw8I pQk/FUadV2jBC2Y/2TrC6+R07GSxpynZ0fs+qtJoEsxcNZHS+cQfe028DTAuEMwQ Jk3AOxUprIXOE3dsx4ih5hbxROtvhiE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:33 2025 by rpki-client