$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c71ecab-974b-30a3-bb07-187a762f4913.roa File: 5c71ecab-974b-30a3-bb07-187a762f4913.roa (raw, json) Hash identifier: ORX6eIqR9HcXvDwrT2TCivvdBUDzHaI6txsMGlpOSd8= Subject key identifier: FB:3C:56:FD:9E:25:0F:25:A5:63:5E:BB:05:DE:C1:60:A5:19:A3:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374D64B3ED0D4D835FE2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c71ecab-974b-30a3-bb07-187a762f4913.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4d:64:b3:ed:0d:4d:83:5f:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c27d6d5f-8ac8-4fcc-9720-5b32924da102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:29:0d:5a:b6:95:b7:16:54:33:d3:eb:9c: 57:c4:a0:7c:54:d0:2b:df:a3:d0:19:73:be:a3:8f: e2:1e:ca:41:69:5c:57:eb:0b:6d:f3:49:61:5c:3d: 70:7a:6c:aa:79:2c:55:2c:07:74:34:31:78:4f:5b: 42:42:4a:60:80:3f:6b:2b:9c:f6:f7:d6:b6:a1:f8: ef:01:9c:67:bb:7d:54:9d:dd:21:10:b2:c9:b1:ba: 9a:a6:4f:a8:7e:3a:d7:aa:02:0a:6c:10:69:92:56: 88:a8:b3:76:51:b8:2b:19:55:e1:0a:5d:23:ec:32: a7:24:33:02:13:ed:8d:aa:ae:09:f2:95:e7:51:56: 43:a7:2d:bc:1c:51:e9:26:81:ca:4e:e9:e1:71:3a: 17:9f:25:0a:da:7e:97:d3:74:c5:4b:b5:ad:1c:1d: 80:5b:ce:0a:11:4b:66:02:d7:b4:93:fa:f9:48:af: d0:f6:5f:8a:ac:c4:94:c9:c4:f3:81:6b:65:c8:eb: 17:91:18:36:4a:ac:65:b7:44:4c:91:d6:75:2f:f8: 63:e0:59:2e:5d:07:91:0c:d1:79:82:bc:ba:9a:58: 02:2b:67:6e:84:06:50:6b:7c:b4:e9:98:c1:00:91: 11:0e:e3:3f:30:7d:dd:29:d0:be:c2:03:cb:6e:a5: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3C:56:FD:9E:25:0F:25:A5:63:5E:BB:05:DE:C1:60:A5:19:A3:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c71ecab-974b-30a3-bb07-187a762f4913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4b:3b:5e:50:77:f9:0a:8a:91:e1:2e:54:bc:77:a5:2e:ac: 2a:31:5c:cb:8f:26:e6:55:f9:82:46:04:c3:23:fd:9f:d1:a2: eb:16:f2:84:24:75:70:a0:ec:4f:36:4e:d0:5b:36:3c:78:13: 8f:af:e2:98:2e:b0:94:13:a5:9e:80:4b:07:fb:e1:4c:38:8b: e8:23:97:20:12:43:d2:5d:73:6b:6f:4d:e2:ac:f2:9c:7a:00: 1b:43:8c:59:8f:db:a0:72:e1:c7:57:7a:45:34:46:8b:ab:6e: 36:96:f6:1c:e1:48:89:42:4c:6a:f7:ac:0d:86:d2:12:04:ea: 75:84:11:b6:b4:1c:c9:a6:eb:b0:94:76:6f:a7:be:cd:3f:7a: 11:28:2a:0a:34:4f:01:7d:fe:4e:22:e6:1f:d5:62:72:f6:88: a7:b5:9e:39:94:e6:1b:44:6f:e1:94:72:f7:1e:24:b4:64:01: f0:5a:97:f7:5c:85:a1:64:5d:28:19:ed:7e:f8:cd:5b:dc:b5: 5d:d7:e5:fd:48:aa:16:f9:67:0b:f7:34:92:5f:d3:fb:0c:d8: 35:57:e1:2f:6f:b5:3a:1b:a0:f0:87:27:a2:ff:fa:57:49:10: a2:d9:9b:c4:32:d5:5a:2b:ed:fb:4a:f7:2e:cf:98:5d:27:4e: 89:2e:e1:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN01ks+0NTYNf4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzI3ZDZkNWYtOGFjOC00ZmNjLTk3MjAtNWIzMjkyNGRhMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPApDVq2lbcWVDPT65xXxKB8VNAr36PQGXO+ o4/iHspBaVxX6wtt80lhXD1wemyqeSxVLAd0NDF4T1tCQkpggD9rK5z299a2ofjv AZxnu31Und0hELLJsbqapk+ofjrXqgIKbBBpklaIqLN2UbgrGVXhCl0j7DKnJDMC E+2Nqq4J8pXnUVZDpy28HFHpJoHKTunhcToXnyUK2n6X03TFS7WtHB2AW84KEUtm Ate0k/r5SK/Q9l+KrMSUycTzgWtlyOsXkRg2Sqxlt0RMkdZ1L/hj4FkuXQeRDNF5 gry6mlgCK2duhAZQa3y06ZjBAJERDuM/MH3dKdC+wgPLbqUowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs8Vv2eJQ8lpWNeuwXewWClGaMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM3MWVjYWItOTc0Yi0z MGEzLWJiMDctMTg3YTc2MmY0OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxLO15Qd/kKipHhLlS8d6UurCoxXMuPJuZV+YJGBMMj/Z/RousW8oQk dXCg7E82TtBbNjx4E4+v4pgusJQTpZ6ASwf74Uw4i+gjlyASQ9Jdc2tvTeKs8px6 ABtDjFmP26By4cdXekU0RourbjaW9hzhSIlCTGr3rA2G0hIE6nWEEba0HMmm67CU dm+nvs0/ehEoKgo0TwF9/k4i5h/VYnL2iKe1njmU5htEb+GUcvceJLRkAfBal/dc haFkXSgZ7X74zVvctV3X5f1Iqhb5Zwv3NJJf0/sM2DVX4S9vtToboPCHJ6L/+ldJ EKLZm8Qy1Vor7ftK9y7PmF0nToku4TU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:42 2025 by rpki-client