$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa File: 604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa (raw, json) Hash identifier: ovg9y/4LzdVNHlPDqfm4NsYff4KG7CvcuvS9YXaQp80= Subject key identifier: B7:44:81:78:A8:F3:F6:98:5D:AB:33:09:CF:52:03:9A:B9:63:11:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C3BC1B64DE94D0289A500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.106.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:3b:c1:b6:4d:e9:4d:02:89:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=17bdc493-caeb-4699-a669-b3c398c4fbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fb:b7:ca:8f:58:a6:87:a7:86:12:be:cd:c6: e4:de:7c:20:3a:26:d9:ea:b4:26:c7:4c:cd:c5:1c: fc:ff:82:eb:53:fb:0d:5d:20:5f:60:93:cc:65:00: 3a:76:ee:dc:46:4d:e7:91:7d:29:cc:7e:cd:89:ec: 9d:79:37:aa:43:e2:be:e4:ee:99:25:d9:c9:df:76: 9c:da:9d:d3:73:03:e1:61:6d:14:6c:59:e4:9a:78: f1:99:3f:b4:b1:58:20:fa:4b:de:cd:1c:36:08:0a: 05:48:2b:63:87:73:38:6b:68:a5:14:93:2a:4f:be: f3:7d:d2:c5:34:00:37:4c:3f:b5:dc:b3:42:d5:6d: f4:fd:8d:08:3d:6c:4b:a3:7e:6b:d8:58:e3:e8:56: e9:b7:be:34:f1:1c:b6:83:11:86:8f:52:e3:27:b9: 32:26:1e:f7:b0:07:c9:3f:58:f9:87:d5:af:4a:20: 8d:2c:fa:ba:95:3f:15:75:0e:79:7e:fc:34:97:bb: 67:a5:8c:ed:7e:13:6a:53:4d:3c:6c:4b:c1:ba:38: 3f:e7:e6:be:df:c3:e0:08:29:76:7a:d2:92:71:3f: b0:2d:d7:76:2e:eb:ca:bf:79:2d:2b:8d:88:52:ee: 7a:94:4e:24:62:47:ab:c0:93:91:71:4e:4c:53:27: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:44:81:78:A8:F3:F6:98:5D:AB:33:09:CF:52:03:9A:B9:63:11:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:88:aa:3a:ec:9a:2b:d2:0a:0a:cc:d6:86:39:fd:5e:61:64: 38:ea:82:66:3c:51:4f:d8:05:c2:52:f6:b8:c8:2b:8f:5c:33: b2:f8:d9:ac:d6:f4:bf:aa:cc:9d:4b:c5:11:38:a9:29:23:56: c6:e0:18:36:e3:56:d8:f3:48:3e:d2:2a:9c:83:38:ea:02:34: bb:67:64:52:9d:cf:8e:d7:29:94:6f:02:00:f6:62:ed:41:de: b0:0a:34:4c:02:47:a7:1f:77:f6:58:9e:d2:20:7d:d6:dc:52: b0:d3:c0:4b:7c:b8:ba:92:dd:27:b4:b0:41:0c:9e:89:e4:01: 0f:d0:7c:b0:f1:40:cf:e7:b2:dd:13:a1:de:de:12:13:a3:03: c7:c5:eb:6f:eb:d3:62:54:ef:74:cc:21:d9:8e:20:be:e0:7f: 82:81:f0:43:9b:f0:af:6c:e7:43:74:82:1a:a1:f5:3d:a4:8b: e6:88:85:cd:f4:83:61:0a:76:b0:46:2c:37:18:15:2d:9b:1f: 88:48:dd:51:77:b2:bb:e3:a5:2d:51:f8:e2:72:c9:83:c7:c0: 2f:d1:d1:0f:a6:af:8d:2c:61:4d:1f:69:0d:7d:dc:47:fd:0b: e4:5f:97:5b:fe:38:fb:cc:de:3a:ad:93:75:0f:3d:39:89:28: 1f:28:4c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDvBtk3pTQKJpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MTdiZGM0OTMtY2FlYi00Njk5LWE2NjktYjNjMzk4YzRmYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/u3yo9YpoenhhK+zcbk3nwgOibZ6rQmx0zN xRz8/4LrU/sNXSBfYJPMZQA6du7cRk3nkX0pzH7NieydeTeqQ+K+5O6ZJdnJ33ac 2p3TcwPhYW0UbFnkmnjxmT+0sVgg+kvezRw2CAoFSCtjh3M4a2ilFJMqT77zfdLF NAA3TD+13LNC1W30/Y0IPWxLo35r2Fjj6Fbpt7408Ry2gxGGj1LjJ7kyJh73sAfJ P1j5h9WvSiCNLPq6lT8VdQ55fvw0l7tnpYztfhNqU008bEvBujg/5+a+38PgCCl2 etKScT+wLdd2LuvKv3ktK42IUu56lE4kYkerwJORcU5MUycdswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdEgXio8/aYXaszCc9SA5q5YxEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjA0YzFlYmItOWY4Ny0z ODk2LTljNTEtMjlhMWQ3ZDllNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaIqjrsmivSCgrM1oY5/V5hZDjqgmY8UU/YBcJS9rjIK49cM7L42azW 9L+qzJ1LxRE4qSkjVsbgGDbjVtjzSD7SKpyDOOoCNLtnZFKdz47XKZRvAgD2Yu1B 3rAKNEwCR6cfd/ZYntIgfdbcUrDTwEt8uLqS3Se0sEEMnonkAQ/QfLDxQM/nst0T od7eEhOjA8fF62/r02JU73TMIdmOIL7gf4KB8EOb8K9s50N0ghqh9T2ki+aIhc30 g2EKdrBGLDcYFS2bH4hI3VF3srvjpS1R+OJyyYPHwC/R0Q+mr40sYU0faQ193Ef9 C+Rfl1v+OPvM3jqtk3UPPTmJKB8oTHg= -----END CERTIFICATE-----Generated at Thu Oct 16 01:47:04 2025 by rpki-client