$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/628adc28-79fe-3103-af9e-518a2465c15d.roa File: 628adc28-79fe-3103-af9e-518a2465c15d.roa (raw, json) Hash identifier: Pgkrbs/99s0SxNcmshFXDUuwkKFHqj/V9556JRKH+hQ= Subject key identifier: 27:1A:C1:24:1E:35:9C:06:7F:96:31:4D:ED:9E:CF:5B:FB:1B:E5:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374E7C6C436C4214243040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/628adc28-79fe-3103-af9e-518a2465c15d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.99.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4e:7c:6c:43:6c:42:14:24:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3e2e4b5c-28f9-48b7-ac42-fdb05444e001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:5d:70:03:1b:d0:50:69:af:1b:e4:70:4f: 96:3b:99:a4:02:c9:20:64:25:07:89:5e:3b:94:ed: 10:c9:d6:b1:3b:b1:6e:cc:8c:d0:0a:88:7f:6c:b2: 4d:45:8c:24:d2:5c:f6:93:ed:ea:0c:eb:7d:26:c9: f0:34:e2:f8:89:45:41:65:08:7e:6b:0d:3e:3d:6d: 1c:6f:cf:eb:50:ed:88:70:fc:93:db:25:b0:8c:94: c5:38:8e:6b:25:a4:80:70:38:c9:64:0f:33:2e:28: 41:02:e0:a2:89:50:9c:e7:27:f0:ef:6b:a4:9b:3c: 60:6a:fc:fe:74:76:db:73:d5:5b:ce:ab:4a:41:cc: 25:5f:91:e7:71:df:3b:af:32:c0:f9:e6:56:c2:18: 73:92:69:3c:44:fc:b2:98:87:77:54:92:fb:51:2f: e1:81:88:a4:83:28:fd:40:bc:fd:20:31:9f:d2:8c: 40:e8:77:6f:ce:8f:78:a1:5d:08:a0:cc:a8:82:71: b1:7e:31:de:79:fc:1e:31:29:d5:03:81:9e:ad:3b: b6:c4:57:67:17:7e:90:12:56:bc:41:3f:6a:d5:90: da:15:7e:7b:0b:51:5b:a7:72:fd:28:5c:07:8f:17: fa:a2:3a:70:19:0b:b0:a3:1c:63:4b:76:26:56:de: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1A:C1:24:1E:35:9C:06:7F:96:31:4D:ED:9E:CF:5B:FB:1B:E5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/628adc28-79fe-3103-af9e-518a2465c15d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:19:9a:64:01:c5:d7:49:fe:dc:82:d8:99:d8:f5:cd:a4:3e: 39:ff:66:f4:18:09:22:f4:c1:ee:3f:10:5f:f1:05:c1:0b:02: a0:6e:75:c4:8a:68:ab:bb:61:4b:a7:07:ee:4f:e7:8c:3a:b1: f6:e6:b0:2c:6b:34:db:ae:f6:1e:33:60:85:f0:8f:8b:20:00: cc:7a:5b:9e:94:4f:25:8e:d0:21:7a:15:8d:a9:0c:85:5c:50: 21:6b:e8:15:db:1a:cc:f6:4d:27:0e:79:17:38:af:c2:2f:3b: ff:12:25:66:cb:9b:df:84:2c:67:3c:cc:b8:9e:7e:3d:49:00: 62:46:6e:fe:be:03:2f:5a:78:2f:00:4b:46:57:43:f9:ae:d4: 4f:6c:e1:f4:ec:35:1c:46:70:f9:5c:06:39:3c:b4:aa:90:ca: f6:fe:2d:60:97:e5:2a:d8:90:e8:80:7e:a5:68:da:7e:f6:99: 28:34:2d:57:ea:cc:f0:65:e1:d1:30:f1:72:4f:80:ca:f1:41: 1b:7d:80:71:70:82:08:2b:43:05:a9:5e:c1:dd:69:17:c0:53: 5b:dc:ab:16:b0:22:29:ce:be:c5:c6:95:f0:c0:10:e6:e5:22: c3:ee:3d:90:42:c5:75:51:e0:c8:7e:d7:6a:e0:09:88:69:b8: a5:f8:2d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN058bENsQhQkMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2UyZTRiNWMtMjhmOS00OGI3LWFjNDItZmRiMDU0NDRlMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2VdcAMb0FBprxvkcE+WO5mkAskgZCUHiV47 lO0QydaxO7FuzIzQCoh/bLJNRYwk0lz2k+3qDOt9JsnwNOL4iUVBZQh+aw0+PW0c b8/rUO2IcPyT2yWwjJTFOI5rJaSAcDjJZA8zLihBAuCiiVCc5yfw72ukmzxgavz+ dHbbc9VbzqtKQcwlX5Hncd87rzLA+eZWwhhzkmk8RPyymId3VJL7US/hgYikgyj9 QLz9IDGf0oxA6Hdvzo94oV0IoMyognGxfjHeefweMSnVA4GerTu2xFdnF36QEla8 QT9q1ZDaFX57C1Fbp3L9KFwHjxf6ojpwGQuwoxxjS3YmVt5jNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcawSQeNZwGf5YxTe2ez1v7G+V6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjI4YWRjMjgtNzlmZS0z MTAzLWFmOWUtNTE4YTI0NjVjMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoZmmQBxddJ/tyC2JnY9c2kPjn/ZvQYCSL0we4/EF/xBcELAqBudcSK aKu7YUunB+5P54w6sfbmsCxrNNuu9h4zYIXwj4sgAMx6W56UTyWO0CF6FY2pDIVc UCFr6BXbGsz2TScOeRc4r8IvO/8SJWbLm9+ELGc8zLiefj1JAGJGbv6+Ay9aeC8A S0ZXQ/mu1E9s4fTsNRxGcPlcBjk8tKqQyvb+LWCX5SrYkOiAfqVo2n72mSg0LVfq zPBl4dEw8XJPgMrxQRt9gHFwgggrQwWpXsHdaRfAU1vcqxawIinOvsXGlfDAEObl IsPuPZBCxXVR4Mh+12rgCYhpuKX4LaY= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:48 2025 by rpki-client