$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa File: 6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa (raw, json) Hash identifier: 6uQpUEfraqnHcGGuaPYOe10fA+SGTM503PcMnMbaYvY= Subject key identifier: DE:FA:61:46:78:6E:E5:65:8F:11:84:69:35:3C:08:3E:A3:B1:91:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AFC1C1D98773A2B7EFE0A1BF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.227.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1d:98:77:3a:2b:7e:fe:0a:1b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6f6a6f0f-9a77-432e-bd08-669ec9fdb6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:b4:11:73:6b:5d:5b:eb:c0:6a:bc:b5:73: 47:a3:e2:9b:1f:ea:95:04:97:62:10:e6:b4:86:a0: 61:d3:95:49:73:03:fc:95:98:3d:da:0f:00:53:38: 60:a7:da:79:c3:de:38:7c:b7:c0:c7:59:d5:cb:c2: 40:c6:22:1c:63:e8:90:7c:28:35:cf:27:f3:71:2b: c0:28:bb:b0:09:37:09:2a:33:df:5f:77:3f:b7:92: f5:a8:3f:56:19:20:d3:4c:4d:ce:ca:6e:86:66:af: 37:e0:1e:89:e6:5c:ee:e5:c4:6b:70:1c:e2:61:68: e2:88:6d:93:6b:a7:52:78:5b:ea:e8:9f:3e:06:7d: 52:e6:60:76:3a:ce:b9:89:0c:30:cd:9a:64:b2:87: 69:a9:61:f6:79:cc:38:8c:f8:8a:55:60:8a:12:e1: f0:1a:46:ea:7a:21:30:84:13:8a:c9:21:36:7c:d2: 4a:80:25:fe:ce:6c:91:dc:0b:71:91:57:8d:db:20: 10:14:8b:36:e5:09:99:c3:07:b2:37:34:0c:cf:6c: 2d:a5:68:fc:1b:aa:63:94:ee:58:65:ca:40:52:52: 8f:44:87:ee:46:fd:18:dd:cd:c6:51:c2:20:0d:09: e1:3b:d4:3b:79:99:a5:f5:86:93:a6:ca:d6:a8:01: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FA:61:46:78:6E:E5:65:8F:11:84:69:35:3C:08:3E:A3:B1:91:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fd:f7:f4:bd:b1:4e:33:1d:a3:36:5b:c8:fc:11:88:47:29: 70:73:b1:5d:d2:07:64:ca:a0:8e:71:1e:67:9a:39:0b:2d:97: d1:95:8b:4a:fd:5f:6a:70:64:d4:4d:87:1c:15:04:1c:79:4d: 0f:d5:7e:db:2a:b5:45:29:a6:56:51:59:33:4c:81:27:0f:e0: 4b:c2:40:54:31:e9:0a:e1:ba:1d:6a:2e:96:11:8c:c9:e5:d8: 98:46:d2:b2:13:4d:36:6c:e2:c0:74:fa:f0:97:c2:4c:8a:ae: c0:13:2a:e7:72:a4:be:a9:1c:75:66:27:c6:87:51:99:ff:98: f0:27:06:cb:fc:d9:14:f9:b3:0c:6f:bd:a8:cb:d9:63:ee:1e: 78:2c:2d:28:60:97:eb:83:2b:11:aa:60:2f:fd:da:99:20:73: 71:0b:1e:d4:ca:49:72:6f:bf:e0:d6:ac:75:59:c7:9e:f4:74: 51:39:e0:e2:97:7e:9d:29:95:58:31:f9:f9:1f:92:b7:47:f8: 07:6a:9e:8e:96:86:0f:2e:9a:98:6e:5c:18:5e:9b:85:12:d6: 9f:31:d3:e5:9c:5a:81:e6:96:64:c1:2f:f2:5f:ab:9d:27:9f: b5:53:e8:3e:d3:66:57:4e:d9:ad:e8:10:0d:6f:d4:5a:37:33: 11:aa:89:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB2Ydzorfv4KG/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmY2YTZmMGYtOWE3Ny00MzJlLWJkMDgtNjY5ZWM5ZmRiNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEO0EXNrXVvrwGq8tXNHo+KbH+qVBJdiEOa0 hqBh05VJcwP8lZg92g8AUzhgp9p5w944fLfAx1nVy8JAxiIcY+iQfCg1zyfzcSvA KLuwCTcJKjPfX3c/t5L1qD9WGSDTTE3Oym6GZq834B6J5lzu5cRrcBziYWjiiG2T a6dSeFvq6J8+Bn1S5mB2Os65iQwwzZpksodpqWH2ecw4jPiKVWCKEuHwGkbqeiEw hBOKySE2fNJKgCX+zmyR3AtxkVeN2yAQFIs25QmZwweyNzQMz2wtpWj8G6pjlO5Y ZcpAUlKPRIfuRv0Y3c3GUcIgDQnhO9Q7eZml9YaTpsrWqAG3AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN76YUZ4buVljxGEaTU8CD6jsZGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmIyYWM1YjUtOGQxNi0z ZWRkLTliYmMtOGQ1ZjkyMGJmMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr99/S9sU4zHaM2W8j8EYhHKXBzsV3SB2TKoI5xHmeaOQstl9GVi0r9 X2pwZNRNhxwVBBx5TQ/VftsqtUUpplZRWTNMgScP4EvCQFQx6Qrhuh1qLpYRjMnl 2JhG0rITTTZs4sB0+vCXwkyKrsATKudypL6pHHVmJ8aHUZn/mPAnBsv82RT5swxv vajL2WPuHngsLShgl+uDKxGqYC/92pkgc3ELHtTKSXJvv+DWrHVZx570dFE54OKX fp0plVgx+fkfkrdH+Adqno6Whg8umphuXBhem4US1p8x0+WcWoHmlmTBL/Jfq50n n7VT6D7TZldO2a3oEA1v1Fo3MxGqiQM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:55 2025 by rpki-client