$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74da592d-8c4c-3087-8ed8-f1f404280ee5.roa File: 74da592d-8c4c-3087-8ed8-f1f404280ee5.roa (raw, json) Hash identifier: fEvQENWbQIXmRtLpPSjLm+FCjbjpZGkO0ziP2Qf6q+s= Subject key identifier: B0:18:19:B6:22:B8:C0:A8:5B:9B:33:5A:41:2C:D9:64:70:29:8E:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2418022DC9E80465890D6 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74da592d-8c4c-3087-8ed8-f1f404280ee5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:41:80:22:dc:9e:80:46:58:90:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bd7a6d20-ba2f-43f7-b0bd-fedfda573ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:7d:d7:54:1e:5c:5f:be:50:a8:88:05:89: c7:29:7c:7a:00:25:b7:9b:7a:b3:d9:80:3a:73:45: d2:dc:6c:2f:ba:86:57:58:ac:e3:56:62:9a:53:9c: 4c:a5:aa:53:1b:7c:a4:9f:98:08:0a:a4:bf:38:2b: cd:42:41:bc:18:0c:c9:b4:6d:e0:22:9b:35:75:dd: 0f:a5:7d:87:69:ea:70:bc:70:7a:7e:49:05:20:0d: ab:0b:1a:85:42:4c:d0:5a:32:20:6c:69:af:fb:99: 25:1d:87:82:58:bd:b0:df:94:d4:74:01:3f:84:37: 84:64:6b:e0:0d:3c:c6:92:ec:be:11:e5:5c:66:b5: 08:d2:81:79:ad:7f:33:00:56:9a:d0:87:e1:7d:34: 1e:22:9f:8b:ea:a6:f8:9d:eb:c4:20:eb:38:e9:74: f8:04:8e:d0:77:a8:d6:3d:31:e4:ed:a5:f9:9e:79: 87:ef:a8:f5:dd:eb:b5:8f:ab:f3:ea:2d:66:4f:e8: 47:c1:73:58:2c:17:1c:d9:1c:55:e8:ce:74:d0:5e: 06:64:27:cb:19:a6:71:b9:f4:56:35:f9:b0:af:3d: 47:ce:14:ea:cd:2c:7c:c9:65:3e:34:e4:e7:c7:a1: 1b:68:4c:ca:25:a5:15:f8:f7:98:ad:ee:cd:68:77: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:19:B6:22:B8:C0:A8:5B:9B:33:5A:41:2C:D9:64:70:29:8E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74da592d-8c4c-3087-8ed8-f1f404280ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:79:dd:ae:5c:17:b5:cb:e3:6c:e9:df:df:86:de:7a:4e:6c: a2:ea:a9:07:9e:82:02:19:d0:8c:e4:ef:77:28:89:21:02:d4: 5a:48:b5:80:6f:dc:bc:dc:72:d8:ef:4e:be:02:52:8f:08:26: 6a:a0:9c:8e:99:ea:8e:a9:85:c1:d0:1b:f6:00:55:1c:c0:5c: d3:07:5d:46:1d:bf:91:11:38:1b:60:ee:4e:e7:1b:9f:3e:47: ff:fd:06:eb:19:1b:72:5c:fa:e8:38:28:1f:1f:a9:c8:d4:26: 9a:01:d6:01:bf:5e:67:32:91:4c:19:d4:3a:10:33:fc:c6:c1: f3:a8:49:76:ce:9b:ba:bb:31:75:b8:13:ab:de:05:67:42:fd: b4:5c:c4:90:dd:ee:7e:e3:ec:43:76:84:07:ed:85:94:3a:de: b3:b6:a2:32:5b:d7:a3:2c:7e:98:0a:55:e8:75:d4:12:0e:12: 3d:97:9e:73:aa:3c:d5:83:ab:bb:05:c4:a8:29:92:ee:e4:63: 01:ca:1f:f3:47:aa:76:15:94:ba:44:5d:43:09:74:47:c5:9b: 5a:7a:3f:23:6f:f8:e0:ba:d7:45:20:36:d7:17:7f:ab:16:55: c9:5f:2e:83:ef:75:1e:22:37:08:41:e7:19:10:5c:1e:97:37: f2:9d:5d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kGAItyegEZYkNYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmQ3YTZkMjAtYmEyZi00M2Y3LWIwYmQtZmVkZmRhNTczYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsd911QeXF++UKiIBYnHKXx6ACW3m3qz2YA6 c0XS3GwvuoZXWKzjVmKaU5xMpapTG3ykn5gICqS/OCvNQkG8GAzJtG3gIps1dd0P pX2HaepwvHB6fkkFIA2rCxqFQkzQWjIgbGmv+5klHYeCWL2w35TUdAE/hDeEZGvg DTzGkuy+EeVcZrUI0oF5rX8zAFaa0IfhfTQeIp+L6qb4nevEIOs46XT4BI7Qd6jW PTHk7aX5nnmH76j13eu1j6vz6i1mT+hHwXNYLBcc2RxV6M500F4GZCfLGaZxufRW Nfmwrz1HzhTqzSx8yWU+NOTnx6EbaEzKJaUV+PeYre7NaHczLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAYGbYiuMCoW5szWkEs2WRwKY74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzRkYTU5MmQtOGM0Yy0z MDg3LThlZDgtZjFmNDA0MjgwZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd53a5cF7XL42zp39+G3npObKLqqQeeggIZ0Izk73coiSEC1FpItYBv 3LzcctjvTr4CUo8IJmqgnI6Z6o6phcHQG/YAVRzAXNMHXUYdv5EROBtg7k7nG58+ R//9BusZG3Jc+ug4KB8fqcjUJpoB1gG/XmcykUwZ1DoQM/zGwfOoSXbOm7q7MXW4 E6veBWdC/bRcxJDd7n7j7EN2hAfthZQ63rO2ojJb16MsfpgKVeh11BIOEj2XnnOq PNWDq7sFxKgpku7kYwHKH/NHqnYVlLpEXUMJdEfFm1p6PyNv+OC610UgNtcXf6sW VclfLoPvdR4iNwhB5xkQXB6XN/KdXbA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:26 2025 by rpki-client