$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa File: 768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa (raw, json) Hash identifier: 8lCw5hm5tOn5adOI32kKe7MSiMZ7xnl6YdFsvkXjgBs= Subject key identifier: 67:4A:A1:E5:D8:5F:47:3C:D3:68:0F:42:AF:F1:FA:8C:9B:0A:82:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C22D9F3570FBCDDF53F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:22:d9:f3:57:0f:bc:dd:f5:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=3f3f10c4-f583-4129-86c8-690ddbcd716c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:ae:c7:20:e1:0e:ff:36:0e:dd:2f:70:61: 64:13:dd:71:6a:fb:60:d0:03:f0:47:81:69:01:3e: fe:fb:4f:f1:e4:87:2e:b1:57:8a:a1:21:41:de:d7: 4f:13:9e:f7:40:14:74:84:0e:12:cc:b2:82:a8:8b: 8b:00:33:a7:b5:cd:8e:70:f0:a6:eb:4d:63:72:b6: f7:c7:82:78:61:d5:d7:90:65:25:53:4b:5d:79:0d: 3d:0f:04:a3:81:cb:1f:fd:d5:26:25:1b:de:b6:7c: d0:8a:b4:c9:3f:cb:3c:ed:2c:14:bf:b1:8c:61:f5: 19:a4:6c:20:a1:c5:58:76:c6:84:7b:59:16:5c:a0: 67:1a:83:70:0d:81:e0:c7:d7:d9:af:73:1c:42:a2: 45:6e:2a:9f:8a:72:e8:ff:c7:27:d7:ec:ce:c3:7a: 1f:86:c9:2f:df:04:54:87:fd:a1:70:2f:9c:be:f8: e5:4c:59:da:d3:4b:2f:19:71:4c:82:6d:f8:73:6a: 56:88:3a:1d:e0:60:5e:ca:f6:66:0d:fe:ac:bd:9c: 0d:5c:4c:37:04:82:3a:74:15:ea:71:93:60:48:a0: 49:6f:1c:17:8a:2c:8d:f1:23:af:f3:f1:7a:7c:ff: 70:54:d9:ab:ac:4e:7b:5f:e9:55:3c:63:ad:37:97: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4A:A1:E5:D8:5F:47:3C:D3:68:0F:42:AF:F1:FA:8C:9B:0A:82:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4c:3f:ed:f5:5f:81:c6:db:ab:57:ba:6e:8c:07:52:8f:b9: db:d4:aa:42:72:4c:95:b8:8c:04:9a:2b:94:44:df:36:0b:a2: ce:de:b1:75:d6:ca:83:64:a8:2c:37:90:34:1e:7b:7a:8e:8e: 17:28:92:c2:37:4f:c1:02:56:dc:8e:be:bf:1e:e0:27:ab:2d: 66:1b:5e:a5:0c:fc:69:7f:03:b7:9d:e9:ff:ce:58:3a:08:77: 0c:0a:7d:12:0a:5c:70:96:67:50:d3:94:d2:ec:35:1d:59:92: 81:4c:90:01:ed:fe:7d:7e:69:2f:07:a9:a3:ab:f6:51:c6:38: 3a:c8:14:a5:bb:0e:0d:41:ee:4c:c2:d3:1f:db:0c:1e:b5:1d: 03:7a:f0:48:7d:83:01:24:16:0d:cb:ca:a4:1a:62:5e:0c:fc: e3:97:f3:b4:90:d1:53:a7:17:29:77:04:9a:f9:8f:2d:d7:70: 10:29:73:00:8e:1c:cf:e0:72:7a:87:fc:b6:ac:b4:36:45:69: fd:99:3b:fb:6c:19:1e:10:79:f8:ac:3a:0e:c1:61:22:7f:9d: 9a:cd:bc:e7:30:4d:5b:38:e5:97:1e:5b:b1:dd:78:55:77:b0: aa:6d:a4:da:49:29:33:23:7d:f4:7b:df:a9:fd:c9:1a:6c:d3: 82:71:dc:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCLZ81cPvN31P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk M2YzZjEwYzQtZjU4My00MTI5LTg2YzgtNjkwZGRiY2Q3MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMWuxyDhDv82Dt0vcGFkE91xavtg0APwR4Fp AT7++0/x5IcusVeKoSFB3tdPE573QBR0hA4SzLKCqIuLADOntc2OcPCm601jcrb3 x4J4YdXXkGUlU0tdeQ09DwSjgcsf/dUmJRvetnzQirTJP8s87SwUv7GMYfUZpGwg ocVYdsaEe1kWXKBnGoNwDYHgx9fZr3McQqJFbiqfinLo/8cn1+zOw3ofhskv3wRU h/2hcC+cvvjlTFna00svGXFMgm34c2pWiDod4GBeyvZmDf6svZwNXEw3BII6dBXq cZNgSKBJbxwXiiyN8SOv8/F6fP9wVNmrrE57X+lVPGOtN5f0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdKoeXYX0c802gPQq/x+oybCoJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzY4YzFhNjUtMjdjZi0z MjI3LWI0ZDMtOGY2YmQ0ZGQwMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJMP+31X4HG26tXum6MB1KPudvUqkJyTJW4jASaK5RE3zYLos7esXXW yoNkqCw3kDQee3qOjhcoksI3T8ECVtyOvr8e4CerLWYbXqUM/Gl/A7ed6f/OWDoI dwwKfRIKXHCWZ1DTlNLsNR1ZkoFMkAHt/n1+aS8HqaOr9lHGODrIFKW7Dg1B7kzC 0x/bDB61HQN68Eh9gwEkFg3LyqQaYl4M/OOX87SQ0VOnFyl3BJr5jy3XcBApcwCO HM/gcnqH/LastDZFaf2ZO/tsGR4QefisOg7BYSJ/nZrNvOcwTVs45ZceW7HdeFV3 sKptpNpJKTMjffR736n9yRps04Jx3P8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:41 2025 by rpki-client