$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bf3bdde-11df-32f7-abb9-f3238d0c2ee4.roa File: 7bf3bdde-11df-32f7-abb9-f3238d0c2ee4.roa (raw, json) Hash identifier: 0/j1Ff0h551X/DUJwHMoCXhU6cjfLktW8kwS3m+upMY= Subject key identifier: 84:75:6A:1C:4B:AD:46:A0:44:51:0C:07:A8:EB:75:40:0E:20:BA:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373C1B8A55579EEA167CC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bf3bdde-11df-32f7-abb9-f3238d0c2ee4.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3c:1b:8a:55:57:9e:ea:16:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=273db5c4-61e7-46d3-9aaf-0623751e76b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ed:90:a9:8c:5a:41:2a:6a:fb:15:4a:68:04: 4b:5c:3c:1b:35:37:68:2d:3f:4f:ca:64:86:1e:31: 1b:4b:44:7f:e7:c7:46:93:a4:6f:e8:2a:59:75:82: 49:d6:9a:de:bb:a6:18:76:26:51:03:a4:0a:dd:6e: 3c:6f:57:7a:48:32:2a:99:03:79:54:3f:85:61:f1: 28:76:43:be:89:4d:fb:b7:61:46:90:76:10:55:36: e3:48:4c:90:63:57:c0:28:77:57:ca:9a:f6:cf:3c: 70:3a:70:c8:7c:c7:84:55:2b:bf:64:9f:86:ae:db: 7d:70:63:1e:00:13:06:6f:9e:f7:a2:38:58:71:92: fb:63:37:1a:1c:7b:25:c0:67:ee:64:c8:4a:56:3c: 9f:d6:21:84:76:1f:ef:8e:8a:d2:9d:e3:e5:b5:9f: 45:34:07:27:40:68:28:42:da:4f:86:de:46:ac:a7: b6:86:04:42:96:63:e3:a9:bd:f1:93:76:9f:7e:6d: 7c:9b:da:3d:97:aa:df:6b:9e:18:9a:ff:99:4a:35: 25:ee:a1:79:6b:3c:ad:d9:96:e1:b8:92:5e:ad:5b: 3b:9f:af:34:e6:17:2b:81:4d:65:ce:91:df:a9:95: 70:6a:a0:84:4a:37:fe:5c:1f:83:e4:31:d8:b8:70: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:6A:1C:4B:AD:46:A0:44:51:0C:07:A8:EB:75:40:0E:20:BA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bf3bdde-11df-32f7-abb9-f3238d0c2ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dd:dd:66:81:ba:ab:ee:9c:66:84:39:20:b2:e5:62:8c:7d: e7:38:12:4d:6b:f4:7d:4b:21:3b:70:cc:2e:f6:bd:72:a3:8b: 62:c5:d0:ec:44:2a:71:6c:d2:a0:0d:46:46:b0:75:bf:6a:61: 70:b5:dd:2d:92:bb:d2:66:f1:9e:cc:bf:2a:2a:59:3b:6e:21: ff:23:cc:2d:12:39:75:a4:b6:e5:c4:f4:15:59:d1:89:29:a4: f8:cd:82:13:9a:e8:2a:78:fe:e6:22:a8:dd:c3:70:20:e4:53: 08:e9:76:12:cc:04:57:69:01:d1:53:70:d5:9e:2b:9a:14:8a: 70:5c:b6:22:8c:dd:0d:03:c4:12:24:88:90:4a:16:83:63:e1: 45:30:47:0f:a4:45:76:5e:a5:99:b8:44:93:91:4a:83:df:cb: e8:67:e7:45:8d:c0:87:71:17:65:f9:ab:bb:32:a3:60:a2:4b: 33:ae:74:20:23:dc:26:85:c9:ef:15:a5:42:7d:dd:1a:5f:2f: 84:81:38:01:ba:da:b2:4a:5f:5b:60:4a:ec:e6:16:29:e4:8b: 0d:d6:8e:b7:1d:47:8e:75:2b:84:b9:0c:ad:3a:9b:fd:c4:27: e0:63:64:a9:b3:3e:13:85:7d:ab:f2:07:74:ed:72:01:8d:47: a9:1b:5a:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzwbilVXnuoWfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjczZGI1YzQtNjFlNy00NmQzLTlhYWYtMDYyMzc1MWU3NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe2QqYxaQSpq+xVKaARLXDwbNTdoLT9PymSG HjEbS0R/58dGk6Rv6CpZdYJJ1preu6YYdiZRA6QK3W48b1d6SDIqmQN5VD+FYfEo dkO+iU37t2FGkHYQVTbjSEyQY1fAKHdXypr2zzxwOnDIfMeEVSu/ZJ+Grtt9cGMe ABMGb573ojhYcZL7YzcaHHslwGfuZMhKVjyf1iGEdh/vjorSnePltZ9FNAcnQGgo QtpPht5GrKe2hgRClmPjqb3xk3affm18m9o9l6rfa54Ymv+ZSjUl7qF5azyt2Zbh uJJerVs7n6805hcrgU1lzpHfqZVwaqCESjf+XB+D5DHYuHA6hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR1ahxLrUagRFEMB6jrdUAOILpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2JmM2JkZGUtMTFkZi0z MmY3LWFiYjktZjMyMzhkMGMyZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvd3WaBuqvunGaEOSCy5WKMfec4Ek1r9H1LITtwzC72vXKji2LF0OxE KnFs0qANRkawdb9qYXC13S2Su9Jm8Z7MvyoqWTtuIf8jzC0SOXWktuXE9BVZ0Ykp pPjNghOa6Cp4/uYiqN3DcCDkUwjpdhLMBFdpAdFTcNWeK5oUinBctiKM3Q0DxBIk iJBKFoNj4UUwRw+kRXZepZm4RJORSoPfy+hn50WNwIdxF2X5q7syo2CiSzOudCAj 3CaFye8VpUJ93RpfL4SBOAG62rJKX1tgSuzmFinkiw3WjrcdR451K4S5DK06m/3E J+BjZKmzPhOFfavyB3TtcgGNR6kbWuU= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:30 2025 by rpki-client