$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa File: 7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa (raw, json) Hash identifier: sODy0HzKPY/oauG0/LKsvVj0mNmbz9eT++eE8O+hbLc= Subject key identifier: 01:DD:4F:79:7B:00:60:75:AA:9A:3E:55:C9:F1:DB:23:3D:56:D7:1F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26BA259B4F7252E3C9000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.107.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6b:a2:59:b4:f7:25:2e:3c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=acfb0708-eaef-40da-b51f-9c91d6df293c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:4a:71:d0:e5:16:7a:01:bc:bc:28:eb:1d: 56:a0:fa:f4:e2:3e:6f:45:27:4b:87:dd:f6:cd:82: df:7b:81:56:9f:6b:88:aa:33:92:d6:db:0a:ba:f3: 3b:4a:40:92:a4:79:56:bd:33:4b:16:19:87:9a:df: 8d:5e:08:19:9a:6b:18:00:dd:f6:8c:75:71:b2:14: 03:e1:5d:79:ed:7d:04:ee:2d:f7:90:86:fe:60:33: 6e:04:90:ce:fa:d7:61:7b:8d:c9:54:b4:e9:a5:29: 6c:0d:bf:08:91:d5:69:24:f3:bc:40:d1:62:a5:01: 95:42:8f:15:b0:38:f2:0f:69:1b:6f:89:10:be:61: 7b:48:5f:f0:5c:14:42:c8:2a:05:9a:f1:cc:25:8f: 55:68:68:44:be:85:84:c2:e6:ba:14:77:61:b2:5e: c7:e1:29:9a:42:15:a1:b5:b8:f0:f0:13:ac:4d:d4: 10:13:88:67:0a:90:c7:d4:0f:b9:eb:75:f2:b4:ac: 5f:a7:2e:64:92:fa:49:39:12:a7:29:12:73:fc:8e: 27:a2:cf:7b:f5:11:b1:37:9d:dd:46:8a:79:09:06: a0:8d:70:6e:f5:d0:d3:47:34:72:90:51:86:87:db: b0:bc:c6:02:9f:27:fc:f4:54:5e:29:3d:60:44:f2: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DD:4F:79:7B:00:60:75:AA:9A:3E:55:C9:F1:DB:23:3D:56:D7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e43af5f-1392-347c-b6c2-f6f143ec70c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:09:3b:c5:5a:f0:86:6d:53:d7:4f:6d:11:6e:14:d0:32:05: 71:0e:d5:37:c5:03:c3:6c:46:1b:d0:de:72:ee:f9:0e:69:85: e9:37:0e:c8:c1:3d:2a:77:a8:c2:ba:8f:ca:bf:a7:92:96:6d: 8e:cd:9c:8e:87:a4:fc:ab:fd:a6:0a:a3:db:03:79:5a:4c:9e: 9b:b6:9c:ea:e8:f0:4d:ff:94:4f:83:2e:70:40:8e:5b:52:04: a8:cc:ee:0a:db:da:ff:67:65:61:df:26:ea:2f:06:66:f6:23: 0d:fe:2b:f8:dd:41:c1:36:66:12:e1:ff:aa:5e:14:ce:e0:74: a8:1e:a6:65:de:2c:a0:b9:c9:91:1f:d9:82:98:35:bd:a9:95: d0:04:db:ff:7c:69:b2:8e:1f:9d:9c:62:e9:dc:c2:3b:0c:14: dd:0a:6e:56:54:76:b9:db:f4:c9:3d:e7:af:0f:d7:cc:dd:b8: 6b:52:1e:72:98:91:31:37:d7:db:57:db:98:ac:4f:b3:31:8c: 85:1c:cb:a9:d4:ac:0d:43:62:55:cf:8e:b6:7b:22:13:8c:a9: 41:2b:29:98:0c:20:b4:7d:df:4c:12:c8:05:c9:d6:0c:99:6c: 28:d1:45:4d:e5:b3:11:28:e5:35:59:dc:ea:ae:08:9b:cd:59: 71:3c:a7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28muiWbT3JS48kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWNmYjA3MDgtZWFlZi00MGRhLWI1MWYtOWM5MWQ2ZGYyOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTpKcdDlFnoBvLwo6x1WoPr04j5vRSdLh932 zYLfe4FWn2uIqjOS1tsKuvM7SkCSpHlWvTNLFhmHmt+NXggZmmsYAN32jHVxshQD 4V157X0E7i33kIb+YDNuBJDO+tdhe43JVLTppSlsDb8IkdVpJPO8QNFipQGVQo8V sDjyD2kbb4kQvmF7SF/wXBRCyCoFmvHMJY9VaGhEvoWEwua6FHdhsl7H4SmaQhWh tbjw8BOsTdQQE4hnCpDH1A+563XytKxfpy5kkvpJORKnKRJz/I4nos979RGxN53d Rop5CQagjXBu9dDTRzRykFGGh9uwvMYCnyf89FReKT1gRPJ/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHdT3l7AGB1qpo+Vcnx2yM9VtcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2U0M2FmNWYtMTM5Mi0z NDdjLWI2YzItZjZmMTQzZWM3MGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIJO8Va8IZtU9dPbRFuFNAyBXEO1TfFA8NsRhvQ3nLu+Q5phek3DsjB PSp3qMK6j8q/p5KWbY7NnI6HpPyr/aYKo9sDeVpMnpu2nOro8E3/lE+DLnBAjltS BKjM7grb2v9nZWHfJuovBmb2Iw3+K/jdQcE2ZhLh/6peFM7gdKgepmXeLKC5yZEf 2YKYNb2pldAE2/98abKOH52cYuncwjsMFN0KblZUdrnb9Mk9568P18zduGtSHnKY kTE319tX25isT7MxjIUcy6nUrA1DYlXPjrZ7IhOMqUErKZgMILR930wSyAXJ1gyZ bCjRRU3lsxEo5TVZ3OquCJvNWXE8p20= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:42 2025 by rpki-client