$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f0d25e4-8805-3475-ab5a-c66bc1bd4d22.roa File: 7f0d25e4-8805-3475-ab5a-c66bc1bd4d22.roa (raw, json) Hash identifier: GuBtdonx2MmOxNZA+SzeTdOhLT3Vuk3GwHx39JqU4R8= Subject key identifier: 38:8B:5C:61:84:8E:6B:4A:C7:C5:12:87:B7:87:6E:20:D3:5B:F2:83 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F230636F1AF502DAB9E100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f0d25e4-8805-3475-ab5a-c66bc1bd4d22.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.99.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:30:63:6f:1a:f5:02:da:b9:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1c791ce6-4266-4ef2-a6cb-879e7397973f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:b1:d9:72:b0:72:ce:13:25:cb:a2:4e:28: 13:90:47:ac:f1:1a:80:f2:c6:d9:aa:49:33:e8:b0: 2f:aa:b1:5b:0e:c3:f6:3f:3b:42:52:0f:eb:e2:d8: 17:92:31:f8:06:9d:3c:e4:1c:92:d5:99:3a:ab:45: 26:05:ab:a2:96:e4:13:65:1b:1c:d9:83:51:67:7e: af:7e:bc:8b:02:57:d8:b4:00:ec:9a:4c:f4:93:c9: f3:3f:29:4c:8c:33:be:d0:31:51:f5:96:3c:70:89: 5d:58:ae:08:71:3b:51:3f:b5:e2:78:e5:20:f3:06: 51:11:76:03:04:3c:5e:c2:f3:68:d8:96:6a:0d:82: a1:93:de:9c:37:92:4a:fe:ed:de:04:d8:33:30:21: 6e:ba:8f:2c:37:a7:f2:b0:63:7e:4e:40:ae:ae:ee: 72:d8:8e:23:9b:05:d8:ab:c7:08:1b:23:05:48:4e: 0f:15:c4:b5:7c:59:3a:2d:4e:8c:a7:6a:f1:7e:61: d6:c4:62:24:a6:ce:b5:b5:c8:8b:f2:fe:b1:07:9b: 29:d8:3b:9e:ee:b3:29:84:47:6f:ec:63:f1:dd:39: 33:df:5f:9e:4c:69:06:cb:21:87:62:74:d1:6a:54: 77:a6:00:cc:16:92:9f:47:57:ab:42:70:4f:0b:d0: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8B:5C:61:84:8E:6B:4A:C7:C5:12:87:B7:87:6E:20:D3:5B:F2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f0d25e4-8805-3475-ab5a-c66bc1bd4d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:78:04:0d:45:f2:d2:db:84:b8:d3:24:cf:15:ba:6f:7f:b6: 31:87:7e:7f:60:cd:90:66:73:f6:52:23:f2:7b:f5:29:4b:22: db:ed:52:af:72:6b:21:73:21:11:93:2f:0b:2a:ef:64:8b:05: c0:59:94:66:2c:67:83:4c:14:fd:3b:a4:aa:71:e5:fd:60:65: 49:35:75:fc:6d:79:9d:32:37:a2:f4:b2:6b:1d:ce:8d:f6:94: 52:a2:50:37:e0:62:e3:48:f4:46:38:e2:c6:a1:d5:c7:8d:70: 8b:24:4b:d3:57:cb:49:aa:19:68:22:de:99:92:89:cf:a9:93: 83:eb:fa:9a:59:89:ab:56:66:6a:c9:64:42:5f:c6:0e:65:0c: c0:2c:12:66:39:a6:31:7b:7c:fb:d7:7c:11:98:d5:00:7e:2a: 96:31:33:05:68:10:1b:6a:f4:57:f7:04:8a:d8:2c:9a:8d:14: 3e:33:65:f1:09:eb:e5:88:ff:c8:ef:ed:ee:46:db:1b:06:b1: b9:76:dc:23:d9:af:d1:24:b2:22:d7:51:48:b8:9e:04:f5:8e: f2:7a:07:a6:a8:cf:9c:c7:28:76:8d:63:a8:78:71:d6:a8:65: fb:7b:41:35:e7:f9:64:d4:67:60:ee:bb:68:6b:7b:78:b3:93: da:f4:8d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jBjbxr1Atq54QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWM3OTFjZTYtNDI2Ni00ZWYyLWE2Y2ItODc5ZTczOTc5NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqyx2XKwcs4TJcuiTigTkEes8RqA8sbZqkkz 6LAvqrFbDsP2PztCUg/r4tgXkjH4Bp085ByS1Zk6q0UmBauiluQTZRsc2YNRZ36v fryLAlfYtADsmkz0k8nzPylMjDO+0DFR9ZY8cIldWK4IcTtRP7XieOUg8wZREXYD BDxewvNo2JZqDYKhk96cN5JK/u3eBNgzMCFuuo8sN6fysGN+TkCuru5y2I4jmwXY q8cIGyMFSE4PFcS1fFk6LU6Mp2rxfmHWxGIkps61tciL8v6xB5sp2Due7rMphEdv 7GPx3Tkz31+eTGkGyyGHYnTRalR3pgDMFpKfR1erQnBPC9AsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiLXGGEjmtKx8USh7eHbiDTW/KDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2YwZDI1ZTQtODgwNS0z NDc1LWFiNWEtYzY2YmMxYmQ0ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh4BA1F8tLbhLjTJM8Vum9/tjGHfn9gzZBmc/ZSI/J79SlLItvtUq9y ayFzIRGTLwsq72SLBcBZlGYsZ4NMFP07pKpx5f1gZUk1dfxteZ0yN6L0smsdzo32 lFKiUDfgYuNI9EY44sah1ceNcIskS9NXy0mqGWgi3pmSic+pk4Pr+ppZiatWZmrJ ZEJfxg5lDMAsEmY5pjF7fPvXfBGY1QB+KpYxMwVoEBtq9Ff3BIrYLJqNFD4zZfEJ 6+WI/8jv7e5G2xsGsbl23CPZr9EksiLXUUi4ngT1jvJ6B6aoz5zHKHaNY6h4cdao Zft7QTXn+WTUZ2Duu2hre3izk9r0jfI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:24 2025 by rpki-client