$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fc7b87b-775c-37e7-8b83-92716cdbe722.roa File: 7fc7b87b-775c-37e7-8b83-92716cdbe722.roa (raw, json) Hash identifier: 21LI2LYVf7w/j7UIO69m1UcEfc84F2HBPRZOfQ2RPMY= Subject key identifier: 78:DA:67:4D:48:24:7E:57:6F:30:2D:70:56:80:44:83:70:9C:3E:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C42C045AC8FEA97688C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fc7b87b-775c-37e7-8b83-92716cdbe722.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.109.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:42:c0:45:ac:8f:ea:97:68:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3987f40d-970d-422d-8be1-81af913910cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7d:97:07:92:df:71:74:60:02:d0:f6:eb:ba: 0e:5e:f1:fa:af:22:93:61:27:c9:c9:19:ac:e9:d2: ff:53:56:04:85:2b:60:74:78:ca:49:8a:2c:a7:49: dc:62:27:aa:c3:51:0e:9e:4c:06:cf:8f:ec:09:1a: 19:de:68:b7:1d:68:5f:f6:8e:fc:44:26:3b:88:36: 95:4c:3a:1c:be:4d:8c:88:8c:bb:16:3c:69:df:b1: 58:7c:07:b5:b3:c2:99:64:18:d4:cf:90:f6:85:0e: 65:14:69:6a:64:cc:45:21:ba:db:e3:58:9d:75:1a: ca:e1:69:4a:36:fe:91:50:ce:21:ed:46:ae:9c:61: eb:7c:87:07:ef:af:aa:62:58:6a:7a:95:d5:9b:d3: 2d:d3:1c:13:18:00:4a:09:e4:18:44:0e:e9:9d:a8: c7:16:fd:8e:9a:d7:71:88:1d:e2:44:73:9f:7f:a1: 37:91:b5:3e:3a:c4:8d:8e:1e:77:8c:15:88:f9:88: 85:e9:45:d0:55:bd:b8:28:b5:ad:89:e5:92:76:db: ab:42:78:4e:40:83:c0:17:6a:c7:bd:d8:b8:d0:1a: 85:e1:d6:24:4b:47:02:8f:60:8a:6a:bb:9a:7a:f2: a9:68:e4:c7:11:bc:eb:21:13:ab:6a:58:06:b6:6a: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DA:67:4D:48:24:7E:57:6F:30:2D:70:56:80:44:83:70:9C:3E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7fc7b87b-775c-37e7-8b83-92716cdbe722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5b:95:9b:70:6b:e7:35:df:2a:bb:0f:2d:2c:2a:3c:a2:44: d6:2d:f2:e9:b2:ee:e4:ae:db:15:69:12:23:59:36:23:36:06: 49:8f:b1:3a:63:b3:a2:88:e7:d9:2c:b9:58:b3:7a:be:e1:12: 2c:7a:26:5f:ae:f8:f2:66:d8:7d:07:84:c5:d7:db:0a:0b:70: 85:46:84:36:62:10:83:bb:21:4b:9d:67:a8:e8:d4:b3:0b:92: d1:5e:9f:83:f5:86:83:e2:53:65:eb:e3:9f:f8:d8:12:29:86: 7a:05:c0:b7:b2:39:86:9d:d9:fc:fb:c4:2d:13:51:75:bf:22: 1f:20:f2:65:f4:5f:8a:7c:3b:7b:e5:e6:63:6c:1e:76:bb:2a: fa:50:ae:04:fc:dc:64:b3:01:19:88:78:f7:36:39:ad:f9:e5: 87:39:76:9c:40:d3:a9:4e:c6:d0:64:7c:23:b1:91:b9:47:b3: 67:bb:35:df:3b:7a:a5:9c:aa:6b:76:bb:8f:2f:16:55:be:da: 49:ad:26:6a:d1:87:db:35:07:67:82:71:1a:d0:55:af:a7:fd: 2b:6b:60:5f:ce:98:e9:a4:26:df:1b:2e:13:e3:41:09:88:cb: c6:e1:8e:a5:45:08:d5:c8:ca:9f:b8:0c:0c:f0:dd:2c:19:fe: 0d:71:9a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnELARayP6pdojAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Mzk4N2Y0MGQtOTcwZC00MjJkLThiZTEtODFhZjkxMzkxMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H2XB5LfcXRgAtD267oOXvH6ryKTYSfJyRms 6dL/U1YEhStgdHjKSYosp0ncYieqw1EOnkwGz4/sCRoZ3mi3HWhf9o78RCY7iDaV TDocvk2MiIy7Fjxp37FYfAe1s8KZZBjUz5D2hQ5lFGlqZMxFIbrb41iddRrK4WlK Nv6RUM4h7UaunGHrfIcH76+qYlhqepXVm9Mt0xwTGABKCeQYRA7pnajHFv2Omtdx iB3iRHOff6E3kbU+OsSNjh53jBWI+YiF6UXQVb24KLWtieWSdturQnhOQIPAF2rH vdi40BqF4dYkS0cCj2CKaruaevKpaOTHEbzrIROralgGtmpzywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjaZ01IJH5XbzAtcFaARINwnD4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2ZjN2I4N2ItNzc1Yy0z N2U3LThiODMtOTI3MTZjZGJlNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5blZtwa+c13yq7Dy0sKjyiRNYt8umy7uSu2xVpEiNZNiM2BkmPsTpj s6KI59ksuVizer7hEix6Jl+u+PJm2H0HhMXX2woLcIVGhDZiEIO7IUudZ6jo1LML ktFen4P1hoPiU2Xr45/42BIphnoFwLeyOYad2fz7xC0TUXW/Ih8g8mX0X4p8O3vl 5mNsHna7KvpQrgT83GSzARmIePc2Oa355Yc5dpxA06lOxtBkfCOxkblHs2e7Nd87 eqWcqmt2u48vFlW+2kmtJmrRh9s1B2eCcRrQVa+n/StrYF/OmOmkJt8bLhPjQQmI y8bhjqVFCNXIyp+4DAzw3SwZ/g1xmtg= -----END CERTIFICATE-----Generated at Thu Oct 16 04:47:25 2025 by rpki-client