$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa File: 901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa (raw, json) Hash identifier: gdkDOl1/1+8ugyih5f4EnVypkSsxcf34qZfDYkjGD5w= Subject key identifier: 52:59:DC:D0:9D:04:7C:4F:2C:BD:0E:3A:FD:06:B0:5C:76:C2:E3:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F8C7849ADABD8C056A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f8:c7:84:9a:da:bd:8c:05:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=f48fd087-1f83-4501-926d-3b0446b41130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:53:05:4f:91:91:a7:7d:8c:84:19:40:51: c4:d4:fb:ce:c8:5e:cb:a9:ab:42:c0:eb:14:c1:d6: f5:78:7a:df:64:92:66:3d:d3:e5:a7:f1:9a:02:6b: 05:b1:bd:f0:0d:fe:5d:59:84:0a:79:bc:b0:bd:ac: eb:d9:84:f9:34:db:ad:64:5a:04:c0:a4:b1:57:82: 73:a8:28:2d:f3:96:c2:f3:84:11:b3:04:33:c8:7f: ec:b9:d6:b8:85:f2:f6:3a:1b:2a:c2:57:bc:5d:6c: 3f:e6:4f:d1:86:9d:32:ca:90:b2:5d:ec:d1:ea:cf: 67:6b:11:51:e4:92:91:4e:70:e9:ef:c5:21:51:3f: ea:12:d6:a6:00:5e:24:48:18:83:a0:2b:74:33:02: 96:e3:3e:96:46:58:28:e5:78:b7:0d:75:ef:8f:bd: b9:f0:1c:37:a0:66:2d:13:e8:66:7d:01:85:af:f0: 65:36:6c:c3:a7:9c:f4:4e:f5:2e:0c:a7:be:bb:01: 35:53:28:7a:e4:b3:33:05:02:93:97:a1:ce:37:a6: 68:ca:26:ce:e0:f3:48:0f:69:03:81:5a:5d:4c:f9: be:91:9a:71:8a:0f:95:40:60:8c:ee:bf:78:7c:3a: e9:11:c6:d4:22:fb:ad:78:85:3e:77:41:04:0f:69: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:59:DC:D0:9D:04:7C:4F:2C:BD:0E:3A:FD:06:B0:5C:76:C2:E3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:11:1c:f9:b0:67:e2:f6:8c:76:46:ac:9e:a1:1a:de:f4:5a: 43:1a:bf:ce:72:0c:c8:e8:c1:b9:50:f6:ca:5e:f9:c7:b5:5e: 3c:cd:c7:94:78:37:e9:27:35:80:86:d6:b1:da:f6:c9:48:96: 84:f1:eb:9b:0e:cf:42:c5:73:24:2c:f5:ff:9f:f3:7e:82:da: 50:ec:30:26:13:c5:c5:f5:75:19:9a:87:6e:f2:9e:bd:34:86: e7:c0:b1:14:1f:e3:e6:74:aa:e5:a1:40:6d:90:7a:1c:4f:00: 0e:39:8f:ad:03:9f:81:9a:33:ca:33:36:a6:71:75:0e:22:a5: 43:eb:f2:4c:ad:b4:37:72:88:b2:dc:c1:24:c3:39:7d:a5:90: ed:4a:bd:f9:26:a6:9f:2d:f8:5a:37:5a:01:fd:a9:f6:c4:27: e4:76:52:0c:e5:43:60:45:85:bd:4d:cf:6f:a3:bf:fb:51:61: 1e:1b:4c:f0:67:b2:4d:36:25:a8:a2:b2:7e:42:eb:f8:68:7b: 3d:cf:b8:57:d9:64:a2:54:a7:d9:6b:4c:e7:e6:bf:7f:55:3a: ad:84:6c:ee:44:12:4a:9a:2b:5d:74:cd:6c:55:b3:ef:09:47: 49:a8:4f:a4:e4:85:8e:3d:b5:be:19:d4:98:9b:79:82:34:84: d6:2b:af:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvjHhJravYwFagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjQ4ZmQwODctMWY4My00NTAxLTkyNmQtM2IwNDQ2YjQxMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDVTBU+Rkad9jIQZQFHE1PvOyF7LqatCwOsU wdb1eHrfZJJmPdPlp/GaAmsFsb3wDf5dWYQKebywvazr2YT5NNutZFoEwKSxV4Jz qCgt85bC84QRswQzyH/suda4hfL2Ohsqwle8XWw/5k/Rhp0yypCyXezR6s9naxFR 5JKRTnDp78UhUT/qEtamAF4kSBiDoCt0MwKW4z6WRlgo5Xi3DXXvj7258Bw3oGYt E+hmfQGFr/BlNmzDp5z0TvUuDKe+uwE1Uyh65LMzBQKTl6HON6ZoyibO4PNID2kD gVpdTPm+kZpxig+VQGCM7r94fDrpEcbUIvuteIU+d0EED2mHJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJZ3NCdBHxPLL0OOv0GsFx2wuP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTAxYjAwY2YtOWQzNi0z ZWM3LTllZDUtMzY4ZWU1NGU5ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwRHPmwZ+L2jHZGrJ6hGt70WkMav85yDMjowblQ9spe+ce1XjzNx5R4 N+knNYCG1rHa9slIloTx65sOz0LFcyQs9f+f836C2lDsMCYTxcX1dRmah27ynr00 hufAsRQf4+Z0quWhQG2QehxPAA45j60Dn4GaM8ozNqZxdQ4ipUPr8kyttDdyiLLc wSTDOX2lkO1Kvfkmpp8t+Fo3WgH9qfbEJ+R2UgzlQ2BFhb1Nz2+jv/tRYR4bTPBn sk02Jaiisn5C6/hoez3PuFfZZKJUp9lrTOfmv39VOq2EbO5EEkqaK110zWxVs+8J R0moT6TkhY49tb4Z1JibeYI0hNYrrxQ= -----END CERTIFICATE-----Generated at Thu Oct 16 04:12:00 2025 by rpki-client