$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa File: 982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa (raw, json) Hash identifier: J304pWcY9jzfT0+6VANPdvYGl6RP+L6gL5x7Q0uPdxk= Subject key identifier: 3B:A7:E9:88:F4:3E:3C:5F:34:01:AC:A4:83:1C:E7:98:89:2E:87:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2955FB91020F575B0D780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:95:5f:b9:10:20:f5:75:b0:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=70a1b91a-9afa-49f9-af11-3fcfe7f25801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:de:df:15:7f:7c:f9:d6:8a:28:80:d2:3f: c5:61:82:d6:ee:bc:8f:6b:a8:74:8d:4f:53:10:1f: 88:44:9e:a8:0d:82:7c:0a:42:a4:29:21:d1:31:ea: 79:65:8b:0f:74:9b:42:f4:39:f6:0f:44:42:9f:fa: 89:fa:2d:e7:ad:3e:15:b1:33:38:99:9e:96:bd:9e: 1b:91:2c:f9:4b:fb:18:48:af:83:8c:d9:08:1c:fc: 8c:49:ce:06:24:ef:bd:59:7e:df:93:09:48:ba:1b: 2d:93:1b:f3:b1:d4:98:78:bc:45:3c:d6:9f:c3:13: 62:ad:0f:d3:8f:92:81:4d:9d:f8:df:e5:99:ab:b6: 1d:73:96:24:9f:d1:03:ee:f6:e6:8e:51:70:ce:5b: b1:be:d0:b0:ed:76:8c:62:6f:e6:a3:0a:c1:98:73: 3a:78:ea:26:68:1d:f3:17:5d:4d:4f:8b:cc:fd:f2: 2c:bd:c4:46:98:a0:51:89:31:8b:e2:a7:c7:b9:ae: e8:5f:50:2f:d0:f6:07:55:82:da:be:b7:07:ec:c6: ef:e0:57:8f:b5:5c:00:bc:a0:08:3c:a3:36:dc:60: 17:e8:21:62:40:e8:de:5c:a0:1d:cc:6f:46:51:ac: 52:85:c4:be:ee:17:81:72:82:83:9c:ee:26:19:e9: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A7:E9:88:F4:3E:3C:5F:34:01:AC:A4:83:1C:E7:98:89:2E:87:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:98:70:f2:1b:da:c4:3b:5e:66:c8:59:dc:f5:df:e9:cc:77: 53:5e:bc:14:5d:2f:4d:b3:4c:68:eb:0e:7d:46:79:8c:be:ba: b2:35:14:c9:38:f3:33:63:a3:87:b8:31:16:f5:53:af:f1:54: c1:93:e8:2d:f8:91:17:a8:de:cd:21:9b:29:38:b5:d8:f5:6d: 12:34:ac:ff:12:1f:93:e2:74:b5:57:a0:3b:62:d2:cf:d5:e7: 4b:f5:e5:52:50:cd:ce:a9:6d:d1:b5:a3:8a:d2:06:c0:f7:7b: 35:16:5a:1f:db:0d:3f:0b:1d:40:de:41:e1:88:99:35:83:31: 2c:79:93:82:1b:be:99:ea:f4:1b:56:fb:3c:bf:79:55:9b:2a: 46:19:39:67:3c:e3:82:67:69:78:dd:4b:ae:f2:6d:d9:df:79: 1b:c1:6e:db:be:4b:02:92:49:45:c5:89:92:65:b5:5f:3e:28: 5d:f6:cb:ee:9b:70:fc:82:5a:d3:c8:26:bc:2f:82:3e:fe:5d: 7a:b7:76:7d:7f:27:a4:cd:f5:7d:6b:c8:d5:be:50:d3:d3:19: 3d:d3:40:cd:a2:1b:71:0d:78:ac:f2:c9:28:9c:2a:3f:9e:c9: 97:76:ea:65:66:e0:08:96:b8:ed:a6:73:0b:10:d2:a8:b3:31: 55:4b:44:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pVfuRAg9XWw14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzBhMWI5MWEtOWFmYS00OWY5LWFmMTEtM2ZjZmU3ZjI1ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkne3xV/fPnWiiiA0j/FYYLW7ryPa6h0jU9T EB+IRJ6oDYJ8CkKkKSHRMep5ZYsPdJtC9Dn2D0RCn/qJ+i3nrT4VsTM4mZ6WvZ4b kSz5S/sYSK+DjNkIHPyMSc4GJO+9WX7fkwlIuhstkxvzsdSYeLxFPNafwxNirQ/T j5KBTZ343+WZq7Ydc5Ykn9ED7vbmjlFwzluxvtCw7XaMYm/mowrBmHM6eOomaB3z F11NT4vM/fIsvcRGmKBRiTGL4qfHua7oX1Av0PYHVYLavrcH7Mbv4FePtVwAvKAI PKM23GAX6CFiQOjeXKAdzG9GUaxShcS+7heBcoKDnO4mGems2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDun6Yj0PjxfNAGspIMc55iJLofFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTgyZjljMGYtOTVlMy0z ZDY5LThhYjUtZTJiNDI1Y2U1OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2YcPIb2sQ7XmbIWdz13+nMd1NevBRdL02zTGjrDn1GeYy+urI1FMk4 8zNjo4e4MRb1U6/xVMGT6C34kReo3s0hmyk4tdj1bRI0rP8SH5PidLVXoDti0s/V 50v15VJQzc6pbdG1o4rSBsD3ezUWWh/bDT8LHUDeQeGImTWDMSx5k4Ibvpnq9BtW +zy/eVWbKkYZOWc844JnaXjdS67ybdnfeRvBbtu+SwKSSUXFiZJltV8+KF32y+6b cPyCWtPIJrwvgj7+XXq3dn1/J6TN9X1ryNW+UNPTGT3TQM2iG3ENeKzyySicKj+e yZd26mVm4AiWuO2mcwsQ0qizMVVLRGI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:50 2025 by rpki-client