$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/992da8ee-6814-32af-8ff3-ad1b972a51be.roa File: 992da8ee-6814-32af-8ff3-ad1b972a51be.roa (raw, json) Hash identifier: RACpK4mGKm3J82rVLin/hO7B/JkF+TfCSGL8CDI/KRw= Subject key identifier: 9C:EF:03:C8:2B:F5:60:0C:36:02:AD:28:BA:22:61:41:35:7C:2D:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27082443BBFDA9EEE1A40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/992da8ee-6814-32af-8ff3-ad1b972a51be.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:70:82:44:3b:bf:da:9e:ee:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bc608e2a-7170-4f8c-a276-e41309646d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:a9:25:bd:88:2c:81:13:b9:20:68:0a:88: 44:45:14:13:f2:f1:78:79:9a:09:10:4f:37:60:57: 89:e0:68:ec:64:c0:85:d5:1b:d4:c0:83:13:88:f3: f3:d2:2c:87:b5:3a:dd:2a:ef:4f:29:49:d8:1f:de: 5f:c3:b5:89:97:37:a2:92:58:c1:7a:96:74:cd:cf: 36:96:33:36:18:4a:a7:55:4b:c5:02:ba:4a:29:8d: 65:a9:25:ae:e6:1c:d6:22:04:38:77:fa:16:90:c9: 62:25:8f:3f:84:cb:63:03:ce:0e:a1:49:d8:8b:7d: 9e:58:5d:3a:0b:1e:20:d4:64:bf:d9:50:2d:95:db: b7:78:cf:85:ce:c9:ec:53:cf:54:4f:bb:eb:52:06: d3:8e:2d:28:26:c1:9f:79:fe:16:21:a8:6d:e9:5b: de:8d:b4:75:b8:2b:8f:d4:9b:c4:2c:ce:68:e3:d9: 7d:d9:89:c2:e9:2f:e9:6c:75:b2:83:e0:d0:e8:2f: 4a:0d:38:4a:f4:bb:5f:a6:c6:22:88:62:f2:aa:d2: c4:18:73:e8:4c:38:7d:5d:b8:40:e8:a6:94:ae:43: 2b:e7:ec:4f:a3:4f:f0:fb:bd:66:f2:4e:b0:94:9b: 59:aa:6e:01:ab:6a:db:6d:8b:85:15:9e:04:f7:bd: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EF:03:C8:2B:F5:60:0C:36:02:AD:28:BA:22:61:41:35:7C:2D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/992da8ee-6814-32af-8ff3-ad1b972a51be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ee:1e:8b:da:a5:17:0e:4f:66:78:eb:5c:6e:30:bb:18:dd: 05:97:e9:7a:32:92:c5:25:e3:c3:d1:20:4a:dd:59:60:b5:11: cd:96:44:5a:c6:b3:94:7c:fa:b1:5f:31:6b:b4:9f:9a:cc:78: 2e:f9:24:32:d6:68:5f:bd:31:31:03:c8:04:6c:76:8a:42:b8: ce:d6:27:ad:26:08:cf:19:cf:f4:c0:d8:34:af:bc:2e:a7:f3: a5:4a:92:64:b5:29:1f:8f:33:20:cc:96:98:ab:5a:c5:20:96: 34:3b:5f:3e:39:a1:38:e1:f9:d6:e0:6a:13:c2:5c:03:bb:e1: 86:f9:5f:0f:5d:6b:02:90:20:28:fd:dc:ab:54:21:c3:9d:95: 98:a6:1a:25:d8:94:62:d7:9c:ef:ee:25:37:3b:a7:bd:b8:f3: a0:a0:36:93:2b:96:8f:ad:8f:ac:11:47:2f:fd:b1:ec:15:ee: 1b:d8:e8:30:c2:3f:55:e5:45:f5:96:33:3a:e9:5f:00:b6:48: d5:e0:b7:55:d9:20:af:44:5b:b5:e9:6c:d7:25:6f:04:d0:95: 62:90:3c:88:8e:57:f4:86:d7:f5:4b:92:e4:c7:cc:55:37:d9: 0b:ad:0b:34:f5:31:5d:ca:58:ee:f6:46:af:aa:b4:b0:86:7c: ee:73:52:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nCCRDu/2p7uGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmM2MDhlMmEtNzE3MC00ZjhjLWEyNzYtZTQxMzA5NjQ2ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I6pJb2ILIETuSBoCohERRQT8vF4eZoJEE83 YFeJ4GjsZMCF1RvUwIMTiPPz0iyHtTrdKu9PKUnYH95fw7WJlzeikljBepZ0zc82 ljM2GEqnVUvFArpKKY1lqSWu5hzWIgQ4d/oWkMliJY8/hMtjA84OoUnYi32eWF06 Cx4g1GS/2VAtldu3eM+FzsnsU89UT7vrUgbTji0oJsGfef4WIaht6VvejbR1uCuP 1JvELM5o49l92YnC6S/pbHWyg+DQ6C9KDThK9LtfpsYiiGLyqtLEGHPoTDh9XbhA 6KaUrkMr5+xPo0/w+71m8k6wlJtZqm4Bq2rbbYuFFZ4E973pBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzvA8gr9WAMNgKtKLoiYUE1fC0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTkyZGE4ZWUtNjgxNC0z MmFmLThmZjMtYWQxYjk3MmE1MWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALuHovapRcOT2Z461xuMLsY3QWX6XoyksUl48PRIErdWWC1Ec2WRFrG s5R8+rFfMWu0n5rMeC75JDLWaF+9MTEDyARsdopCuM7WJ60mCM8Zz/TA2DSvvC6n 86VKkmS1KR+PMyDMlpirWsUgljQ7Xz45oTjh+dbgahPCXAO74Yb5Xw9dawKQICj9 3KtUIcOdlZimGiXYlGLXnO/uJTc7p72486CgNpMrlo+tj6wRRy/9sewV7hvY6DDC P1XlRfWWMzrpXwC2SNXgt1XZIK9EW7XpbNclbwTQlWKQPIiOV/SG1/VLkuTHzFU3 2QutCzT1MV3KWO72Rq+qtLCGfO5zUmw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:04 2025 by rpki-client