$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c921605-f625-30f8-9ade-1e9d2adfbd00.roa File: 9c921605-f625-30f8-9ade-1e9d2adfbd00.roa (raw, json) Hash identifier: ASAa0+w3pEwbw/TkcSR7+5yMKS95c8CreQTHnew0pGA= Subject key identifier: B6:3C:6A:5F:97:C0:D4:57:3B:40:31:68:DE:95:F8:19:AE:AE:DA:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F209F8A18160EAC4683340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c921605-f625-30f8-9ade-1e9d2adfbd00.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.6.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:09:f8:a1:81:60:ea:c4:68:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0754fe2c-54a1-4126-a42c-e4cb1c92b3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:98:22:af:a8:7b:53:7f:49:e0:cb:11:d9: c8:70:78:9d:03:57:41:4a:3e:b8:94:c5:1b:b5:6b: b9:ee:18:52:c9:ea:d9:8a:60:8f:44:f8:8b:18:6f: 0e:5b:08:c1:21:33:34:fb:f4:0e:89:1c:9c:41:07: 17:02:5d:9c:81:9f:97:0d:d1:6b:0f:cf:78:b6:52: cd:ac:4b:b3:5a:ad:b9:e0:47:bc:8c:86:b1:7d:93: ca:b5:e7:d6:b7:00:e7:0a:dd:92:bc:cb:fc:44:02: 03:40:6a:d0:f8:02:ad:63:07:cd:d7:af:ae:50:32: c2:2d:01:b4:6a:a8:e5:98:c7:25:86:91:30:84:ab: 02:8e:01:b4:00:c9:38:71:23:db:bf:06:c1:93:37: e7:2a:ef:c6:96:c4:af:76:92:37:2b:0e:17:79:0a: 7b:26:03:3e:e4:c4:f8:30:df:0b:3b:35:ed:b7:b7: 9f:46:11:9d:cd:62:eb:ce:c8:fc:9d:22:06:ff:b0: 2d:94:4b:a8:87:52:c1:7f:10:26:41:2f:c8:df:f6: 93:66:51:72:9f:57:5e:61:7f:13:2e:44:e3:cd:b3: 3c:50:65:7e:6f:b8:67:7e:7d:01:f5:98:4d:dc:4d: 2e:fc:a6:3d:c4:76:9e:96:c7:de:64:6b:d2:e0:2b: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:6A:5F:97:C0:D4:57:3B:40:31:68:DE:95:F8:19:AE:AE:DA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c921605-f625-30f8-9ade-1e9d2adfbd00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6c:e2:8f:6a:21:86:04:bf:5e:97:86:80:c0:b5:e3:41:6e: a9:45:86:f9:04:63:0f:86:0e:a8:b7:2d:94:b5:20:54:9c:5c: 55:78:2d:0c:4e:3f:be:f6:3e:59:98:fe:f2:fb:01:4e:a1:d7: eb:ce:e3:ee:8d:70:84:91:1c:06:29:b1:4c:62:4c:ac:f9:08: 76:be:04:bf:12:52:94:27:bb:d5:d8:28:9d:9c:cc:2d:ad:b4: 36:3a:ff:bc:58:20:37:28:44:aa:4a:68:52:7a:84:7e:96:c1: 42:80:b7:aa:b5:f7:fb:fa:c4:7f:ba:7d:31:5e:30:c6:49:8e: 44:b2:33:bd:d5:90:58:05:cc:fd:05:be:60:33:fd:65:e3:88: 18:58:93:48:5b:9e:3d:37:64:af:58:76:ed:73:ad:df:6b:91: f2:02:8f:92:d4:7b:8d:d0:37:df:e5:92:08:4b:dd:6c:81:da: aa:e3:e1:b6:38:b6:5b:ec:d6:31:e6:c7:8d:b3:a3:01:99:5b: 98:cb:34:35:bb:80:13:08:2e:09:ea:e3:9b:92:04:bf:48:dc: 6d:99:89:84:84:50:e2:1b:55:a2:b5:ee:7b:ad:41:4c:20:e6: 00:f4:d1:29:86:0c:9f:7e:71:97:62:fc:07:59:f6:c9:39:b5: 48:c4:c6:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gn4oYFg6sRoM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDc1NGZlMmMtNTRhMS00MTI2LWE0MmMtZTRjYjFjOTJiM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V6YIq+oe1N/SeDLEdnIcHidA1dBSj64lMUb tWu57hhSyerZimCPRPiLGG8OWwjBITM0+/QOiRycQQcXAl2cgZ+XDdFrD894tlLN rEuzWq254Ee8jIaxfZPKtefWtwDnCt2SvMv8RAIDQGrQ+AKtYwfN16+uUDLCLQG0 aqjlmMclhpEwhKsCjgG0AMk4cSPbvwbBkzfnKu/GlsSvdpI3Kw4XeQp7JgM+5MT4 MN8LOzXtt7efRhGdzWLrzsj8nSIG/7AtlEuoh1LBfxAmQS/I3/aTZlFyn1deYX8T LkTjzbM8UGV+b7hnfn0B9ZhN3E0u/KY9xHaelsfeZGvS4CtlrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY8al+XwNRXO0AxaN6V+Bmurtp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWM5MjE2MDUtZjYyNS0z MGY4LTlhZGUtMWU5ZDJhZGZiZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJps4o9qIYYEv16XhoDAteNBbqlFhvkEYw+GDqi3LZS1IFScXFV4LQxO P772PlmY/vL7AU6h1+vO4+6NcISRHAYpsUxiTKz5CHa+BL8SUpQnu9XYKJ2czC2t tDY6/7xYIDcoRKpKaFJ6hH6WwUKAt6q19/v6xH+6fTFeMMZJjkSyM73VkFgFzP0F vmAz/WXjiBhYk0hbnj03ZK9Ydu1zrd9rkfICj5LUe43QN9/lkghL3WyB2qrj4bY4 tlvs1jHmx42zowGZW5jLNDW7gBMILgnq45uSBL9I3G2ZiYSEUOIbVaK17nutQUwg 5gD00SmGDJ9+cZdi/AdZ9sk5tUjExiE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:52 2025 by rpki-client