$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a14fc5ef-24e6-3363-91a1-01681ccc5874.roa File: a14fc5ef-24e6-3363-91a1-01681ccc5874.roa (raw, json) Hash identifier: jHVxrkmElTPDLW2Cz8a85QJlih7EEiDUsJhL1bnvhpc= Subject key identifier: B5:6D:CD:69:06:A1:C1:F3:7B:B8:A0:A1:EA:A2:3E:FF:03:10:9F:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F6D89781E0DC49FADE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a14fc5ef-24e6-3363-91a1-01681ccc5874.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f6:d8:97:81:e0:dc:49:fa:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=78d60abe-219b-48dd-ba0f-28ab307fe5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:17:08:9a:aa:ea:bf:c9:a3:42:76:d0:ff: ef:da:71:ec:7d:6c:76:e7:46:e8:7d:cb:d4:37:ba: 95:15:c2:ba:9c:f0:c1:85:5f:19:66:82:1e:5c:c3: a1:88:58:86:49:7b:db:ff:ea:93:a6:18:71:69:c8: 11:44:ec:55:05:ce:00:94:3c:6e:2c:85:06:d3:c8: 61:ab:d5:2c:03:93:c4:e9:15:a8:b8:2f:21:85:ba: ed:04:4a:09:f8:9c:1d:12:1e:5e:c9:b3:fa:22:8e: c6:06:d0:fe:5a:82:6a:b6:ae:87:07:7f:25:35:39: 91:14:f1:4a:23:36:ba:e4:21:ff:b3:6f:90:53:35: 37:7c:a8:89:02:ae:ba:aa:ba:99:a1:50:74:95:e9: a6:05:7c:55:0b:c6:a1:9a:74:70:27:45:94:22:81: d7:dc:83:31:db:25:35:02:54:23:44:ba:38:5c:f7: c5:24:77:7b:f2:80:c3:3c:1a:03:e5:b5:76:3a:fd: e8:20:3c:ea:c8:cf:87:b2:b7:e8:16:8d:61:62:06: 93:73:1c:4e:7e:1a:c0:05:08:c6:51:17:39:1d:72: 47:06:9b:09:d9:99:2d:2b:eb:f1:f3:6c:94:cc:97: 71:44:40:8c:19:81:d7:f5:f3:1a:94:c3:04:80:a9: 55:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:CD:69:06:A1:C1:F3:7B:B8:A0:A1:EA:A2:3E:FF:03:10:9F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a14fc5ef-24e6-3363-91a1-01681ccc5874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7c:71:4b:f6:81:2c:67:ea:be:29:53:a1:00:21:ea:93:5b: 47:08:1f:82:d2:d7:b2:e6:22:27:1b:28:95:d2:2d:98:46:27: 79:8f:03:db:5d:1f:32:aa:f0:7f:0a:b5:75:c0:e8:71:05:98: eb:60:97:dc:30:7d:27:dc:77:a1:76:0d:5f:4a:76:d4:13:0b: 52:3f:02:13:cd:eb:6f:e4:89:e3:2f:b4:c5:38:1c:8b:8d:5d: 9a:f3:d3:68:13:d6:03:87:b6:88:0c:c4:15:db:6a:8a:2b:41: 9f:98:46:ab:29:b7:ff:18:ba:a3:80:b4:26:01:3d:4b:24:11: 5b:fd:9d:c5:3e:9d:74:eb:33:2c:83:11:40:28:cb:00:6c:87: 37:1b:5e:5f:a3:f4:af:0e:7f:7f:72:5e:5c:91:8d:de:d8:60: 7c:59:75:dd:24:1f:02:12:38:d4:26:65:69:6f:7b:a8:ec:27: 00:a4:d6:f0:15:ed:17:ab:76:88:f2:40:b7:cc:fc:85:e9:bc: cb:29:44:1b:65:a6:fa:30:0d:04:7d:07:4c:07:4a:e2:65:04: 05:1b:8c:c0:8f:93:57:bc:3f:98:c4:44:23:d1:76:0d:6f:80: 0f:e7:91:9e:ae:0b:5f:ad:c0:48:a5:f7:f7:c2:08:03:1e:26: 59:86:c7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvbYl4Hg3En63oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzhkNjBhYmUtMjE5Yi00OGRkLWJhMGYtMjhhYjMwN2ZlNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X4XCJqq6r/Jo0J20P/v2nHsfWx250bofcvU N7qVFcK6nPDBhV8ZZoIeXMOhiFiGSXvb/+qTphhxacgRROxVBc4AlDxuLIUG08hh q9UsA5PE6RWouC8hhbrtBEoJ+JwdEh5eybP6Io7GBtD+WoJqtq6HB38lNTmRFPFK Iza65CH/s2+QUzU3fKiJAq66qrqZoVB0lemmBXxVC8ahmnRwJ0WUIoHX3IMx2yU1 AlQjRLo4XPfFJHd78oDDPBoD5bV2Ov3oIDzqyM+HsrfoFo1hYgaTcxxOfhrABQjG URc5HXJHBpsJ2ZktK+vx82yUzJdxRECMGYHX9fMalMMEgKlV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVtzWkGocHze7igoeqiPv8DEJ9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTE0ZmM1ZWYtMjRlNi0z MzYzLTkxYTEtMDE2ODFjY2M1ODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB8cUv2gSxn6r4pU6EAIeqTW0cIH4LS17LmIicbKJXSLZhGJ3mPA9td HzKq8H8KtXXA6HEFmOtgl9wwfSfcd6F2DV9KdtQTC1I/AhPN62/kieMvtMU4HIuN XZrz02gT1gOHtogMxBXbaoorQZ+YRqspt/8YuqOAtCYBPUskEVv9ncU+nXTrMyyD EUAoywBshzcbXl+j9K8Of39yXlyRjd7YYHxZdd0kHwISONQmZWlve6jsJwCk1vAV 7RerdojyQLfM/IXpvMspRBtlpvowDQR9B0wHSuJlBAUbjMCPk1e8P5jERCPRdg1v gA/nkZ6uC1+twEil9/fCCAMeJlmGx30= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:07 2025 by rpki-client