$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa File: a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa (raw, json) Hash identifier: Ibd0A/V1w3iTJNN2rdgDt4z3Vmj9UxKPM7KLwezVa2s= Subject key identifier: EA:9E:84:1B:FE:D4:A7:D2:40:28:6B:16:3C:5E:6C:CC:6E:FD:B9:66 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F6ECA0FA52B77A482440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f6:ec:a0:fa:52:b7:7a:48:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=caed9271-a141-4366-b6d5-b6474f5e298a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:c9:33:de:0b:8b:27:50:22:10:ba:22:b7: a0:3e:c9:a0:0f:2e:7b:1c:04:43:9e:18:4a:5d:3d: cc:70:6c:59:bf:5f:b5:a0:d1:ac:68:dd:53:84:51: 9c:50:d3:49:9d:d0:6e:b6:61:a2:e8:d2:1f:2c:61: fc:d4:4c:d0:76:b1:4f:e8:63:ad:19:85:43:d5:97: 0f:be:99:06:64:82:6c:07:b9:95:92:0c:03:d8:89: 5c:51:67:1e:cf:e4:dd:86:40:de:58:69:1f:f3:c2: 64:9d:b5:59:9d:3c:53:4d:12:31:3d:8e:4f:49:9d: 00:98:51:30:a1:f6:b2:27:a1:06:2f:cf:60:7e:f1: 3f:e8:9e:f5:47:08:8a:df:84:5f:2c:aa:45:23:68: 99:d9:6c:43:cc:a5:3f:bd:4b:35:c0:09:6f:ee:56: 9a:fe:21:69:20:c2:76:20:52:f6:cd:ba:ab:0d:5b: 02:8a:05:79:54:5e:0c:6c:64:dd:5e:1f:3f:58:8e: 51:5b:e2:ec:54:65:79:7d:88:2c:5e:7c:b9:75:ff: 57:c2:87:65:64:bc:9b:ae:15:cd:3d:c0:39:b4:66: a8:a1:b5:86:06:72:dc:b0:e3:6a:ea:b9:9d:a1:1d: cb:02:8f:a2:7c:39:40:34:9b:67:9f:94:9c:9d:02: cf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:84:1B:FE:D4:A7:D2:40:28:6B:16:3C:5E:6C:CC:6E:FD:B9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:55:b2:9b:2b:07:fa:9d:28:36:aa:02:06:9d:51:f3:1a:9b: ca:80:ce:7c:55:c9:33:24:8e:4c:04:b9:35:8d:38:3d:55:31: d9:4a:04:dd:01:eb:56:1d:ea:59:ec:58:65:5f:45:97:a3:07: c7:0c:82:6a:5e:66:4c:80:6b:78:c8:90:27:27:c8:fd:be:0e: 85:71:e6:dc:71:69:3c:fa:2f:be:fa:03:e4:f3:92:4e:2f:97: 7e:8d:56:7c:1d:e8:b8:f7:ba:db:16:79:a3:09:05:fd:6a:cc: 26:fa:77:81:2c:36:09:16:00:83:b3:87:02:b3:a7:6c:ce:0a: 44:14:0c:11:57:8b:2d:1e:75:11:29:0d:6b:a5:63:c6:de:d7: 50:8d:92:5a:2b:87:e3:17:a9:13:b6:7a:a7:41:a9:d0:be:1d: 75:ce:21:f5:40:e5:07:2c:f8:6e:19:27:5a:5d:5d:c5:c5:d2: 4b:95:d4:49:35:9b:5f:90:35:5e:80:b7:56:57:13:43:ea:ec: 45:d3:af:9e:21:d6:45:b7:64:24:29:65:2e:9a:8d:ec:52:05: 2c:a3:1a:59:01:60:75:59:4c:cc:3c:ff:67:e8:4f:e7:f7:e3: e6:78:0c:bf:35:1a:64:b6:29:98:91:e8:75:2d:d0:25:0d:8b: b6:c4:84:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvbsoPpSt3pIJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2FlZDkyNzEtYTE0MS00MzY2LWI2ZDUtYjY0NzRmNWUyOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL3JM94LiydQIhC6IregPsmgDy57HARDnhhK XT3McGxZv1+1oNGsaN1ThFGcUNNJndButmGi6NIfLGH81EzQdrFP6GOtGYVD1ZcP vpkGZIJsB7mVkgwD2IlcUWcez+TdhkDeWGkf88JknbVZnTxTTRIxPY5PSZ0AmFEw ofayJ6EGL89gfvE/6J71RwiK34RfLKpFI2iZ2WxDzKU/vUs1wAlv7laa/iFpIMJ2 IFL2zbqrDVsCigV5VF4MbGTdXh8/WI5RW+LsVGV5fYgsXny5df9XwodlZLybrhXN PcA5tGaoobWGBnLcsONq6rmdoR3LAo+ifDlANJtnn5ScnQLP/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqehBv+1KfSQChrFjxebMxu/blmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTJmOGRjMWQtMzM3NC0z ZmMwLTgzNDAtMmVlNmIxZTc0MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZVspsrB/qdKDaqAgadUfMam8qAznxVyTMkjkwEuTWNOD1VMdlKBN0B 61Yd6lnsWGVfRZejB8cMgmpeZkyAa3jIkCcnyP2+DoVx5txxaTz6L776A+Tzkk4v l36NVnwd6Lj3utsWeaMJBf1qzCb6d4EsNgkWAIOzhwKzp2zOCkQUDBFXiy0edREp DWulY8be11CNklorh+MXqRO2eqdBqdC+HXXOIfVA5Qcs+G4ZJ1pdXcXF0kuV1Ek1 m1+QNV6At1ZXE0Pq7EXTr54h1kW3ZCQpZS6ajexSBSyjGlkBYHVZTMw8/2foT+f3 4+Z4DL81GmS2KZiR6HUt0CUNi7bEhNE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:50 2025 by rpki-client