$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4b05e48-65b3-3b10-afb5-844e6ed960c3.roa File: a4b05e48-65b3-3b10-afb5-844e6ed960c3.roa (raw, json) Hash identifier: SOTuA8N2V+KbcLBPvQz571CiopXvigHUvXoPEXV7FDc= Subject key identifier: A7:A7:B4:0E:DD:18:1C:D1:1B:4A:87:46:E9:77:6C:19:9B:DF:62:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373BC92029755061C1ECF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4b05e48-65b3-3b10-afb5-844e6ed960c3.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3b:c9:20:29:75:50:61:c1:ec:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=ed459450-56a0-4e4e-8643-0788bbd93552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:84:d1:9e:c2:20:de:9f:9e:16:40:03:07: 93:cb:ae:89:49:ca:a1:51:35:93:75:67:6a:78:15: 02:cd:1d:7d:e3:20:a2:38:55:c9:3f:02:ba:4b:59: be:c1:ee:f1:4e:29:40:3a:7f:77:b3:29:4e:36:cc: 2d:db:4a:f3:29:48:5e:49:14:f4:db:73:62:7a:09: 29:a8:b0:d6:9e:a5:b7:21:91:cb:0f:fd:7e:03:0b: f3:9a:ed:86:37:5a:3f:d5:d9:ab:d9:a7:fe:f5:63: c9:3c:90:6b:05:4c:7e:63:17:2c:bb:4b:50:d8:39: 9c:91:fb:fe:52:a2:4d:0c:e3:c8:fc:82:76:fe:48: 8d:65:97:1c:70:a3:2b:eb:e4:df:bd:83:29:31:f4: c7:8a:c5:b6:a1:0b:6a:6f:6d:d1:73:60:40:23:27: 75:17:07:8b:c9:90:e4:6f:58:8f:ca:13:1d:43:0f: d0:7a:6b:1e:e7:1f:fa:8e:1c:de:6f:9f:30:21:16: 30:e5:66:80:5c:5b:8d:29:9f:a2:11:a3:ed:0c:ab: 52:11:6f:e3:97:f4:91:bc:d9:0e:ae:18:4c:be:f8: 3a:2d:82:ac:a0:94:b0:ed:0b:b3:1c:ea:48:94:45: 73:0c:a3:3e:51:f9:bf:4e:8d:53:87:9f:6b:fc:1d: 65:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:B4:0E:DD:18:1C:D1:1B:4A:87:46:E9:77:6C:19:9B:DF:62:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4b05e48-65b3-3b10-afb5-844e6ed960c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b4:1e:51:0a:e9:bf:9f:4b:6a:48:87:34:d1:9a:c9:63:4b: 02:9a:f6:c6:28:06:4d:ba:34:df:77:66:f8:02:64:78:33:4a: f8:c3:33:d0:75:02:30:bd:9e:42:12:55:03:cd:1a:00:92:3c: 9d:1a:bb:f9:a7:91:87:ab:89:11:f7:1d:05:e6:a7:f3:91:10: a4:29:e1:42:aa:d3:04:2c:74:a0:38:4b:06:36:03:63:bf:cd: 64:68:b2:1d:16:70:77:fc:73:f6:37:d2:cf:5c:7e:62:a9:2d: 6e:8e:bf:59:9b:c6:9b:d3:0a:03:df:39:46:96:15:0a:12:72: b2:81:c3:15:9a:37:ef:9a:bf:d9:d2:5b:bd:e0:e7:21:1c:90: 3a:4f:fe:43:ad:ce:2f:80:f0:83:46:15:9f:89:8d:55:af:dd: 29:ce:1a:f2:c4:2a:7a:85:86:91:f6:51:81:e4:19:dd:2d:cf: 68:79:60:9a:f9:c5:1a:9f:1b:b9:0b:ea:26:50:89:4f:ea:b8: 38:e8:15:3f:02:16:e0:58:fd:59:4b:27:9c:92:53:cd:62:96: 6f:84:ea:07:c6:d1:99:eb:b2:1f:c3:bd:24:d3:be:ec:41:8c: 41:47:77:27:ba:ea:91:55:ac:d0:18:a2:0b:b7:05:0b:2b:2c: 45:d4:05:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzvJICl1UGHB7PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ0NTk0NTAtNTZhMC00ZTRlLTg2NDMtMDc4OGJiZDkzNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGeE0Z7CIN6fnhZAAweTy66JScqhUTWTdWdq eBUCzR194yCiOFXJPwK6S1m+we7xTilAOn93sylONswt20rzKUheSRT023Niegkp qLDWnqW3IZHLD/1+Awvzmu2GN1o/1dmr2af+9WPJPJBrBUx+Yxcsu0tQ2Dmckfv+ UqJNDOPI/IJ2/kiNZZcccKMr6+TfvYMpMfTHisW2oQtqb23Rc2BAIyd1FweLyZDk b1iPyhMdQw/Qemse5x/6jhzeb58wIRYw5WaAXFuNKZ+iEaPtDKtSEW/jl/SRvNkO rhhMvvg6LYKsoJSw7QuzHOpIlEVzDKM+Ufm/To1Th59r/B1lYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKentA7dGBzRG0qHRul3bBmb32IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTRiMDVlNDgtNjViMy0z YjEwLWFmYjUtODQ0ZTZlZDk2MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC0HlEK6b+fS2pIhzTRmsljSwKa9sYoBk26NN93ZvgCZHgzSvjDM9B1 AjC9nkISVQPNGgCSPJ0au/mnkYeriRH3HQXmp/OREKQp4UKq0wQsdKA4SwY2A2O/ zWRosh0WcHf8c/Y30s9cfmKpLW6Ov1mbxpvTCgPfOUaWFQoScrKBwxWaN++av9nS W73g5yEckDpP/kOtzi+A8INGFZ+JjVWv3SnOGvLEKnqFhpH2UYHkGd0tz2h5YJr5 xRqfG7kL6iZQiU/quDjoFT8CFuBY/VlLJ5ySU81ilm+E6gfG0Znrsh/DvSTTvuxB jEFHdye66pFVrNAYogu3BQsrLEXUBVg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:26:00 2025 by rpki-client