$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6de3380-d417-3d29-a31c-ae6168d19aea.roa File: a6de3380-d417-3d29-a31c-ae6168d19aea.roa (raw, json) Hash identifier: +esM7RScSK3qICj2L7R7npV1MyM8FwbE5dCDLfmO+3o= Subject key identifier: 01:E0:56:BF:07:13:21:2B:88:75:0F:A3:BE:31:7C:BB:62:E7:89:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2921999FEBCB45A7FA4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6de3380-d417-3d29-a31c-ae6168d19aea.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:92:19:99:fe:bc:b4:5a:7f:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ad6a85ac-f4d5-4540-becf-77f7a97e147f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:1c:79:96:b0:70:a3:12:e2:ed:8e:0d:db: 71:a3:26:0d:8e:f0:fe:22:a5:74:b9:63:f0:a0:33: 18:af:5d:6d:92:2e:d8:1e:0b:99:71:c5:8a:f1:9d: 67:65:69:90:25:79:33:f1:71:f5:8d:33:27:66:b6: e6:14:27:6e:f3:75:ee:2d:c6:73:ed:9a:cd:36:81: 07:1f:64:ba:38:42:f5:64:cc:0f:e6:06:50:08:a7: 7e:96:16:d4:7f:94:49:fd:31:7e:16:15:e0:80:2f: fc:d7:76:c3:aa:05:45:93:a3:b2:ad:9e:db:a9:74: f8:8d:de:27:5e:26:9f:9f:61:7f:e8:0b:0d:20:22: c3:67:42:21:5f:85:60:a0:45:15:25:68:be:ac:fb: ff:dd:8a:8d:b0:fb:a0:d0:f7:41:dd:af:b2:ce:6c: b6:d5:fd:8b:9b:d9:7d:fc:5c:20:57:7e:2a:e4:e0: 92:f8:08:53:4a:39:8b:3b:0f:14:5d:1d:a3:69:63: 4f:5f:01:a1:7c:da:d8:5b:c5:89:04:e8:ab:ce:f0: e4:fd:73:47:77:5b:98:13:83:54:e2:9a:74:85:07: 17:f6:38:91:53:9a:db:9f:2e:35:c8:01:8c:b0:55: ca:9f:29:a3:e5:2d:d1:aa:3e:40:75:65:36:b9:bd: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E0:56:BF:07:13:21:2B:88:75:0F:A3:BE:31:7C:BB:62:E7:89:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6de3380-d417-3d29-a31c-ae6168d19aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:24:d6:7b:91:0e:f1:38:b6:ef:e8:c1:6e:82:c9:da:81:8f: ee:d4:e3:6e:b3:b4:42:ce:f8:d0:1b:9e:48:c7:05:b9:1d:92: 93:19:7d:7e:c3:4d:ef:fe:04:ec:c5:86:9c:be:e5:1e:ff:1d: 49:ed:f7:ef:d5:af:3c:f7:00:2f:a4:d2:ee:a1:b3:df:45:f3: b9:72:8d:31:73:60:c9:ca:70:6b:e7:53:64:dc:91:ff:ab:64: 94:6e:7b:83:3c:d7:28:15:f1:38:e5:aa:0e:72:83:23:65:7d: 92:da:f7:43:39:76:22:57:41:7a:65:51:ab:c2:bc:48:37:8d: 6a:55:05:bf:60:5d:3a:25:9a:14:cd:46:f2:20:7d:d1:48:34: 04:64:85:35:c0:83:5e:66:3d:16:d3:f9:29:b4:ef:3b:70:dd: de:76:fa:08:3d:7b:45:83:b3:5f:f0:ec:92:3a:d7:26:f7:cf: 7f:32:3a:df:94:8f:a2:43:1e:2a:f7:fe:e6:22:de:8a:8a:ec: a3:47:17:d4:c8:9c:20:46:9b:64:be:ac:84:bf:4c:bb:7d:c7: 89:ed:44:4e:98:87:b7:8f:b4:fb:d6:03:cd:2c:40:c3:9a:da: c1:16:07:65:7c:52:6a:42:da:31:2a:be:4a:79:be:c6:dc:69: e2:7c:37:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pIZmf68tFp/pMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWQ2YTg1YWMtZjRkNS00NTQwLWJlY2YtNzdmN2E5N2UxNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBUceZawcKMS4u2ODdtxoyYNjvD+IqV0uWPw oDMYr11tki7YHguZccWK8Z1nZWmQJXkz8XH1jTMnZrbmFCdu83XuLcZz7ZrNNoEH H2S6OEL1ZMwP5gZQCKd+lhbUf5RJ/TF+FhXggC/813bDqgVFk6OyrZ7bqXT4jd4n Xiafn2F/6AsNICLDZ0IhX4VgoEUVJWi+rPv/3YqNsPug0PdB3a+yzmy21f2Lm9l9 /FwgV34q5OCS+AhTSjmLOw8UXR2jaWNPXwGhfNrYW8WJBOirzvDk/XNHd1uYE4NU 4pp0hQcX9jiRU5rbny41yAGMsFXKnymj5S3Rqj5AdWU2ub0FawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHgVr8HEyEriHUPo74xfLti54n8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTZkZTMzODAtZDQxNy0z ZDI5LWEzMWMtYWU2MTY4ZDE5YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkk1nuRDvE4tu/owW6CydqBj+7U426ztELO+NAbnkjHBbkdkpMZfX7D Te/+BOzFhpy+5R7/HUnt9+/Vrzz3AC+k0u6hs99F87lyjTFzYMnKcGvnU2Tckf+r ZJRue4M81ygV8Tjlqg5ygyNlfZLa90M5diJXQXplUavCvEg3jWpVBb9gXTolmhTN RvIgfdFINARkhTXAg15mPRbT+Sm07ztw3d52+gg9e0WDs1/w7JI61yb3z38yOt+U j6JDHir3/uYi3oqK7KNHF9TInCBGm2S+rIS/TLt9x4ntRE6Yh7ePtPvWA80sQMOa 2sEWB2V8UmpC2jEqvkp5vsbcaeJ8NzE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:43:49 2025 by rpki-client