$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7492d45-b781-3229-9666-4c4c4734ac14.roa File: a7492d45-b781-3229-9666-4c4c4734ac14.roa (raw, json) Hash identifier: /heYmEPDPR2tf9Rms/FKYXyWJfCiiKBjgAspVvQgW1g= Subject key identifier: C6:59:42:CA:67:85:23:95:EC:48:00:2A:97:DA:38:A1:49:90:EE:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2210486E9857D512F530 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7492d45-b781-3229-9666-4c4c4734ac14.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:22:10:48:6e:98:57:d5:12:f5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=655a4aa6-6282-4081-bcdb-b5ce993c6028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:98:93:db:84:57:2f:d8:e9:d9:b8:3b:08: 5e:48:28:3c:33:02:45:f2:c7:02:a0:22:09:f1:d2: 17:36:34:88:92:2d:15:23:44:c2:de:88:99:5d:1c: 4f:be:c1:66:c8:aa:6b:fa:1a:9f:9a:b6:bc:11:44: 14:52:29:9d:43:1b:7c:e0:47:78:ec:d2:ed:e6:83: e5:49:81:6a:6a:54:2a:96:4c:5d:6f:17:03:ee:09: 8b:34:d7:64:4b:8f:ef:55:2f:ea:af:cc:40:9f:56: a0:9e:b7:9b:0a:c7:78:69:b5:2c:6b:d2:c2:58:a8: 2f:04:1e:98:7e:17:6d:c1:ba:31:0f:20:5f:64:fa: 69:fe:72:c4:77:34:f5:a6:20:f8:66:3c:20:94:76: 4c:b5:98:eb:84:62:d2:30:21:25:77:73:95:d4:6b: 3e:39:05:47:be:84:a0:5e:5c:36:13:87:76:1a:6b: 7b:b9:cc:82:50:34:f3:6f:46:1e:1a:7c:d9:5e:d8: 3c:3c:8b:88:2e:d1:fa:12:62:85:dc:7f:51:4d:e1: 2c:85:e3:a8:e0:44:bb:42:ae:97:f3:c1:07:d7:9d: 54:93:0b:de:eb:d9:59:d4:a2:17:c8:59:99:f8:f8: 1f:24:c2:28:50:b9:b7:09:b2:49:08:be:f3:52:46: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:42:CA:67:85:23:95:EC:48:00:2A:97:DA:38:A1:49:90:EE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7492d45-b781-3229-9666-4c4c4734ac14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ce:d1:d3:5f:b5:cd:06:72:73:03:10:03:84:7a:6b:26:b1: 3c:ed:c6:3f:45:09:c6:56:ff:4e:41:09:ca:b0:28:81:90:ae: f1:25:6f:b7:11:13:84:d0:db:d9:a2:3c:31:e7:3e:11:b7:53: 3f:ac:19:7a:ee:42:da:69:00:b3:b8:ca:3f:89:e6:30:61:1a: e6:05:e7:e9:3d:ee:13:8d:73:40:70:aa:a9:79:c8:82:9a:d3: 8a:b4:8e:18:6f:91:a7:97:88:e3:5e:14:9c:ab:70:ca:de:20: b9:44:bb:5f:8a:89:d0:37:55:91:7e:1d:a7:80:5e:35:d7:e9: 94:ea:c5:1e:0b:03:a0:99:94:20:16:32:0e:cd:02:df:a8:3e: 97:f4:ae:9b:c9:d6:37:a5:0e:e8:6a:9b:23:87:45:4e:59:fd: 9b:21:f9:57:12:ab:3a:1a:a3:a9:86:06:55:73:76:c3:31:80: 11:3e:9b:19:87:7e:d1:9f:ff:03:3b:56:13:21:d4:3f:c1:2d: 6d:dd:98:38:83:3c:3b:f9:cb:8d:89:9b:bb:46:62:a9:e9:c5: a6:53:5f:83:17:ba:33:53:0f:05:a5:92:9b:c3:32:16:b6:51: 73:c5:08:d3:88:9a:d0:e0:7d:01:d6:6a:73:ce:1b:48:79:a7: 81:73:70:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCIQSG6YV9US9TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NjU1YTRhYTYtNjI4Mi00MDgxLWJjZGItYjVjZTk5M2M2MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY2Yk9uEVy/Y6dm4OwheSCg8MwJF8scCoCIJ 8dIXNjSIki0VI0TC3oiZXRxPvsFmyKpr+hqfmra8EUQUUimdQxt84Ed47NLt5oPl SYFqalQqlkxdbxcD7gmLNNdkS4/vVS/qr8xAn1agnrebCsd4abUsa9LCWKgvBB6Y fhdtwboxDyBfZPpp/nLEdzT1piD4ZjwglHZMtZjrhGLSMCEld3OV1Gs+OQVHvoSg Xlw2E4d2Gmt7ucyCUDTzb0YeGnzZXtg8PIuILtH6EmKF3H9RTeEsheOo4ES7Qq6X 88EH151Ukwve69lZ1KIXyFmZ+PgfJMIoULm3CbJJCL7zUkZg6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZZQspnhSOV7EgAKpfaOKFJkO4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTc0OTJkNDUtYjc4MS0z MjI5LTk2NjYtNGM0YzQ3MzRhYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/O0dNftc0GcnMDEAOEemsmsTztxj9FCcZW/05BCcqwKIGQrvElb7cR E4TQ29miPDHnPhG3Uz+sGXruQtppALO4yj+J5jBhGuYF5+k97hONc0Bwqql5yIKa 04q0jhhvkaeXiONeFJyrcMreILlEu1+KidA3VZF+HaeAXjXX6ZTqxR4LA6CZlCAW Mg7NAt+oPpf0rpvJ1jelDuhqmyOHRU5Z/Zsh+VcSqzoao6mGBlVzdsMxgBE+mxmH ftGf/wM7VhMh1D/BLW3dmDiDPDv5y42Jm7tGYqnpxaZTX4MXujNTDwWlkpvDMha2 UXPFCNOImtDgfQHWanPOG0h5p4FzcAA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:08 2025 by rpki-client