$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a99a9965-50c0-3084-b6df-7013b2e65f1e.roa File: a99a9965-50c0-3084-b6df-7013b2e65f1e.roa (raw, json) Hash identifier: 4Qshf/naqrFsonvB/VTpJiNsHyMgmi9N0ujqzSdZiVc= Subject key identifier: 26:08:27:4D:62:5E:5A:60:F7:0E:79:1F:E1:BA:5E:D6:1C:54:1A:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2842640C2099A54FD4540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a99a9965-50c0-3084-b6df-7013b2e65f1e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:84:26:40:c2:09:9a:54:fd:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=12f2e71a-46da-4f55-a312-70d4a79d07fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:b7:a0:89:ee:44:37:a8:d5:ab:52:c6:24: a4:90:fa:8a:fc:7f:26:46:1c:12:3c:6e:50:0f:b3: 1d:4d:ec:3a:c9:7f:82:6d:a9:93:92:b0:8a:b9:a7: 1e:7a:89:5c:e5:d7:7d:4d:fb:36:12:e3:df:06:55: 8f:64:30:4e:e9:a4:78:73:1d:6f:04:ad:31:0d:e2: bf:1b:bb:5e:b6:f8:88:de:24:25:69:b4:94:79:0c: cb:78:dd:cd:14:40:b0:32:ba:de:e6:54:c1:45:8e: a3:03:98:f5:e1:36:96:55:d1:7b:27:34:fc:83:f1: 57:00:3d:26:b8:90:a2:59:5f:29:bc:72:4b:81:e8: fa:9c:5c:47:6f:13:cc:37:ec:e6:e9:72:f1:b5:92: 90:10:65:bf:e9:23:3b:9e:35:93:b2:9a:48:b1:f4: 47:09:da:06:a2:32:37:e2:8a:29:61:72:45:5f:61: 68:a1:1a:3e:75:1c:af:fb:a2:d6:35:15:34:f5:26: 7f:6f:50:37:6a:39:4c:bd:31:47:df:23:04:c6:7b: 09:4a:bd:81:b7:d2:6d:9d:da:b4:d2:82:f8:ed:67: 1c:5e:f5:45:b0:f6:f1:03:26:2d:f6:ae:67:f0:17: 65:e4:12:f6:45:aa:25:56:b0:50:69:0e:7c:0f:ab: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:08:27:4D:62:5E:5A:60:F7:0E:79:1F:E1:BA:5E:D6:1C:54:1A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a99a9965-50c0-3084-b6df-7013b2e65f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a0:ff:63:dc:43:87:0d:fb:0d:d4:11:0b:b0:bf:f2:d7:e6: 5d:0f:c3:b2:35:1b:e3:d2:7e:17:b2:fd:5f:6a:24:62:45:cd: f7:a9:18:34:c9:d4:f8:03:87:5f:86:1c:80:65:16:11:70:dd: 31:ca:30:a2:90:98:d9:24:ad:28:e5:bb:6c:1f:22:1d:11:df: a7:51:39:db:71:ce:ff:07:a5:d0:a1:39:fe:5b:3c:29:1e:20: bc:f2:f0:39:44:2c:e9:da:de:15:f8:2c:8f:3f:97:42:21:89: 43:1e:7c:25:19:f5:e9:10:63:39:d0:76:ff:2d:7f:a3:86:35: 48:e1:6a:98:8d:89:32:ef:7e:2f:b4:1d:46:33:a0:ba:80:a9: b3:ee:76:74:ab:e6:27:3a:82:b6:6e:31:18:ec:35:54:94:bd: ee:99:11:ef:b9:3d:a5:9d:31:dd:ca:cc:be:ea:1e:7e:c2:a4: 55:a8:5e:ed:a8:2d:15:d5:a6:76:1c:ec:d9:be:5b:88:7d:c9: ae:0b:c3:49:f6:28:f5:4b:24:41:f7:eb:64:3f:54:5b:42:16: d1:d2:29:c4:88:5f:52:bc:44:88:3c:ad:21:05:c8:72:29:11: 59:ad:3e:3b:6b:7b:0a:3a:35:68:99:14:ca:89:27:9f:54:b8: 81:8a:82:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oQmQMIJmlT9RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTJmMmU3MWEtNDZkYS00ZjU1LWEzMTItNzBkNGE3OWQwN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd+3oInuRDeo1atSxiSkkPqK/H8mRhwSPG5Q D7MdTew6yX+CbamTkrCKuaceeolc5dd9Tfs2EuPfBlWPZDBO6aR4cx1vBK0xDeK/ G7tetviI3iQlabSUeQzLeN3NFECwMrre5lTBRY6jA5j14TaWVdF7JzT8g/FXAD0m uJCiWV8pvHJLgej6nFxHbxPMN+zm6XLxtZKQEGW/6SM7njWTsppIsfRHCdoGojI3 4oopYXJFX2FooRo+dRyv+6LWNRU09SZ/b1A3ajlMvTFH3yMExnsJSr2Bt9Jtndq0 0oL47WccXvVFsPbxAyYt9q5n8Bdl5BL2RaolVrBQaQ58D6tC4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYIJ01iXlpg9w55H+G6XtYcVBoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTk5YTk5NjUtNTBjMC0z MDg0LWI2ZGYtNzAxM2IyZTY1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHag/2PcQ4cN+w3UEQuwv/LX5l0Pw7I1G+PSfhey/V9qJGJFzfepGDTJ 1PgDh1+GHIBlFhFw3THKMKKQmNkkrSjlu2wfIh0R36dROdtxzv8HpdChOf5bPCke ILzy8DlELOna3hX4LI8/l0IhiUMefCUZ9ekQYznQdv8tf6OGNUjhapiNiTLvfi+0 HUYzoLqAqbPudnSr5ic6grZuMRjsNVSUve6ZEe+5PaWdMd3KzL7qHn7CpFWoXu2o LRXVpnYc7Nm+W4h9ya4Lw0n2KPVLJEH362Q/VFtCFtHSKcSIX1K8RIg8rSEFyHIp EVmtPjtrewo6NWiZFMqJJ59UuIGKgpo= -----END CERTIFICATE-----Generated at Thu Oct 16 02:04:09 2025 by rpki-client