$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab4fbb41-cc6e-3455-8951-93fe0e94c950.roa File: ab4fbb41-cc6e-3455-8951-93fe0e94c950.roa (raw, json) Hash identifier: EHsQ2dLsgjghWQKtapb9mKrK7yAcMqMsYnqOMS/l2iU= Subject key identifier: 2C:25:45:4A:94:6A:05:E6:FF:7C:60:F9:BB:53:A5:D9:D5:CC:DF:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3740A3A98C5BB56F00E580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab4fbb41-cc6e-3455-8951-93fe0e94c950.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:40:a3:a9:8c:5b:b5:6f:00:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=8efa5735-de90-431b-8f03-42802c945fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:0b:2e:6c:91:1e:8b:ae:c1:60:35:3b:d6: a5:da:76:bc:4e:8e:2b:e7:50:41:9f:46:96:9e:d1: 06:75:87:71:ae:e2:f6:5c:97:03:7d:50:64:fe:af: ab:c7:f7:85:98:d8:ab:3e:ae:03:27:f0:2e:14:db: aa:b9:e1:3c:fd:5b:54:9c:73:9f:36:bd:3f:c9:8d: f6:04:80:e0:97:c9:c6:f3:25:7b:cb:fc:5d:17:12: 5d:fd:f0:64:b2:19:3a:0c:a4:b2:a4:3e:7b:7a:75: 9e:bd:42:d0:60:be:39:77:bb:0e:f8:d5:b8:1c:48: cb:b5:30:98:38:ca:06:b2:ac:9c:45:ee:af:98:de: 3f:ea:f1:b6:99:f8:02:b6:e6:85:05:a9:11:bf:75: 98:fe:43:33:da:29:de:a6:96:9d:bb:9f:81:23:d5: 0a:b7:01:26:dd:ac:ad:58:6e:ad:53:97:0a:e0:08: ca:e2:d5:58:98:a5:c0:5a:33:50:a1:1f:f4:27:1c: 62:05:25:15:29:ef:e2:e1:66:38:2d:61:2b:95:5a: 96:6a:4b:7b:ad:10:96:7d:56:73:ef:f5:df:c9:e7: 53:e9:bd:8c:43:5b:b2:78:05:c1:c7:a6:86:c7:9b: 4e:f3:ca:93:81:07:dd:51:ed:ff:d3:4e:7a:ed:ec: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:25:45:4A:94:6A:05:E6:FF:7C:60:F9:BB:53:A5:D9:D5:CC:DF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab4fbb41-cc6e-3455-8951-93fe0e94c950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:bf:69:25:3b:7c:86:4d:2c:29:62:e8:d6:68:20:c1:52:e3: 79:6c:00:b5:f8:37:16:1c:02:a4:87:3f:fb:d2:5c:9d:81:87: ec:c2:b7:4d:4c:7a:b5:d4:1c:0d:ea:85:3f:63:35:9e:82:5f: 30:09:b4:5f:95:9f:e0:a4:a4:14:73:e1:e4:8d:85:b3:a2:3a: 0f:65:0f:4b:15:6e:9b:0c:88:d3:57:75:ad:68:c2:9d:fb:4a: 50:97:07:6a:9a:72:3a:ab:40:5c:c1:20:02:a6:0c:01:9d:90: 34:14:dd:15:d5:38:83:96:b0:bc:d8:b1:fb:a4:86:63:c3:41: 9a:b6:ec:6d:5e:be:03:2b:4e:3b:87:bd:b5:c6:38:36:a8:ce: b4:5b:f0:e1:f5:45:f3:6e:ad:9f:10:2f:0e:b1:7e:c6:97:5f: c3:57:1e:18:5f:ff:fe:4b:bb:bf:86:c6:9b:d6:bd:7c:14:af: 6c:08:9e:3f:e9:47:c6:fe:ee:b9:db:84:94:88:6d:9f:f9:f3: 3b:4e:48:e9:a2:ad:35:25:fc:63:56:e9:c7:0e:10:96:e9:39: 2c:b3:1f:a0:6f:43:54:a3:42:a0:cb:6e:27:e3:ce:0e:a9:6e: 84:e3:b5:c5:06:25:cc:dc:87:c1:a6:5b:4c:3e:e1:ff:da:b7: a9:0d:dc:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0CjqYxbtW8A5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGVmYTU3MzUtZGU5MC00MzFiLThmMDMtNDI4MDJjOTQ1ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztELLmyRHouuwWA1O9al2na8To4r51BBn0aW ntEGdYdxruL2XJcDfVBk/q+rx/eFmNirPq4DJ/AuFNuqueE8/VtUnHOfNr0/yY32 BIDgl8nG8yV7y/xdFxJd/fBkshk6DKSypD57enWevULQYL45d7sO+NW4HEjLtTCY OMoGsqycRe6vmN4/6vG2mfgCtuaFBakRv3WY/kMz2ineppadu5+BI9UKtwEm3ayt WG6tU5cK4AjK4tVYmKXAWjNQoR/0JxxiBSUVKe/i4WY4LWErlVqWakt7rRCWfVZz 7/XfyedT6b2MQ1uyeAXBx6aGx5tO88qTgQfdUe3/00567ez4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwlRUqUagXm/3xg+btTpdnVzN+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWI0ZmJiNDEtY2M2ZS0z NDU1LTg5NTEtOTNmZTBlOTRjOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO/aSU7fIZNLCli6NZoIMFS43lsALX4NxYcAqSHP/vSXJ2Bh+zCt01M erXUHA3qhT9jNZ6CXzAJtF+Vn+CkpBRz4eSNhbOiOg9lD0sVbpsMiNNXda1owp37 SlCXB2qacjqrQFzBIAKmDAGdkDQU3RXVOIOWsLzYsfukhmPDQZq27G1evgMrTjuH vbXGODaozrRb8OH1RfNurZ8QLw6xfsaXX8NXHhhf//5Lu7+GxpvWvXwUr2wInj/p R8b+7rnbhJSIbZ/58ztOSOmirTUl/GNW6ccOEJbpOSyzH6BvQ1SjQqDLbifjzg6p boTjtcUGJczch8GmW0w+4f/at6kN3Dw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:05 2025 by rpki-client