$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af38672e-5045-3127-a4b1-1713d25b6067.roa File: af38672e-5045-3127-a4b1-1713d25b6067.roa (raw, json) Hash identifier: fcxIGUCx2VyNvqAr3yyA3KMTydpkWJBT2hgeR0iNbCA= Subject key identifier: C6:3D:1A:81:8D:D4:EA:9F:D1:1B:58:81:AD:F1:C7:F9:76:48:BA:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2813884BAF0246E76C080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af38672e-5045-3127-a4b1-1713d25b6067.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:81:38:84:ba:f0:24:6e:76:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4c567b2b-5cc2-4dbe-bb57-f80393b57521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:d5:f7:89:e6:f7:12:e0:e2:97:af:a0:93: f1:1c:5a:38:f9:1e:97:b0:f7:17:23:fa:7d:b0:34: 9c:84:24:3c:d0:5e:43:96:02:a2:84:4e:53:9b:50: 2e:cc:f8:3c:02:7f:f9:42:9d:a4:1f:1a:3a:80:9b: 52:3c:a9:95:fd:59:3a:87:6a:ae:45:d7:3a:2c:22: 1b:cc:ee:f8:e5:c1:0a:34:f8:ac:a4:13:7e:8b:cc: c2:54:01:4f:b5:96:28:64:c2:4b:08:33:70:c7:93: d3:c4:f3:58:e2:48:25:9c:0c:9c:55:03:a1:4e:23: 11:c4:e4:cf:95:4f:e9:e7:88:46:96:a2:26:3a:0c: 2d:57:78:f5:2e:8a:90:80:99:56:a7:8f:ed:b3:5e: 37:69:04:ff:d1:18:1d:f1:6c:21:db:3e:c3:20:28: 9c:9f:ae:8e:c9:da:6f:3e:a2:ee:15:d4:e4:03:9d: 30:00:c8:2d:83:1a:18:ee:4c:d5:b0:01:38:29:27: 0d:32:8d:34:5c:90:05:21:b9:39:5e:02:05:e0:71: cc:dd:15:dc:f5:03:8f:07:6a:7e:e8:ba:94:87:ec: b4:90:1b:53:64:d7:f6:16:a9:7b:6c:5e:73:33:34: f3:b6:fb:d0:46:a4:a2:05:23:87:a1:84:ba:53:e6: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:1A:81:8D:D4:EA:9F:D1:1B:58:81:AD:F1:C7:F9:76:48:BA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af38672e-5045-3127-a4b1-1713d25b6067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ce:7f:53:48:ef:51:7b:98:79:25:c0:bc:f6:c5:6b:cb:da: a5:f3:02:c3:73:3b:b2:33:d6:de:2c:d4:8a:a4:2f:60:45:88: d5:38:40:86:05:46:df:3e:86:70:0b:21:35:43:4c:1e:3f:76: 34:58:a4:5f:76:99:0f:a0:38:2d:d1:98:68:19:27:22:15:c7: 84:33:06:c1:1c:c6:46:a9:7b:dd:98:e7:28:20:ed:08:a5:c3: 72:56:ba:d3:70:3d:2d:71:5e:4e:48:57:bf:67:31:f3:f6:b8: 3c:e9:34:34:05:28:2e:5e:9e:d7:16:44:10:bf:c2:94:46:d4: 10:20:71:d5:d6:ee:af:52:71:dc:94:f4:0b:11:c2:01:39:ff: d7:43:23:ad:4c:7a:45:66:13:4c:0e:12:a4:f2:30:0e:f5:aa: 88:b9:c0:c7:74:e8:f1:78:4e:ff:37:72:63:94:2b:d3:64:c4: ce:f2:ed:18:fb:67:ee:d2:6b:d0:3b:42:6e:b0:01:ab:a0:a2: 00:83:97:0c:ee:7e:47:07:36:20:4b:46:0d:45:8b:ab:a2:eb: 47:29:ce:fb:6f:d4:2d:59:97:8f:2d:fc:8b:de:27:0b:96:08: 8a:a9:47:cb:a1:d1:dd:f6:9c:0e:15:a1:f7:79:37:ea:53:95: 14:ab:ea:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oE4hLrwJG52wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGM1NjdiMmItNWNjMi00ZGJlLWJiNTctZjgwMzkzYjU3NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3/V94nm9xLg4pevoJPxHFo4+R6XsPcXI/p9 sDSchCQ80F5DlgKihE5Tm1AuzPg8An/5Qp2kHxo6gJtSPKmV/Vk6h2quRdc6LCIb zO745cEKNPispBN+i8zCVAFPtZYoZMJLCDNwx5PTxPNY4kglnAycVQOhTiMRxOTP lU/p54hGlqImOgwtV3j1LoqQgJlWp4/ts143aQT/0Rgd8Wwh2z7DICicn66Oydpv PqLuFdTkA50wAMgtgxoY7kzVsAE4KScNMo00XJAFIbk5XgIF4HHM3RXc9QOPB2p+ 6LqUh+y0kBtTZNf2Fql7bF5zMzTztvvQRqSiBSOHoYS6U+amxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY9GoGN1Oqf0RtYga3xx/l2SLo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYzODY3MmUtNTA0NS0z MTI3LWE0YjEtMTcxM2QyNWI2MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnOf1NI71F7mHklwLz2xWvL2qXzAsNzO7Iz1t4s1IqkL2BFiNU4QIYF Rt8+hnALITVDTB4/djRYpF92mQ+gOC3RmGgZJyIVx4QzBsEcxkape92Y5ygg7Qil w3JWutNwPS1xXk5IV79nMfP2uDzpNDQFKC5entcWRBC/wpRG1BAgcdXW7q9ScdyU 9AsRwgE5/9dDI61MekVmE0wOEqTyMA71qoi5wMd06PF4Tv83cmOUK9NkxM7y7Rj7 Z+7Sa9A7Qm6wAaugogCDlwzufkcHNiBLRg1Fi6ui60cpzvtv1C1Zl48t/IveJwuW CIqpR8uh0d32nA4Vofd5N+pTlRSr6uA= -----END CERTIFICATE-----Generated at Thu Oct 16 02:04:01 2025 by rpki-client