$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff6f14c-489d-3016-9494-42a2a615e3b6.roa File: aff6f14c-489d-3016-9494-42a2a615e3b6.roa (raw, json) Hash identifier: W+KAtunGrKGChym0MS08aXC6IC8OUYFKG2c/wIjOF10= Subject key identifier: F1:AE:E5:E1:A0:B4:1C:27:35:57:0D:C0:77:7A:9C:A8:01:91:C7:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2355089FF899295E9C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff6f14c-489d-3016-9494-42a2a615e3b6.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:23:55:08:9f:f8:99:29:5e:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=27b91d45-572b-4183-821a-8ac1674d3047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:4d:f5:d4:1f:a7:cd:66:14:73:83:03:08: e0:98:26:d9:e0:ba:d5:5b:0e:a1:50:ab:c8:44:fc: c2:b1:28:07:15:bc:0a:ce:86:36:6a:75:f8:a0:22: 88:08:cf:86:10:c4:7e:82:a1:e8:98:54:5e:02:d5: aa:0b:11:38:2d:b0:98:48:44:db:ce:81:16:94:77: a7:70:91:7e:59:7c:69:21:9b:01:e2:9b:4a:b5:c0: aa:06:3e:d3:04:74:bd:95:9d:2f:7f:94:07:d7:f4: 9d:45:3a:67:8f:75:60:b9:2c:e0:41:c7:c6:35:4c: 2d:2b:aa:ac:95:5d:25:f1:59:8f:52:70:31:7f:9d: b8:8d:5d:0f:b2:e6:13:7f:33:99:11:4d:7e:14:50: f0:08:2c:c0:16:33:b1:4c:db:29:4b:22:b2:5e:39: 66:71:ad:11:32:88:73:b4:bf:39:85:9a:10:df:75: 2c:fe:22:6a:68:f8:19:4a:1c:08:4b:c6:83:f2:a2: 60:5a:37:f6:24:24:46:8c:8f:84:91:f0:c0:b2:f0: 61:90:da:6a:09:d3:b8:26:a4:f9:77:b0:13:66:13: 51:4c:12:8c:d9:b1:20:b4:48:1b:dc:2a:66:db:74: 16:60:80:36:c1:83:ad:38:4f:3b:03:e0:5a:57:24: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AE:E5:E1:A0:B4:1C:27:35:57:0D:C0:77:7A:9C:A8:01:91:C7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aff6f14c-489d-3016-9494-42a2a615e3b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:23:16:dc:b7:09:7e:eb:7c:ed:3a:39:7f:db:cb:e2:12:a9: f6:83:d9:9f:22:bb:de:43:d0:85:5b:0a:32:45:91:30:21:ca: 04:a0:1e:84:31:78:d1:d7:85:ce:cc:41:4b:eb:c6:bc:89:db: 5b:32:36:85:58:b2:6a:62:d9:cf:dd:6e:28:13:d8:66:fb:98: fc:d8:7b:09:29:56:fa:0c:12:75:21:93:e3:3b:48:98:0e:94: 9e:a8:88:d5:07:0f:34:8d:f3:78:a0:d3:8f:76:46:43:65:90: d6:ce:22:b1:5d:e6:85:ad:64:de:d4:da:1d:1e:ec:f9:ef:51: de:f0:cd:0a:89:a6:97:59:52:df:6d:52:70:e1:67:38:63:07: be:af:72:3d:f2:34:4c:c4:2b:55:66:29:b3:cb:96:e7:a2:93: 18:00:ff:cb:15:10:db:33:c2:b6:87:47:19:ab:50:04:e4:8a: 14:3c:0f:bd:05:33:d5:00:1c:71:35:12:8b:14:eb:be:ea:85: 22:6f:ef:6f:ea:f3:6b:27:28:97:b3:85:f8:e8:16:1c:d5:96: 5b:e4:02:29:c2:60:91:a4:ac:1c:41:47:d3:7f:7b:b4:80:1a: e3:87:67:1a:7c:02:f8:35:ad:2d:c3:a9:0b:87:2f:23:97:54: 38:77:88:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCNVCJ/4mSlenIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MjdiOTFkNDUtNTcyYi00MTgzLTgyMWEtOGFjMTY3NGQzMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8VN9dQfp81mFHODAwjgmCbZ4LrVWw6hUKvI RPzCsSgHFbwKzoY2anX4oCKICM+GEMR+gqHomFReAtWqCxE4LbCYSETbzoEWlHen cJF+WXxpIZsB4ptKtcCqBj7TBHS9lZ0vf5QH1/SdRTpnj3VguSzgQcfGNUwtK6qs lV0l8VmPUnAxf524jV0PsuYTfzOZEU1+FFDwCCzAFjOxTNspSyKyXjlmca0RMohz tL85hZoQ33Us/iJqaPgZShwIS8aD8qJgWjf2JCRGjI+EkfDAsvBhkNpqCdO4JqT5 d7ATZhNRTBKM2bEgtEgb3Cpm23QWYIA2wYOtOE87A+BaVyS1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGu5eGgtBwnNVcNwHd6nKgBkcc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZmNmYxNGMtNDg5ZC0z MDE2LTk0OTQtNDJhMmE2MTVlM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwjFty3CX7rfO06OX/by+ISqfaD2Z8iu95D0IVbCjJFkTAhygSgHoQx eNHXhc7MQUvrxryJ21syNoVYsmpi2c/dbigT2Gb7mPzYewkpVvoMEnUhk+M7SJgO lJ6oiNUHDzSN83ig0492RkNlkNbOIrFd5oWtZN7U2h0e7PnvUd7wzQqJppdZUt9t UnDhZzhjB76vcj3yNEzEK1VmKbPLlueikxgA/8sVENszwraHRxmrUATkihQ8D70F M9UAHHE1EosU677qhSJv72/q82snKJezhfjoFhzVllvkAinCYJGkrBxBR9N/e7SA GuOHZxp8Avg1rS3DqQuHLyOXVDh3iIQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:57 2025 by rpki-client