$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa File: b1533062-74f4-384b-88a9-501d82220b3b.roa (raw, json) Hash identifier: eiAmbtHm/pDk+m4vRaHHpLyTXRkHQIUHM+cx1H3KFFY= Subject key identifier: C6:74:10:90:DA:28:6F:E0:B1:EF:CC:04:6E:0F:E8:99:7D:20:55:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066EAED180A185BF8B7FB40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.96.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ea:ed:18:0a:18:5b:f8:b7:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=847bdd61-3fc2-4e4d-aebd-eb401b3e21ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:94:3a:ae:7b:4b:84:29:23:14:04:7b:dd: 53:0e:7f:33:e2:bf:13:2b:d6:c6:ef:ca:fa:e9:65: 3d:bb:d7:cc:77:24:54:95:7e:9f:8e:f2:3e:f8:76: e2:62:aa:1b:95:3f:69:0b:b6:58:06:d1:8d:ad:31: 80:26:2a:33:8b:4d:a3:db:66:83:ff:81:7e:56:7c: 5a:f3:7a:de:b9:08:0b:e4:b7:25:34:c4:df:9e:75: 51:7c:ba:e8:59:16:8f:91:c0:7d:2f:7b:c6:5e:9d: a9:01:24:cb:73:91:ae:88:15:b9:96:c8:fe:62:77: 83:29:e0:49:c7:5f:9e:e3:a4:a8:e1:c2:44:c4:3c: ed:1e:af:a0:1f:0b:62:8e:26:ea:71:55:b5:4a:ee: 5b:e0:45:73:4a:7b:d2:00:8c:2e:83:16:13:3e:b5: 84:c7:bc:bf:e0:57:58:10:52:76:39:4e:fc:a9:13: 6c:6a:b7:6d:81:9d:ed:86:2a:20:66:89:ae:41:01: bd:3c:fe:4f:81:9a:2f:a3:bb:ce:61:22:fd:16:e9: 3a:c8:db:5c:9a:a1:9f:41:0f:49:17:e4:48:5c:07: c2:53:7d:b0:93:5e:08:30:0d:e4:10:54:57:94:ad: 7b:6f:ca:32:bb:6b:bb:75:67:92:33:43:8d:cd:84: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:10:90:DA:28:6F:E0:B1:EF:CC:04:6E:0F:E8:99:7D:20:55:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:33:4b:16:50:fc:95:29:b4:b1:8b:82:f0:32:b0:3b:f3:04: a5:65:2b:80:49:1f:cc:21:58:fc:de:69:d2:60:60:91:92:d9: ce:e6:34:f5:07:4e:bd:b3:8a:ec:d0:f0:e4:b5:9a:c7:e4:75: 1d:d8:21:69:e6:08:42:48:20:aa:c3:64:a8:e6:4e:5d:70:e7: 96:3d:db:9d:7c:c5:2c:4a:00:21:f9:db:1b:a4:f0:6c:39:a0: e4:ec:4e:76:9c:44:b6:2e:2e:22:c7:80:a5:fb:eb:5f:f9:7d: 69:92:27:a5:2b:4e:62:c1:1e:92:83:01:4f:0f:f1:9f:45:76: b8:4b:5a:ce:38:3f:fa:76:a6:b7:f3:18:ff:a9:fe:53:59:dd: c6:22:fe:f5:f8:4f:dc:63:4c:aa:23:8a:71:8a:54:10:26:c9: ac:53:11:b6:4d:36:ac:6d:35:06:f1:10:c4:e1:ff:0c:03:44: f0:dd:62:4a:7a:aa:96:22:f1:54:8f:65:ce:a0:96:9b:b9:35: 08:af:47:42:bd:35:2b:fb:27:41:44:08:33:04:97:e7:5f:61: e1:43:c2:9d:c6:3b:62:7c:ff:d6:16:ea:de:91:03:c9:19:5b: 87:ac:cd:03:c0:bb:14:66:b0:bd:d8:75:30:1a:7d:0e:d5:59: d3:8f:c6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZurtGAoYW/i3+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ODQ3YmRkNjEtM2ZjMi00ZTRkLWFlYmQtZWI0MDFiM2UyMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix+UOq57S4QpIxQEe91TDn8z4r8TK9bG78r6 6WU9u9fMdyRUlX6fjvI++HbiYqoblT9pC7ZYBtGNrTGAJiozi02j22aD/4F+Vnxa 83reuQgL5LclNMTfnnVRfLroWRaPkcB9L3vGXp2pASTLc5GuiBW5lsj+YneDKeBJ x1+e46So4cJExDztHq+gHwtijibqcVW1Su5b4EVzSnvSAIwugxYTPrWEx7y/4FdY EFJ2OU78qRNsardtgZ3thiogZomuQQG9PP5PgZovo7vOYSL9Fuk6yNtcmqGfQQ9J F+RIXAfCU32wk14IMA3kEFRXlK17b8oyu2u7dWeSM0ONzYQuiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ0EJDaKG/gse/MBG4P6Jl9IFV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjE1MzMwNjItNzRmNC0z ODRiLTg4YTktNTAxZDgyMjIwYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIszSxZQ/JUptLGLgvAysDvzBKVlK4BJH8whWPzeadJgYJGS2c7mNPUH Tr2ziuzQ8OS1msfkdR3YIWnmCEJIIKrDZKjmTl1w55Y92518xSxKACH52xuk8Gw5 oOTsTnacRLYuLiLHgKX761/5fWmSJ6UrTmLBHpKDAU8P8Z9FdrhLWs44P/p2prfz GP+p/lNZ3cYi/vX4T9xjTKojinGKVBAmyaxTEbZNNqxtNQbxEMTh/wwDRPDdYkp6 qpYi8VSPZc6glpu5NQivR0K9NSv7J0FECDMEl+dfYeFDwp3GO2J8/9YW6t6RA8kZ W4eszQPAuxRmsL3YdTAafQ7VWdOPxkw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:47:54 2025 by rpki-client