$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b387107d-eb17-3c89-bd50-5be5a42fac77.roa File: b387107d-eb17-3c89-bd50-5be5a42fac77.roa (raw, json) Hash identifier: 3uG4g/SmyD1aPYMJ7YtVjXyEfwT21p67tsFqYMns2aw= Subject key identifier: E6:1D:92:6D:8A:A6:AB:36:5B:BD:86:68:17:C1:C6:34:D0:70:32:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374B42DA0C7AAF0F1BBA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b387107d-eb17-3c89-bd50-5be5a42fac77.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4b:42:da:0c:7a:af:0f:1b:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=48537e45-b2d0-459a-a4d9-9764a87aaf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:f6:ed:0b:8a:16:34:40:9b:28:be:f6:ad: 10:b8:10:cc:9b:9d:10:df:1c:eb:cb:1d:8e:44:38: c4:1a:28:35:d3:67:e2:f2:9a:42:52:a7:08:d0:cc: 37:e8:38:00:a6:a1:b6:2d:ca:69:90:cf:3c:24:db: 76:16:26:64:cf:3c:4b:66:7f:cd:e0:0b:ab:c9:8e: 6d:51:c3:81:90:7c:a0:55:f4:24:1b:1c:63:c6:a0: 41:f9:43:c8:ef:07:71:d2:05:ea:00:3a:af:9c:f3: f8:4c:e0:3f:8b:f0:32:7d:f7:ff:83:f2:37:6c:de: 8d:be:9a:a0:14:58:a9:42:a7:94:62:4c:75:6f:94: 50:80:75:5c:80:0c:14:7a:44:da:7d:18:92:da:ee: 5e:39:6b:20:19:17:26:32:e3:3f:ca:e8:7b:4e:b9: ea:ae:2f:4b:52:86:4d:35:45:cc:b1:56:46:73:ff: 94:75:7a:fb:2d:b7:7b:b4:db:21:d2:3d:ce:0a:7e: 7b:19:e4:f5:a5:24:ec:14:fa:ae:79:40:30:28:4f: cf:d0:db:34:49:7b:f9:4c:10:2f:a3:99:f3:7b:8f: 5b:09:3a:02:21:18:74:55:11:8c:34:a9:33:ce:ae: e2:39:c0:35:c6:bb:56:a9:19:4e:95:60:f8:3d:77: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1D:92:6D:8A:A6:AB:36:5B:BD:86:68:17:C1:C6:34:D0:70:32:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b387107d-eb17-3c89-bd50-5be5a42fac77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e1:54:1f:10:6a:f9:35:2d:c3:15:b6:d9:b7:36:01:e1:56: 76:d7:24:77:03:98:a2:08:71:ea:9c:33:3e:01:fa:4e:eb:b9: fe:ad:fd:54:92:57:17:a6:70:83:32:ce:10:98:18:a7:ce:76: 4f:00:d8:bc:e4:a0:a3:4d:a5:ba:d2:a4:ab:b1:19:16:f3:6e: ba:76:87:71:05:eb:40:39:ba:c1:70:17:9a:d8:ed:48:6a:71: ca:ef:0a:cd:15:30:68:e1:6f:7c:e0:5b:3d:74:49:7c:02:7c: 51:d3:31:75:ff:ac:73:76:80:fa:9b:db:fa:a6:15:ce:11:da: ca:5c:ce:ce:13:7d:00:92:d7:23:79:eb:9b:61:91:c9:58:dd: fc:13:a6:ee:28:dd:85:41:1a:bc:08:24:cb:d2:04:1f:6a:12: 0d:cc:cf:95:60:d6:b2:36:c5:61:0e:a8:4e:25:28:02:e3:00: 11:ba:8e:3f:b2:2e:81:7e:26:31:f5:a7:a0:ff:45:2a:f4:e3: 19:78:6d:05:76:5e:c3:c1:8a:4e:0a:65:f1:7c:e2:00:f3:99: 9a:70:b7:ea:56:77:3f:b5:ca:70:88:3c:6a:1c:a1:f3:54:7f: 4e:ab:54:32:d3:62:0c:65:de:df:d9:e8:9a:90:7a:83:2c:ea: 16:86:a4:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0tC2gx6rw8buoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDg1MzdlNDUtYjJkMC00NTlhLWE0ZDktOTc2NGE4N2FhZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07b27QuKFjRAmyi+9q0QuBDMm50Q3xzryx2O RDjEGig102fi8ppCUqcI0Mw36DgApqG2LcppkM88JNt2FiZkzzxLZn/N4AuryY5t UcOBkHygVfQkGxxjxqBB+UPI7wdx0gXqADqvnPP4TOA/i/Ayfff/g/I3bN6Nvpqg FFipQqeUYkx1b5RQgHVcgAwUekTafRiS2u5eOWsgGRcmMuM/yuh7Trnqri9LUoZN NUXMsVZGc/+UdXr7Lbd7tNsh0j3OCn57GeT1pSTsFPqueUAwKE/P0Ns0SXv5TBAv o5nze49bCToCIRh0VRGMNKkzzq7iOcA1xrtWqRlOlWD4PXczCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYdkm2Kpqs2W72GaBfBxjTQcDKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjM4NzEwN2QtZWIxNy0z Yzg5LWJkNTAtNWJlNWE0MmZhYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/hVB8Qavk1LcMVttm3NgHhVnbXJHcDmKIIceqcMz4B+k7ruf6t/VSS VxemcIMyzhCYGKfOdk8A2LzkoKNNpbrSpKuxGRbzbrp2h3EF60A5usFwF5rY7Uhq ccrvCs0VMGjhb3zgWz10SXwCfFHTMXX/rHN2gPqb2/qmFc4R2spczs4TfQCS1yN5 65thkclY3fwTpu4o3YVBGrwIJMvSBB9qEg3Mz5Vg1rI2xWEOqE4lKALjABG6jj+y LoF+JjH1p6D/RSr04xl4bQV2XsPBik4KZfF84gDzmZpwt+pWdz+1ynCIPGocofNU f06rVDLTYgxl3t/Z6JqQeoMs6haGpPM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:31 2025 by rpki-client