$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9bb6ca4-e95b-32b7-87ee-f8ea183a3474.roa File: b9bb6ca4-e95b-32b7-87ee-f8ea183a3474.roa (raw, json) Hash identifier: Q6cKI2ElEMo99o7cVm4o5xUpt1KSVhR/dVxAog0hhmk= Subject key identifier: 9C:97:BC:2E:34:20:F8:1B:32:B2:E2:47:A6:30:4C:66:B8:FD:CF:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23F750CB83F821FBF5E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9bb6ca4-e95b-32b7-87ee-f8ea183a3474.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.96.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3f:75:0c:b8:3f:82:1f:bf:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3809264c-3fc4-428b-b8c5-4c3f4a383367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:04:06:c3:33:6d:b0:90:39:d5:40:e7:59: 6e:3e:64:91:34:82:21:0f:bd:b2:56:46:38:24:80: 4c:be:5d:27:33:9c:0c:56:94:97:0c:c5:d7:fc:70: de:6c:44:d6:e9:ef:64:6d:a9:fb:23:c9:37:20:63: d8:7f:9f:1b:f1:aa:83:a4:ba:20:91:45:e5:52:f0: 83:d7:b8:f5:0c:59:08:26:5f:cf:96:a7:e0:43:35: d8:f9:d4:50:30:cf:17:d8:d9:98:8a:b1:75:f2:1f: e3:63:ed:c4:96:7b:41:d8:3f:21:6c:b2:db:ad:28: 4e:2b:cb:db:70:a8:4a:9e:fc:e2:16:21:96:f3:d7: e3:b9:1a:74:d9:ed:f9:ed:9b:ed:66:40:10:3f:1e: e6:95:c8:a8:85:d0:96:a1:c1:9b:60:98:fb:05:8a: 91:b9:94:d2:5b:e9:14:8f:56:5a:e1:ca:98:13:97: 36:32:68:eb:f4:58:e2:0f:01:4d:20:1d:44:40:8f: 6c:68:78:6a:3e:1c:31:3e:d7:f1:ff:97:57:17:69: cd:3a:91:8f:72:fa:77:66:df:aa:80:b8:ce:c1:a0: 17:08:bd:c5:4c:30:32:6d:9b:c1:d7:03:18:96:ae: 49:f0:d6:c2:15:95:58:ac:a4:02:ba:85:7c:cb:d4: c4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:97:BC:2E:34:20:F8:1B:32:B2:E2:47:A6:30:4C:66:B8:FD:CF:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9bb6ca4-e95b-32b7-87ee-f8ea183a3474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ff:d7:4f:c6:cf:c7:0c:84:7b:4b:fd:a1:6b:de:cc:56:79: 41:d2:c4:11:e3:c8:0d:cf:a2:db:84:6f:58:81:d6:fd:5d:11: 07:4e:ae:dd:a6:32:98:ba:0b:fd:08:5b:78:53:b6:90:7c:e3: fa:20:9b:32:4a:28:7f:f6:73:5e:cc:a5:25:22:d7:53:f5:9a: 4b:f6:85:03:ff:40:3b:8b:8e:8c:47:5b:47:6c:a5:4e:c2:1f: 2c:65:87:7e:dc:a2:5a:82:31:7e:30:48:e2:cf:31:0b:8c:5c: e9:7d:79:53:94:22:4c:83:26:1f:c2:06:8b:4b:60:1c:88:0b: f1:f0:19:1f:36:77:2a:9f:16:3e:66:12:00:15:c2:c3:bd:64: 2c:fa:d8:5b:55:cf:0c:23:30:2c:12:e1:4c:37:69:75:89:7a: e0:35:0d:c4:35:0e:54:5a:e6:00:56:db:48:ba:66:44:b0:ab: 52:51:ed:7b:8a:f2:e5:87:db:f1:c1:09:af:14:4b:16:04:d6: 3c:c2:35:cc:1d:94:03:57:85:c1:8c:71:9b:3d:ba:61:ac:4b: ea:28:b2:17:b9:48:c8:f0:5d:0c:ea:1d:22:e4:01:2e:96:ea: d1:40:8a:f6:be:c7:72:bc:95:22:fb:e3:9b:61:c4:16:af:f3: 3a:88:a4:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28j91DLg/gh+/XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzgwOTI2NGMtM2ZjNC00MjhiLWI4YzUtNGMzZjRhMzgzMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxAEBsMzbbCQOdVA51luPmSRNIIhD72yVkY4 JIBMvl0nM5wMVpSXDMXX/HDebETW6e9kban7I8k3IGPYf58b8aqDpLogkUXlUvCD 17j1DFkIJl/PlqfgQzXY+dRQMM8X2NmYirF18h/jY+3ElntB2D8hbLLbrShOK8vb cKhKnvziFiGW89fjuRp02e357ZvtZkAQPx7mlciohdCWocGbYJj7BYqRuZTSW+kU j1Za4cqYE5c2Mmjr9FjiDwFNIB1EQI9saHhqPhwxPtfx/5dXF2nNOpGPcvp3Zt+q gLjOwaAXCL3FTDAybZvB1wMYlq5J8NbCFZVYrKQCuoV8y9TE8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyXvC40IPgbMrLiR6YwTGa4/c9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjliYjZjYTQtZTk1Yi0z MmI3LTg3ZWUtZjhlYTE4M2EzNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT/10/Gz8cMhHtL/aFr3sxWeUHSxBHjyA3PotuEb1iB1v1dEQdOrt2m Mpi6C/0IW3hTtpB84/ogmzJKKH/2c17MpSUi11P1mkv2hQP/QDuLjoxHW0dspU7C Hyxlh37colqCMX4wSOLPMQuMXOl9eVOUIkyDJh/CBotLYByIC/HwGR82dyqfFj5m EgAVwsO9ZCz62FtVzwwjMCwS4Uw3aXWJeuA1DcQ1DlRa5gBW20i6ZkSwq1JR7XuK 8uWH2/HBCa8USxYE1jzCNcwdlANXhcGMcZs9umGsS+ooshe5SMjwXQzqHSLkAS6W 6tFAiva+x3K8lSL745thxBav8zqIpEE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:53 2025 by rpki-client