$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5337a4-ca1c-3818-90c9-82acff522a32.roa File: ba5337a4-ca1c-3818-90c9-82acff522a32.roa (raw, json) Hash identifier: 997Lj4JxKiX9aHsrjaAPsksGVQf9UgXLMK29BWAeLxw= Subject key identifier: 1D:32:1F:B3:B5:31:AC:21:02:52:8D:50:EB:D3:D7:A2:70:92:9A:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F8B51A6608361BCBCF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5337a4-ca1c-3818-90c9-82acff522a32.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f8:b5:1a:66:08:36:1b:cb:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c1ef0b65-180e-442f-a46a-8eef3ad4ff2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:98:af:18:d6:75:9c:9c:a9:31:ef:1c:89: 1a:3d:83:27:4d:77:9c:55:c5:d3:14:34:f4:84:fb: f7:9f:28:25:8e:d4:8b:5c:e0:e6:bd:fa:15:f9:b0: 87:23:6d:9d:af:15:5b:88:e1:73:1d:a9:dc:08:f3: 7e:2d:95:e1:05:4d:16:8e:ba:53:95:c7:70:da:de: 62:5f:2b:70:4a:93:42:57:ea:01:8d:b4:7a:a9:6d: 37:12:66:4f:9f:d0:1c:df:ff:3d:97:19:14:e0:9a: 22:8d:29:c7:12:03:89:0d:cc:f3:31:41:bc:cf:7c: 56:17:63:a7:44:4f:25:bd:64:bd:b4:38:1c:59:ca: 4f:5f:c9:b5:50:e1:93:f0:a7:16:87:0b:90:1f:47: bd:87:d6:77:76:a5:b7:c1:c5:67:7b:36:2f:2a:e2: f5:af:7f:f7:87:c0:48:a9:d6:3c:ad:94:44:5f:d1: f1:e8:31:d5:95:dd:70:ff:09:ac:6a:40:22:31:73: ef:3a:cf:d3:a4:76:b4:3e:d1:b0:2c:91:b0:f7:7f: 57:46:c4:b4:fd:d3:28:4e:f4:44:83:2b:81:3d:ad: a2:57:41:cb:e7:6d:ad:0f:3a:05:c3:4e:c5:1b:13: 01:a6:8a:ec:c1:f8:4b:b1:f9:be:2c:41:11:07:b9: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:1F:B3:B5:31:AC:21:02:52:8D:50:EB:D3:D7:A2:70:92:9A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5337a4-ca1c-3818-90c9-82acff522a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:85:69:7a:96:16:fe:8c:50:0e:bb:1d:bf:6d:51:b0:41:81: 98:89:73:51:8d:1b:cc:17:db:64:ce:e6:51:a2:23:35:f5:5b: d5:b4:e6:2d:6c:5b:e5:95:c3:d3:6d:ed:78:a6:65:4c:8d:48: ee:57:e5:32:a9:0e:e6:28:ff:03:f7:09:75:77:63:69:af:5c: 8f:51:7b:6d:36:9c:64:cf:54:ea:42:23:f8:34:63:4d:44:3e: da:c4:4e:b3:9d:fd:eb:40:17:ad:b1:f1:c2:d0:c9:30:e9:3e: 6e:94:de:ab:91:4b:10:7c:01:44:c6:8b:40:9d:81:50:a3:0a: d5:e3:f3:b7:a7:8a:06:30:50:08:8d:b4:de:26:4e:65:ad:a3: bc:f4:3d:48:4f:03:6a:74:6a:32:39:2f:bf:d2:fe:33:c8:4c: 66:88:d7:54:7f:b9:94:61:c7:83:3d:93:a1:b4:47:d8:58:db: 32:26:31:a0:f8:df:7c:54:dc:83:41:91:7e:41:dc:97:16:2f: 99:46:6c:91:6c:11:37:f6:a3:f9:8a:62:4e:c0:78:be:02:14: 88:6b:0a:67:51:62:03:a2:51:aa:dc:41:8e:cf:cf:94:5f:e0: c3:7d:50:46:71:fb:b9:11:13:9b:0f:a9:5d:bc:55:89:76:20: ef:83:d7:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvi1GmYINhvLz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzFlZjBiNjUtMTgwZS00NDJmLWE0NmEtOGVlZjNhZDRmZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPCYrxjWdZycqTHvHIkaPYMnTXecVcXTFDT0 hPv3nygljtSLXODmvfoV+bCHI22drxVbiOFzHancCPN+LZXhBU0WjrpTlcdw2t5i XytwSpNCV+oBjbR6qW03EmZPn9Ac3/89lxkU4JoijSnHEgOJDczzMUG8z3xWF2On RE8lvWS9tDgcWcpPX8m1UOGT8KcWhwuQH0e9h9Z3dqW3wcVnezYvKuL1r3/3h8BI qdY8rZREX9Hx6DHVld1w/wmsakAiMXPvOs/TpHa0PtGwLJGw939XRsS0/dMoTvRE gyuBPa2iV0HL522tDzoFw07FGxMBporswfhLsfm+LEERB7nSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0yH7O1MawhAlKNUOvT16JwkpoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE1MzM3YTQtY2ExYy0z ODE4LTkwYzktODJhY2ZmNTIyYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKFaXqWFv6MUA67Hb9tUbBBgZiJc1GNG8wX22TO5lGiIzX1W9W05i1s W+WVw9Nt7XimZUyNSO5X5TKpDuYo/wP3CXV3Y2mvXI9Re202nGTPVOpCI/g0Y01E PtrETrOd/etAF62x8cLQyTDpPm6U3quRSxB8AUTGi0CdgVCjCtXj87enigYwUAiN tN4mTmWto7z0PUhPA2p0ajI5L7/S/jPITGaI11R/uZRhx4M9k6G0R9hY2zImMaD4 33xU3INBkX5B3JcWL5lGbJFsETf2o/mKYk7AeL4CFIhrCmdRYgOiUarcQY7Pz5Rf 4MN9UEZx+7kRE5sPqV28VYl2IO+D1wo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:56 2025 by rpki-client