$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baad2c65-fa70-39c0-9446-2b6c26f51260.roa File: baad2c65-fa70-39c0-9446-2b6c26f51260.roa (raw, json) Hash identifier: Chob7zfBd1+MMJLh/7fz9RJVe0BuPbaEiTmO4YePbXA= Subject key identifier: B8:62:09:F8:4D:3F:F7:B8:51:4A:36:B0:17:1A:96:AD:15:ED:E1:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2455082DD2D795A0E9000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baad2c65-fa70-39c0-9446-2b6c26f51260.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.101.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:45:50:82:dd:2d:79:5a:0e:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b0a39bda-3b1d-4e88-bee2-7903256b183f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:f0:98:ec:f4:50:d5:70:de:c8:4f:1a:52: 9a:a2:df:b2:c4:57:c9:ed:41:58:cc:6f:d3:95:18: c0:cf:c5:6d:e0:ae:2c:1a:d2:a5:30:cb:87:44:f7: 6e:53:43:da:50:23:56:f9:91:93:b7:af:70:9c:70: 62:2e:d7:cc:89:69:c6:8b:ab:3c:17:c7:aa:aa:9c: 4e:c4:e4:87:29:69:30:e3:a0:5a:28:d5:99:35:e1: ac:40:08:55:57:83:1d:fa:30:de:81:6b:26:42:7d: 25:50:ad:67:85:dc:09:a5:8b:df:76:d6:96:93:4a: f9:bb:96:48:4f:ee:b8:b5:8d:5d:0d:cd:04:53:c9: 03:cb:4f:13:ad:8d:93:e9:b8:f2:94:3a:7f:f8:ec: 01:ba:0d:e2:14:3d:76:34:49:72:37:60:d5:ce:66: ad:74:e0:7d:0a:16:2e:99:1a:88:69:10:70:13:ea: f1:66:db:ef:d7:c0:e4:e4:09:12:45:5e:f9:21:7e: fb:07:6f:e3:76:f4:f8:6c:f7:ec:c8:1b:3e:93:94: 87:f7:ef:a5:de:ef:21:7f:a6:21:a3:66:df:cf:ec: 71:16:70:63:df:ca:08:e3:99:33:fa:1c:72:61:bd: c7:f0:36:fb:1b:ce:bf:f6:ba:56:21:9b:b6:76:16: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:09:F8:4D:3F:F7:B8:51:4A:36:B0:17:1A:96:AD:15:ED:E1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baad2c65-fa70-39c0-9446-2b6c26f51260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c3:44:24:33:e1:18:45:56:00:e5:50:6c:23:1f:d3:7e:77: b8:5d:b0:f7:a0:42:ef:e7:25:28:d6:42:60:54:07:1a:ac:8c: 1b:40:61:9d:de:46:08:09:1c:9f:62:4b:8f:ce:7b:db:03:ad: 67:a8:9d:5d:39:4e:37:b5:49:3f:2e:59:13:9c:f2:83:f1:2f: 5c:5d:b2:79:65:2e:08:83:07:ba:f7:67:95:1b:41:be:fd:01: 59:93:4f:79:e9:aa:5c:23:c3:85:3f:59:f8:0a:7f:81:88:58: 54:85:c2:99:22:e7:5f:8b:d5:2e:e2:17:9e:02:e8:96:5e:04: ea:5f:49:d3:6e:84:f7:6f:cb:cf:53:88:fb:00:02:b4:03:22: d2:b5:7a:1b:8d:fe:f0:5f:e0:c0:80:72:b6:34:23:0a:aa:29: a9:e9:2d:a1:0c:23:5c:99:d7:45:1f:bd:9a:dc:e1:85:36:49: 11:fa:d3:b5:0a:0c:99:51:19:c7:44:e0:fd:04:66:b1:7b:ad: cb:55:0e:c1:0d:34:c2:07:d1:7c:73:db:69:9b:11:3a:7e:48: 49:ac:40:cc:3a:81:91:57:af:e5:26:f2:f6:ec:87:d0:e4:05: 60:d6:7d:a5:ce:6e:4d:33:1d:e2:1c:09:df:c6:d0:41:cd:c3: aa:e5:fd:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kVQgt0teVoOkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjBhMzliZGEtM2IxZC00ZTg4LWJlZTItNzkwMzI1NmIxODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaXwmOz0UNVw3shPGlKaot+yxFfJ7UFYzG/T lRjAz8Vt4K4sGtKlMMuHRPduU0PaUCNW+ZGTt69wnHBiLtfMiWnGi6s8F8eqqpxO xOSHKWkw46BaKNWZNeGsQAhVV4Md+jDegWsmQn0lUK1nhdwJpYvfdtaWk0r5u5ZI T+64tY1dDc0EU8kDy08TrY2T6bjylDp/+OwBug3iFD12NElyN2DVzmatdOB9ChYu mRqIaRBwE+rxZtvv18Dk5AkSRV75IX77B2/jdvT4bPfsyBs+k5SH9++l3u8hf6Yh o2bfz+xxFnBj38oI45kz+hxyYb3H8Db7G86/9rpWIZu2dhbaDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhiCfhNP/e4UUo2sBcalq0V7eH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFhZDJjNjUtZmE3MC0z OWMwLTk0NDYtMmI2YzI2ZjUxMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbDRCQz4RhFVgDlUGwjH9N+d7hdsPegQu/nJSjWQmBUBxqsjBtAYZ3e RggJHJ9iS4/Oe9sDrWeonV05Tje1ST8uWROc8oPxL1xdsnllLgiDB7r3Z5UbQb79 AVmTT3npqlwjw4U/WfgKf4GIWFSFwpki51+L1S7iF54C6JZeBOpfSdNuhPdvy89T iPsAArQDItK1ehuN/vBf4MCAcrY0IwqqKanpLaEMI1yZ10UfvZrc4YU2SRH607UK DJlRGcdE4P0EZrF7rctVDsENNMIH0Xxz22mbETp+SEmsQMw6gZFXr+Um8vbsh9Dk BWDWfaXObk0zHeIcCd/G0EHNw6rl/Ww= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:27 2025 by rpki-client