$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb99384a-c13e-3591-8d83-c571feb3ca82.roa File: bb99384a-c13e-3591-8d83-c571feb3ca82.roa (raw, json) Hash identifier: QGVcDJjrEl7c1mpb4ZyCSBoKYd8fAgI6DPk2KWlwn9Q= Subject key identifier: 57:CE:D4:DA:A3:AD:D7:BF:E5:5A:EA:CA:1D:04:BB:AA:C5:A0:92:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26B122952751943C91E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb99384a-c13e-3591-8d83-c571feb3ca82.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6b:12:29:52:75:19:43:c9:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=751a6bd1-3738-41a0-8a34-f3c07d3dc0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:4f:e1:ee:22:26:b3:2b:99:c8:8a:2d:1a: 3e:d1:9a:ce:93:43:d0:bf:68:f2:1a:73:c7:c0:7a: bf:77:2e:34:02:c8:8f:b0:0c:f1:08:34:1c:1a:1a: a7:cb:fa:d5:36:f8:b8:83:dc:4b:14:62:03:81:3f: 14:f7:da:37:57:33:0c:fd:d6:f2:f3:ac:75:83:6a: 5c:e7:55:f3:ef:e1:89:65:25:25:ad:83:49:37:09: d7:98:77:5d:0c:3a:c9:ed:b9:29:8c:de:9f:0d:ea: c4:d8:25:c2:1d:e5:14:e1:d5:5f:1f:48:0e:98:3a: fa:3d:fb:ca:0a:66:7b:0a:cc:4d:ea:5f:cc:24:78: bc:95:a5:19:df:71:71:31:fe:d5:4b:ca:21:21:d5: 0e:2e:eb:fb:84:5b:51:49:c7:71:17:18:cc:f2:bb: 89:03:55:03:1a:01:9b:ac:a1:55:2a:d6:09:6d:d4: ee:84:8c:49:b9:58:a6:5f:07:41:5c:9b:0c:0d:b2: 43:2a:5d:c5:8d:75:71:fd:f9:72:90:25:e8:50:c4: 13:07:1e:f8:d4:6b:7b:e9:da:aa:d9:b6:2d:87:46: 0b:f5:69:66:93:78:d1:b5:03:7a:75:d5:68:18:d9: 74:9e:e1:70:21:c9:43:7d:0b:1b:f6:2a:5b:00:76: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CE:D4:DA:A3:AD:D7:BF:E5:5A:EA:CA:1D:04:BB:AA:C5:A0:92:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb99384a-c13e-3591-8d83-c571feb3ca82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c1:50:56:b3:54:f8:44:48:ee:96:21:25:1d:6f:62:01:d2: 5e:4a:09:f3:80:68:78:62:ec:8b:e2:bb:bf:ee:fe:21:0a:56: 58:6f:18:b5:0b:1c:74:79:1a:b3:15:db:6b:7c:1b:15:90:95: 41:1e:16:d4:63:0b:55:9d:af:d4:f5:41:92:06:a3:aa:39:96: 04:e5:cd:00:97:e3:25:01:71:4d:da:e5:fa:79:f4:1c:30:41: 12:1c:ab:b5:6a:2e:fd:10:dc:69:28:dd:b7:5f:b4:18:04:8f: 85:ee:ec:66:7f:36:a2:d3:1e:b8:5a:6f:07:e7:a8:80:4f:80: e8:fb:48:65:53:df:18:91:11:ed:e5:55:9a:02:ea:61:de:b2: 1b:e5:eb:53:42:6c:5e:ae:35:20:86:11:7f:c6:72:86:26:e1: e8:22:4d:ed:e3:55:c8:5e:73:19:dd:99:35:68:5c:b4:53:ed: b9:05:7a:eb:9b:1a:97:97:b4:29:93:64:21:e2:5f:50:e1:e9: f7:fa:03:2f:3c:d6:f7:31:d1:75:ce:5e:46:70:78:e2:07:13: cf:f9:4e:0d:4b:e3:d7:0f:27:3d:12:ca:26:19:4c:ee:40:09: d1:e6:66:e7:28:19:45:4c:f6:b0:6b:61:1e:30:df:c2:85:16: 1f:98:ed:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28msSKVJ1GUPJHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzUxYTZiZDEtMzczOC00MWEwLThhMzQtZjNjMDdkM2RjMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTRP4e4iJrMrmciKLRo+0ZrOk0PQv2jyGnPH wHq/dy40AsiPsAzxCDQcGhqny/rVNvi4g9xLFGIDgT8U99o3VzMM/dby86x1g2pc 51Xz7+GJZSUlrYNJNwnXmHddDDrJ7bkpjN6fDerE2CXCHeUU4dVfH0gOmDr6PfvK CmZ7CsxN6l/MJHi8laUZ33FxMf7VS8ohIdUOLuv7hFtRScdxFxjM8ruJA1UDGgGb rKFVKtYJbdTuhIxJuVimXwdBXJsMDbJDKl3FjXVx/flykCXoUMQTBx741Gt76dqq 2bYth0YL9Wlmk3jRtQN6ddVoGNl0nuFwIclDfQsb9ipbAHY4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfO1Nqjrde/5Vrqyh0Eu6rFoJKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI5OTM4NGEtYzEzZS0z NTkxLThkODMtYzU3MWZlYjNjYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTBUFazVPhESO6WISUdb2IB0l5KCfOAaHhi7Iviu7/u/iEKVlhvGLUL HHR5GrMV22t8GxWQlUEeFtRjC1Wdr9T1QZIGo6o5lgTlzQCX4yUBcU3a5fp59Bww QRIcq7VqLv0Q3Gko3bdftBgEj4Xu7GZ/NqLTHrhabwfnqIBPgOj7SGVT3xiREe3l VZoC6mHeshvl61NCbF6uNSCGEX/GcoYm4egiTe3jVchecxndmTVoXLRT7bkFeuub GpeXtCmTZCHiX1Dh6ff6Ay881vcx0XXOXkZweOIHE8/5Tg1L49cPJz0SyiYZTO5A CdHmZucoGUVM9rBrYR4w38KFFh+Y7fs= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:15 2025 by rpki-client