$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc7e4117-8a10-3461-8eed-5d5b20189598.roa File: bc7e4117-8a10-3461-8eed-5d5b20189598.roa (raw, json) Hash identifier: 9MBLtyL8iJ0loBmXN+Irwhm5j/uMBDCDUebrNORql9A= Subject key identifier: D9:A6:EC:9C:6C:32:5E:E0:A9:2E:16:3A:22:5E:FE:54:66:D4:B4:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F058DB4F52036491BF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc7e4117-8a10-3461-8eed-5d5b20189598.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f0:58:db:4f:52:03:64:91:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=fe73c3a8-d830-47a8-b99c-e1a76138593d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:bc:29:2f:6f:fc:4a:ca:e1:93:06:4c:85: 77:28:fc:76:35:17:cc:51:ae:28:66:b4:d4:6f:09: 47:0e:55:75:3a:1a:2a:f4:10:53:af:4d:63:53:54: 74:fb:9b:84:d2:70:66:94:ea:39:0f:ee:64:38:99: ce:1e:c7:8c:ab:43:b2:98:ff:30:05:3a:63:a4:5a: a4:00:e5:3d:bc:ab:5c:bc:a7:e7:b2:0a:91:32:c7: 97:f9:c8:3c:1f:b7:a6:49:c2:58:22:02:76:f6:00: 60:78:97:41:14:28:20:51:35:92:54:d6:e5:df:76: ae:ef:71:57:77:11:34:99:9b:57:96:e1:63:16:b8: a8:ab:81:6d:f5:30:3b:cc:59:e9:b8:c7:7d:3b:64: 98:83:35:e0:31:8b:e7:de:34:bf:22:94:72:d7:5e: 2d:ab:8f:d5:80:38:4a:ff:e6:73:58:b8:4c:63:1b: 2e:4a:f1:af:dd:0c:e0:9e:5f:0b:92:a3:78:c0:07: 8e:a4:15:bb:6a:7b:be:58:7e:07:e9:81:aa:42:3b: 4b:e8:30:b3:52:59:e1:66:43:27:d2:b6:93:96:bc: 5f:28:dc:20:8c:b1:80:88:1a:b5:cb:5e:53:50:cf: 13:8a:33:ea:56:5a:c6:08:61:53:e2:e7:bb:fd:05: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A6:EC:9C:6C:32:5E:E0:A9:2E:16:3A:22:5E:FE:54:66:D4:B4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc7e4117-8a10-3461-8eed-5d5b20189598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:13:47:d6:9e:9d:4e:4e:59:1a:b1:1c:45:a5:c8:82:cb:f1: 87:18:d0:6e:f4:6f:80:78:98:27:60:18:f6:0d:29:4e:c7:b7: 3e:cd:a8:cd:61:83:41:b9:39:59:fe:ea:9c:5d:d1:0e:9c:b3: 0c:b7:df:e3:c8:1f:8d:0d:f1:ff:80:a4:e2:cf:b0:21:8d:76: d6:77:36:95:c7:47:c5:cf:68:b3:5e:de:b0:b2:dd:67:4c:2a: 57:6b:7d:28:92:2f:c8:1f:73:0b:24:b7:96:41:b0:46:71:17: 65:c5:55:a8:ec:19:0f:cb:65:86:f9:85:2a:e0:0e:41:06:fc: 77:62:9f:c5:84:72:ce:44:67:22:19:73:0a:8a:a5:51:b8:3d: c0:fb:3b:1a:63:08:7e:23:87:6c:45:4b:bb:a9:76:3b:d3:85: 5e:28:0f:6d:4c:49:69:95:a6:3d:8e:30:85:a4:f1:38:05:2c: ab:67:10:ef:a4:90:7b:44:04:f5:f2:17:2c:dd:b2:1f:3e:48: 36:fb:40:32:56:2a:24:79:5e:ea:a2:25:2b:93:2f:bb:6b:4a: ed:6c:29:85:0c:96:27:78:b2:1b:66:08:77:9f:bf:c3:bf:4b: 94:c7:c4:56:a9:e3:15:14:ae:87:f4:53:f5:97:73:f1:39:ff: f6:3e:9d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvBY209SA2SRv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmU3M2MzYTgtZDgzMC00N2E4LWI5OWMtZTFhNzYxMzg1OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlra8KS9v/ErK4ZMGTIV3KPx2NRfMUa4oZrTU bwlHDlV1Ohoq9BBTr01jU1R0+5uE0nBmlOo5D+5kOJnOHseMq0OymP8wBTpjpFqk AOU9vKtcvKfnsgqRMseX+cg8H7emScJYIgJ29gBgeJdBFCggUTWSVNbl33au73FX dxE0mZtXluFjFrioq4Ft9TA7zFnpuMd9O2SYgzXgMYvn3jS/IpRy114tq4/VgDhK /+ZzWLhMYxsuSvGv3Qzgnl8LkqN4wAeOpBW7anu+WH4H6YGqQjtL6DCzUlnhZkMn 0raTlrxfKNwgjLGAiBq1y15TUM8TijPqVlrGCGFT4ue7/QVOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmm7JxsMl7gqS4WOiJe/lRm1LSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmM3ZTQxMTctOGExMC0z NDYxLThlZWQtNWQ1YjIwMTg5NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQTR9aenU5OWRqxHEWlyILL8YcY0G70b4B4mCdgGPYNKU7Htz7NqM1h g0G5OVn+6pxd0Q6cswy33+PIH40N8f+ApOLPsCGNdtZ3NpXHR8XPaLNe3rCy3WdM KldrfSiSL8gfcwskt5ZBsEZxF2XFVajsGQ/LZYb5hSrgDkEG/Hdin8WEcs5EZyIZ cwqKpVG4PcD7OxpjCH4jh2xFS7updjvThV4oD21MSWmVpj2OMIWk8TgFLKtnEO+k kHtEBPXyFyzdsh8+SDb7QDJWKiR5XuqiJSuTL7trSu1sKYUMlid4shtmCHefv8O/ S5THxFap4xUUrof0U/WXc/E5//Y+nRs= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:22 2025 by rpki-client