$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa File: bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa (raw, json) Hash identifier: YOGX2wBNdsCLvMtUcXtB58TB7CX1Kt1bLosO7msHkC0= Subject key identifier: FB:AB:77:0B:75:F6:29:3F:72:DE:7B:B4:EC:68:37:26:E6:1C:80:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373CE7EEF77DEA7B6AEA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3c:e7:ee:f7:7d:ea:7b:6a:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=19931f8d-c6ec-4fcf-af3c-680dfcf45091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ec:94:9f:ef:84:eb:de:83:19:ea:6e:dd:5f: e7:a9:c1:cc:e2:e9:d2:78:67:d3:cb:73:b6:87:2b: 12:1f:d5:8b:b0:3e:00:c2:a3:5b:73:ce:c0:32:83: 8d:2d:b0:4c:e9:20:7a:53:0c:9e:cd:f9:14:ec:41: 74:03:0f:4d:99:23:f5:8b:9c:e3:0c:d0:98:5b:63: 55:af:73:19:1c:12:2d:5b:20:f4:7e:5c:bd:4f:a6: fb:9e:4c:3d:d5:1d:7a:84:82:17:30:35:6e:07:23: 4a:da:44:fb:c8:bd:42:e2:fb:4e:94:e2:c0:e9:eb: 83:5c:93:c0:9a:ce:7c:71:05:e2:21:64:df:c3:64: f1:81:85:97:40:33:39:05:62:d5:99:41:c2:09:f9: a5:cb:5b:a4:8d:f9:54:17:0a:63:fe:8a:ca:f2:89: 97:14:e1:07:53:b2:19:36:cf:a5:4c:7a:b6:ed:18: 48:5f:60:00:41:c9:ee:aa:f3:06:d6:f5:d1:95:ef: d7:ff:5d:75:08:46:a9:a8:d5:6e:d9:fe:3d:b5:82: 89:01:83:e4:c9:c8:c3:7c:02:49:8d:c6:03:10:3b: cd:44:23:ad:68:5f:30:86:19:08:58:53:bc:d3:87: 7c:84:fb:d0:d8:61:6d:86:1a:81:59:b0:3a:e5:eb: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AB:77:0B:75:F6:29:3F:72:DE:7B:B4:EC:68:37:26:E6:1C:80:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:30:9b:79:2e:28:05:4a:c5:5d:c3:00:0a:d1:87:1c:7d:e5: 4d:f3:af:17:23:25:ed:fb:e3:18:76:28:97:88:86:9f:8b:77: 74:c8:05:3f:cc:c3:35:ab:c4:84:99:db:65:e6:4b:9d:a7:ce: 29:b3:b1:0f:b9:be:16:aa:65:f0:73:3f:55:9a:70:6f:99:4b: f3:ac:2b:8e:a8:c1:ce:bd:27:03:c5:18:2b:d7:6d:57:5b:42: 68:f1:ac:9a:c6:ab:db:d5:8f:0c:fd:2e:d1:72:e2:91:18:27: ab:f1:4f:49:b2:e2:f7:a0:4a:18:87:ba:ed:67:1c:d6:32:db: f8:1a:c6:8e:b8:08:58:96:c5:2d:e2:1c:2e:70:85:2c:e5:bf: 28:a8:4d:ba:97:56:4b:54:7a:7b:17:ac:b1:79:72:fa:19:0c: 81:51:9c:67:b2:11:18:99:e2:b9:ef:fc:a8:8b:5b:97:f7:ad: 40:10:91:7a:36:8f:cf:de:09:5d:68:1c:c1:8f:be:0b:f4:07: b4:e8:43:fc:61:e1:03:dc:e1:14:fd:96:f8:02:cb:16:bf:29: a9:d3:c5:b0:45:ea:5b:25:e6:eb:b5:6c:fb:85:07:d8:35:b5: 9c:8b:6e:92:3b:94:d7:5f:70:e8:af:c1:ab:fb:2f:68:c3:4b: f0:1f:17:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzzn7vd96ntq6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTk5MzFmOGQtYzZlYy00ZmNmLWFmM2MtNjgwZGZjZjQ1MDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeyUn++E696DGepu3V/nqcHM4unSeGfTy3O2 hysSH9WLsD4AwqNbc87AMoONLbBM6SB6UwyezfkU7EF0Aw9NmSP1i5zjDNCYW2NV r3MZHBItWyD0fly9T6b7nkw91R16hIIXMDVuByNK2kT7yL1C4vtOlOLA6euDXJPA ms58cQXiIWTfw2TxgYWXQDM5BWLVmUHCCfmly1ukjflUFwpj/orK8omXFOEHU7IZ Ns+lTHq27RhIX2AAQcnuqvMG1vXRle/X/111CEapqNVu2f49tYKJAYPkycjDfAJJ jcYDEDvNRCOtaF8whhkIWFO804d8hPvQ2GFthhqBWbA65etyXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPurdwt19ik/ct57tOxoNybmHIB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQzYzQwNTYtODg2NS0z YjQ5LThhYjUtNWQ4MzFjZTE2ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADswm3kuKAVKxV3DAArRhxx95U3zrxcjJe374xh2KJeIhp+Ld3TIBT/M wzWrxISZ22XmS52nzimzsQ+5vhaqZfBzP1WacG+ZS/OsK46owc69JwPFGCvXbVdb QmjxrJrGq9vVjwz9LtFy4pEYJ6vxT0my4vegShiHuu1nHNYy2/gaxo64CFiWxS3i HC5whSzlvyioTbqXVktUensXrLF5cvoZDIFRnGeyERiZ4rnv/KiLW5f3rUAQkXo2 j8/eCV1oHMGPvgv0B7ToQ/xh4QPc4RT9lvgCyxa/KanTxbBF6lsl5uu1bPuFB9g1 tZyLbpI7lNdfcOivwav7L2jDS/AfF6k= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:39 2025 by rpki-client