$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5424360-f4c6-38a1-85e8-df3795db8d0f.roa File: c5424360-f4c6-38a1-85e8-df3795db8d0f.roa (raw, json) Hash identifier: TCHAuAWZCzN3e25rgUyYR5TwYi4hmH8aH7NV9mUtlzg= Subject key identifier: 5F:2F:C9:DF:54:33:8A:35:D6:8F:E6:B9:E4:93:DD:A8:AF:7B:88:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27A9E45A31C362C484700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5424360-f4c6-38a1-85e8-df3795db8d0f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7a:9e:45:a3:1c:36:2c:48:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7eaad43b-cf9f-4251-bb3b-f31aaa738dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:65:a3:6a:4d:f0:d1:12:00:1d:14:0b:6d: e4:1e:85:7a:d4:f8:68:df:90:40:a0:21:36:f7:e5: 22:ca:a7:f0:87:21:43:e5:e2:09:22:96:29:f2:a2: e1:79:a7:0d:e9:5c:30:e9:80:d3:76:f5:0c:5e:7d: 0f:38:a8:aa:53:f1:2d:31:8a:b0:55:33:15:6c:33: 28:29:b7:8e:63:75:cb:0c:d7:16:0b:67:ba:9e:b5: 69:2c:d5:3a:9e:f8:df:78:56:b0:b4:16:ac:36:15: 47:dc:a4:7b:b8:bf:f7:8f:e0:e2:2e:69:e2:b8:f2: 3a:3c:f5:17:4b:60:80:a2:d5:08:db:6b:11:ed:6c: 46:35:a9:5e:5d:c7:8c:0a:5a:a2:4c:34:93:99:04: dd:f9:8d:d1:d3:2b:4d:eb:47:e5:4f:13:53:24:42: 39:2f:84:bf:17:68:c4:b7:4b:a8:6c:af:d6:ed:ce: 30:14:a2:9f:d2:f1:17:00:5a:56:ab:02:76:4d:ed: 50:76:15:82:05:18:a0:b9:fa:cf:aa:3f:8d:7f:6d: c3:27:51:0c:ca:79:7f:db:e3:5b:7c:5a:64:c7:75: 4b:c3:a8:e9:de:03:0c:d1:ec:75:2e:c5:89:61:4d: af:f3:14:96:06:08:cb:4a:fd:7e:5b:dd:55:7c:99: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2F:C9:DF:54:33:8A:35:D6:8F:E6:B9:E4:93:DD:A8:AF:7B:88:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5424360-f4c6-38a1-85e8-df3795db8d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:79:ad:24:19:b4:be:d8:a3:8e:d5:77:2b:db:f0:2a:ae:73: 13:77:b3:9d:e9:d0:16:b6:25:ce:d3:87:34:9e:53:8e:7f:79: e9:60:68:1e:05:79:9e:40:f1:9f:c4:cb:c4:81:cd:bc:1c:76: 85:66:fb:cc:da:0e:4a:fd:d6:91:fb:c3:23:64:73:6f:50:9d: 93:e4:0d:38:a9:61:41:dc:82:9d:65:cf:4e:bf:df:1a:96:f9: 3b:6f:45:fd:cd:72:f9:1a:71:51:59:8b:2c:cd:e5:ff:31:11: e9:1f:21:ab:56:49:66:9f:07:01:66:5a:51:5c:b3:0b:f8:0b: 34:21:17:bf:f4:78:45:3f:90:c3:b9:ed:55:37:9b:14:d6:25: ff:18:ac:6a:f0:82:c2:ea:2a:03:cf:ef:b7:45:15:84:f7:41: 24:72:73:2d:88:d1:90:ad:40:80:22:d4:a6:dd:2f:e8:79:eb: 7b:be:ab:0b:f5:88:5e:32:0d:86:1a:80:1f:73:33:9c:cb:72: b1:05:85:ff:e9:23:46:a1:a7:ae:0a:bc:f8:ef:51:af:3a:d9: 3c:1a:5e:15:e5:53:3d:01:61:a2:8a:f4:0a:78:84:d3:3e:b6: c4:f3:d4:fb:48:89:cb:03:09:1e:41:f7:e9:8e:e1:29:08:c1: a9:5a:7e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nqeRaMcNixIRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2VhYWQ0M2ItY2Y5Zi00MjUxLWJiM2ItZjMxYWFhNzM4ZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7llo2pN8NESAB0UC23kHoV61Pho35BAoCE2 9+UiyqfwhyFD5eIJIpYp8qLheacN6Vww6YDTdvUMXn0POKiqU/EtMYqwVTMVbDMo KbeOY3XLDNcWC2e6nrVpLNU6nvjfeFawtBasNhVH3KR7uL/3j+DiLmniuPI6PPUX S2CAotUI22sR7WxGNaleXceMClqiTDSTmQTd+Y3R0ytN60flTxNTJEI5L4S/F2jE t0uobK/W7c4wFKKf0vEXAFpWqwJ2Te1QdhWCBRigufrPqj+Nf23DJ1EMynl/2+Nb fFpkx3VLw6jp3gMM0ex1LsWJYU2v8xSWBgjLSv1+W91VfJn3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8vyd9UM4o11o/mueST3aive4ihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzU0MjQzNjAtZjRjNi0z OGExLTg1ZTgtZGYzNzk1ZGI4ZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF5rSQZtL7Yo47Vdyvb8CqucxN3s53p0Ba2Jc7ThzSeU45/eelgaB4F eZ5A8Z/Ey8SBzbwcdoVm+8zaDkr91pH7wyNkc29QnZPkDTipYUHcgp1lz06/3xqW +TtvRf3NcvkacVFZiyzN5f8xEekfIatWSWafBwFmWlFcswv4CzQhF7/0eEU/kMO5 7VU3mxTWJf8YrGrwgsLqKgPP77dFFYT3QSRycy2I0ZCtQIAi1KbdL+h563u+qwv1 iF4yDYYagB9zM5zLcrEFhf/pI0ahp64KvPjvUa862TwaXhXlUz0BYaKK9Ap4hNM+ tsTz1PtIicsDCR5B9+mO4SkIwalafvk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:11 2025 by rpki-client