$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c71334f0-2343-383a-965d-b88f2be0f51b.roa File: c71334f0-2343-383a-965d-b88f2be0f51b.roa (raw, json) Hash identifier: 2Oox6ElOT+/F3Nn3rrAz0bPNxtuduIR3Kqs77rvCR/s= Subject key identifier: 87:9D:EB:E9:B9:63:A0:7B:7C:2B:9D:FE:60:3C:28:4A:EB:DC:0A:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C37461E9DA4800779093200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c71334f0-2343-383a-965d-b88f2be0f51b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:46:1e:9d:a4:80:07:79:09:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=06dc218b-76e4-4c28-af5f-bfa579847e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:1f:5f:49:17:40:75:e5:16:b1:be:23:47: b7:f1:6a:69:e4:5e:30:3b:64:51:5c:df:f8:75:a4: 84:38:78:26:a0:f5:5e:1b:bf:84:e4:30:f0:71:5d: f5:6e:ff:2a:b3:d9:48:35:9b:9c:aa:84:d1:4b:f2: 3d:17:c5:ef:82:96:dd:f9:4e:91:1a:90:45:3e:04: 78:7f:ce:fb:8e:a9:f4:df:49:ab:c0:5d:b5:40:9c: da:a3:18:4c:f0:f0:86:e9:96:eb:9f:7b:86:51:2e: 1c:78:3f:b8:13:b5:f0:e6:05:f1:33:31:32:3e:ae: 7e:b9:d1:51:28:b2:96:b7:d6:67:23:54:51:e6:6b: dc:7e:95:9c:46:bc:ab:2e:be:2a:6c:ac:05:f3:97: 7b:a4:93:37:a5:0a:80:73:d0:93:50:61:12:bd:5a: 10:50:07:63:ed:e7:b3:ce:80:b2:56:dc:0a:dc:88: dd:e1:61:dc:d9:b5:f5:3c:3d:30:23:ae:3a:16:81: 6e:65:c0:aa:26:07:01:8e:bb:f3:90:27:7d:a1:65: 17:66:10:80:8e:e0:81:07:09:8c:fb:d8:eb:0c:e1: 4c:94:26:ad:88:3d:9a:93:2c:cb:31:04:76:62:cd: 28:da:f3:a4:2f:be:04:cc:0f:76:5d:ca:db:76:ae: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:EB:E9:B9:63:A0:7B:7C:2B:9D:FE:60:3C:28:4A:EB:DC:0A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c71334f0-2343-383a-965d-b88f2be0f51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:06:80:3c:ed:0c:63:88:30:5e:e8:e0:32:e9:cb:d3:4c:2d: 25:a4:1f:98:d6:6c:10:97:e4:f8:04:6c:a9:c2:fd:1c:bb:b6: 39:ae:37:76:02:a6:d0:f4:00:c5:fe:7e:27:5b:5a:64:0e:6f: 0b:59:3e:7e:0e:57:59:f1:f0:ab:96:6c:24:18:e2:6c:55:c9: 50:d4:08:f3:18:6d:86:d6:e1:7f:03:65:e8:be:1e:2b:b8:26: 14:29:72:36:a4:a9:a5:15:85:2b:d6:22:e7:75:78:cc:2f:cc: d0:e4:ef:31:48:a5:b8:2e:92:b8:3f:f2:0b:7a:a3:5e:f0:9b: a7:14:ff:45:4b:96:8e:37:d9:53:cb:b5:b1:99:cb:03:60:92: 49:95:30:72:eb:a2:a7:ac:da:c5:5d:50:74:99:8a:2e:2c:11: b7:53:ff:0e:82:7d:6e:e4:43:6c:a3:f5:93:88:95:04:3c:d1: cd:26:41:48:f1:d3:c8:82:00:1a:bf:da:89:8d:03:e9:ac:ba: 3f:e3:cf:a5:5e:8c:3d:16:6e:15:52:18:1e:f8:57:a2:75:94: c5:11:f9:17:bf:a0:31:e6:48:bd:d4:6e:73:bd:8c:ff:21:a8: fc:2c:c7:06:18:fd:f3:59:3b:7b:2d:94:71:f3:10:7b:42:fd: b1:20:e7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0YenaSAB3kJMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDZkYzIxOGItNzZlNC00YzI4LWFmNWYtYmZhNTc5ODQ3ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q0fX0kXQHXlFrG+I0e38Wpp5F4wO2RRXN/4 daSEOHgmoPVeG7+E5DDwcV31bv8qs9lINZucqoTRS/I9F8Xvgpbd+U6RGpBFPgR4 f877jqn030mrwF21QJzaoxhM8PCG6Zbrn3uGUS4ceD+4E7Xw5gXxMzEyPq5+udFR KLKWt9ZnI1RR5mvcfpWcRryrLr4qbKwF85d7pJM3pQqAc9CTUGESvVoQUAdj7eez zoCyVtwK3Ijd4WHc2bX1PD0wI646FoFuZcCqJgcBjrvzkCd9oWUXZhCAjuCBBwmM +9jrDOFMlCatiD2akyzLMQR2Ys0o2vOkL74EzA92Xcrbdq5aKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIed6+m5Y6B7fCud/mA8KErr3ArbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzcxMzM0ZjAtMjM0My0z ODNhLTk2NWQtYjg4ZjJiZTBmNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4GgDztDGOIMF7o4DLpy9NMLSWkH5jWbBCX5PgEbKnC/Ry7tjmuN3YC ptD0AMX+fidbWmQObwtZPn4OV1nx8KuWbCQY4mxVyVDUCPMYbYbW4X8DZei+Hiu4 JhQpcjakqaUVhSvWIud1eMwvzNDk7zFIpbgukrg/8gt6o17wm6cU/0VLlo432VPL tbGZywNgkkmVMHLroqes2sVdUHSZii4sEbdT/w6CfW7kQ2yj9ZOIlQQ80c0mQUjx 08iCABq/2omNA+msuj/jz6VejD0WbhVSGB74V6J1lMUR+Re/oDHmSL3UbnO9jP8h qPwsxwYY/fNZO3stlHHzEHtC/bEg54Y= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:13 2025 by rpki-client