$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa File: c887e197-9d69-3a72-96de-d7082f725307.roa (raw, json) Hash identifier: Qup45yzHMS9ldqB6JeNVX6BTQA2N8z3ayQgEFQVJBVg= Subject key identifier: 1D:70:96:83:BD:B0:6A:8D:97:55:EF:83:B1:2B:59:80:B7:57:64:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20AA137BECC01690C05B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0a:a1:37:be:cc:01:69:0c:05:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=46469413-a6fb-409b-af81-31114296817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:64:6c:06:b3:5a:3b:c7:fd:da:25:fb:a0: 96:77:c2:b6:b5:e4:78:cc:2c:8a:31:83:fd:1b:ee: 90:2f:ec:df:9c:0b:96:c3:5f:a5:0d:6a:6d:5e:bd: 19:e8:91:a1:a6:d0:ba:47:e9:21:f8:32:fc:36:1d: 95:dd:4c:2f:4a:c8:c7:10:89:19:cd:7e:1d:e8:2e: 03:a9:d6:ef:5c:49:18:69:62:2e:ec:6e:3e:da:1a: 4f:6f:01:12:82:27:55:ce:5a:73:b2:9b:4d:e3:a3: 68:b0:32:14:81:18:1f:48:d8:1c:7f:7e:57:fb:33: b0:e2:4c:4a:ff:f0:ed:58:35:5d:b2:3e:cd:d3:de: 2b:98:54:be:64:19:69:9b:20:53:36:c7:21:7d:ff: 58:49:e8:54:f0:69:c8:b8:01:f6:11:6b:4c:1e:03: c2:f6:d3:00:7f:bb:1a:03:ae:5b:2f:cd:ea:f3:7a: e6:7c:b4:28:06:4c:80:71:04:3c:5e:50:38:83:a1: df:c6:7e:56:a1:1b:fa:65:ba:f6:98:2e:61:15:16: 57:22:17:bc:5f:d0:82:f2:43:9d:63:89:1f:7e:fb: 99:e6:a2:ca:35:96:92:9c:fc:da:22:57:33:28:cc: 12:0a:67:76:ec:e1:d2:1f:39:5c:01:76:94:75:53: d5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:96:83:BD:B0:6A:8D:97:55:EF:83:B1:2B:59:80:B7:57:64:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:53:22:8f:d2:8b:a1:38:66:df:43:d7:08:01:2a:81:e3:7a: 82:dc:e7:22:98:99:b5:15:c8:08:e6:77:0b:22:65:6d:af:bb: 14:1e:d4:21:08:6b:31:92:36:ec:72:1b:a9:0e:bc:ec:1e:d9: 8d:ac:0b:2d:84:46:71:c4:e6:06:da:88:f3:59:59:bd:de:a6: 1b:a8:c8:25:87:82:2c:7e:74:3b:fa:a1:ad:6d:f9:c9:fd:5b: 37:16:c4:38:92:79:fd:dd:61:05:a6:cd:23:a1:6a:3c:59:99: 4b:ea:b2:a9:af:44:c1:b3:9a:a8:af:da:ef:93:13:22:1d:f6: a9:74:d3:78:ee:4c:b3:ab:ca:c9:90:b8:8e:87:1b:26:88:2d: d1:54:a3:f8:f4:33:95:a6:e5:be:03:85:ab:2f:29:a4:16:21: 91:37:6e:f7:7a:a1:bf:e4:45:3b:b1:ae:9c:b3:8d:66:49:de: 28:97:45:07:56:12:c0:48:36:e0:08:c2:0c:0a:a6:b6:32:ba: 97:e2:d7:0d:4e:ad:82:45:67:d4:7c:07:79:41:f4:48:9e:9e: 8f:9d:d7:d9:c6:a1:0d:27:21:4d:5e:28:d3:76:41:06:60:21: dc:be:da:04:4f:a3:e0:39:e2:b3:35:af:70:8b:3a:ac:a8:c4: 4f:36:b2:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gqhN77MAWkMBbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDY0Njk0MTMtYTZmYi00MDliLWFmODEtMzExMTQyOTY4MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQhkbAazWjvH/dol+6CWd8K2teR4zCyKMYP9 G+6QL+zfnAuWw1+lDWptXr0Z6JGhptC6R+kh+DL8Nh2V3UwvSsjHEIkZzX4d6C4D qdbvXEkYaWIu7G4+2hpPbwESgidVzlpzsptN46NosDIUgRgfSNgcf35X+zOw4kxK //DtWDVdsj7N094rmFS+ZBlpmyBTNschff9YSehU8GnIuAH2EWtMHgPC9tMAf7sa A65bL83q83rmfLQoBkyAcQQ8XlA4g6Hfxn5WoRv6Zbr2mC5hFRZXIhe8X9CC8kOd Y4kffvuZ5qLKNZaSnPzaIlczKMwSCmd27OHSHzlcAXaUdVPV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1wloO9sGqNl1Xvg7ErWYC3V2QwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzg4N2UxOTctOWQ2OS0z YTcyLTk2ZGUtZDcwODJmNzI1MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtTIo/Si6E4Zt9D1wgBKoHjeoLc5yKYmbUVyAjmdwsiZW2vuxQe1CEI azGSNuxyG6kOvOwe2Y2sCy2ERnHE5gbaiPNZWb3ephuoyCWHgix+dDv6oa1t+cn9 WzcWxDiSef3dYQWmzSOhajxZmUvqsqmvRMGzmqiv2u+TEyId9ql003juTLOrysmQ uI6HGyaILdFUo/j0M5Wm5b4DhasvKaQWIZE3bvd6ob/kRTuxrpyzjWZJ3iiXRQdW EsBINuAIwgwKprYyupfi1w1OrYJFZ9R8B3lB9Eieno+d19nGoQ0nIU1eKNN2QQZg Idy+2gRPo+A54rM1r3CLOqyoxE82sis= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:30 2025 by rpki-client