$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa File: cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa (raw, json) Hash identifier: i11Qa+2K+EspS1tFa9y6Em+31ECgkZlfznEyhALonGo= Subject key identifier: 0F:18:D1:05:6E:4A:C1:55:E6:90:CD:92:27:21:C8:0F:20:0D:15:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F25059E9C1C254C4559F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:50:59:e9:c1:c2:54:c4:55:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e584da9f-33b3-43ec-8abd-fd4f2e58010b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9a:43:27:c2:4d:dd:87:5f:51:50:9a:c0:9e: a4:b7:2d:8e:11:c0:29:2f:c4:88:96:4c:dc:09:55: 8c:f3:bb:ca:6a:09:74:8b:34:0c:14:cb:26:0e:63: f8:c1:f3:1c:4d:c8:f0:22:d3:d2:bb:f7:0d:3b:d1: d1:36:73:41:05:49:ee:89:1b:1f:3c:4f:ee:65:02: 00:ef:9d:22:53:21:78:65:b1:9b:1a:c9:22:95:4a: 51:04:f6:d0:8a:c0:2b:92:6d:d4:46:3e:5a:73:b5: de:44:9d:2b:ab:c8:05:71:43:bf:41:00:92:0f:a3: f3:46:6d:97:db:e6:e5:58:c1:0c:d6:71:79:0c:85: 6b:9e:65:ec:79:8b:8f:5d:15:6a:ac:6f:6e:72:e6: 6a:11:49:43:9a:d4:5a:35:2b:b0:be:75:ae:ad:c6: 54:b6:0c:a4:1f:db:1c:63:3b:76:84:9a:db:71:fe: d7:dd:ed:e8:7e:20:cc:c8:8f:6c:b0:fe:61:16:0f: da:e3:51:69:64:a5:57:2a:87:b9:47:2f:73:04:60: f9:99:04:60:99:4b:2f:3a:41:06:5d:0d:ee:fc:7e: 7f:78:56:01:de:9d:22:8a:8e:32:1f:ff:0e:4f:8d: 73:63:99:ce:fd:7e:a5:af:8f:5b:dd:73:4c:6e:b7: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:18:D1:05:6E:4A:C1:55:E6:90:CD:92:27:21:C8:0F:20:0D:15:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1f:c3:2e:11:7a:83:b1:6e:5d:0d:22:07:b1:e4:d8:a3:8f: ff:4f:d6:dd:cd:98:0a:71:0b:24:dc:a6:21:66:d6:24:3c:96: 5a:c3:39:49:eb:31:13:31:ec:ae:7d:85:db:30:65:36:ae:19: a8:02:e5:45:26:a2:c7:46:d3:b2:4e:48:58:33:3f:ae:b3:ab: 44:64:08:10:89:08:08:bb:d7:1f:7b:ff:ac:f8:8b:27:6d:2c: f9:7a:56:8e:4b:60:bf:e6:78:33:6e:15:4f:e3:b1:01:37:a9: f7:4e:d8:b6:8b:eb:4d:1c:55:d5:5f:28:96:39:fd:43:06:7d: af:f3:41:ab:1b:89:f7:da:54:9b:67:f9:7a:14:9a:a3:af:38: be:b5:2f:d8:49:ba:04:a2:0d:81:e9:3e:11:47:f6:35:23:ce: b4:1d:e4:91:aa:54:85:50:fc:9f:77:14:11:6c:5c:5e:f7:01: 51:ad:3f:17:43:3a:55:03:0d:4a:e0:2c:41:e8:6e:04:d2:a6: e1:08:23:44:03:cf:dd:b0:49:0b:b2:e0:b9:b8:45:7c:9d:d0: 29:ba:45:41:82:64:f7:24:20:cc:7a:b8:99:3a:c0:5f:9d:b3: 70:95:94:e4:7f:48:33:cb:54:e0:c3:3e:3f:8c:dd:a0:88:f0: 93:08:ee:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lBZ6cHCVMRVnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTU4NGRhOWYtMzNiMy00M2VjLThhYmQtZmQ0ZjJlNTgwMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5pDJ8JN3YdfUVCawJ6kty2OEcApL8SIlkzc CVWM87vKagl0izQMFMsmDmP4wfMcTcjwItPSu/cNO9HRNnNBBUnuiRsfPE/uZQIA 750iUyF4ZbGbGskilUpRBPbQisArkm3URj5ac7XeRJ0rq8gFcUO/QQCSD6PzRm2X 2+blWMEM1nF5DIVrnmXseYuPXRVqrG9ucuZqEUlDmtRaNSuwvnWurcZUtgykH9sc Yzt2hJrbcf7X3e3ofiDMyI9ssP5hFg/a41FpZKVXKoe5Ry9zBGD5mQRgmUsvOkEG XQ3u/H5/eFYB3p0iio4yH/8OT41zY5nO/X6lr49b3XNMbrcghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8Y0QVuSsFV5pDNkichyA8gDRWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q3ZWE4ZDItOGJhOS0z MmVhLWEzMTEtNmJiMTIwNWYzZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEfwy4ReoOxbl0NIgex5Nijj/9P1t3NmApxCyTcpiFm1iQ8llrDOUnr MRMx7K59hdswZTauGagC5UUmosdG07JOSFgzP66zq0RkCBCJCAi71x97/6z4iydt LPl6Vo5LYL/meDNuFU/jsQE3qfdO2LaL600cVdVfKJY5/UMGfa/zQasbiffaVJtn +XoUmqOvOL61L9hJugSiDYHpPhFH9jUjzrQd5JGqVIVQ/J93FBFsXF73AVGtPxdD OlUDDUrgLEHobgTSpuEII0QDz92wSQuy4Lm4RXyd0Cm6RUGCZPckIMx6uJk6wF+d s3CVlOR/SDPLVODDPj+M3aCI8JMI7no= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:16 2025 by rpki-client