$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4cefeec-f515-387e-9de5-a1057ccf8412.roa File: d4cefeec-f515-387e-9de5-a1057ccf8412.roa (raw, json) Hash identifier: Y7FqqEmajvcvyIFTIFeLnFIuXLaLznTXUq36o6OYyfI= Subject key identifier: 13:4C:CB:7D:D4:4B:BC:CA:99:E9:CA:3F:CE:5F:42:FE:2A:95:66:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F235D04E6E8E51952F4440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4cefeec-f515-387e-9de5-a1057ccf8412.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.111.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:35:d0:4e:6e:8e:51:95:2f:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=581ce076-fc8d-447c-af39-b9bd1a09c6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:d5:a7:77:00:77:3e:fa:33:37:1e:cc:27: 51:db:5a:bb:4d:4c:f2:d5:85:7e:25:d7:f5:9d:e6: bf:85:33:50:aa:6a:89:7a:24:16:dd:ef:55:db:c4: b4:84:7b:40:53:b3:f6:23:7b:ab:bc:a0:8a:c9:a4: f3:1e:04:74:7c:23:00:1c:ae:1c:f9:08:46:0b:5f: e7:80:8c:74:81:cd:76:d9:ba:d4:48:f8:cd:76:5a: fb:7f:4f:2e:f1:44:86:0a:6d:0b:7d:0c:77:25:c9: dd:cd:75:1a:c4:e9:33:ee:03:21:5e:82:04:a6:98: e2:82:00:cb:b7:6f:ef:6c:1b:d4:62:6a:b5:47:11: fd:48:dc:5d:11:f7:d3:52:e7:3a:64:03:94:e6:7b: 3d:d5:54:79:7a:a8:77:8d:00:16:0a:94:ad:72:63: 8a:c7:ca:51:66:12:57:12:bf:49:5c:9e:2f:2c:80: 39:c1:a9:b1:c3:02:2c:74:de:66:66:36:d5:4c:f5: 6c:68:76:1c:ee:da:fe:66:52:6f:e8:03:06:05:4d: 7e:74:d0:f7:f0:f5:f9:43:0f:a7:30:3f:da:fd:42: 17:90:6a:2e:39:08:2b:8a:9c:e7:08:e9:9f:e3:00: 81:9f:ed:83:34:1e:9f:db:54:3e:13:53:2e:ef:34: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4C:CB:7D:D4:4B:BC:CA:99:E9:CA:3F:CE:5F:42:FE:2A:95:66:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4cefeec-f515-387e-9de5-a1057ccf8412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b5:70:ee:7a:b3:34:63:c3:b7:07:29:21:31:ec:21:94:e8: e2:6e:ee:8d:48:0d:96:c8:a0:e5:3d:1d:2d:ea:41:58:7b:38: b8:89:95:a2:9e:d4:e6:fa:d2:d9:af:75:ec:1e:3c:ef:d0:e6: 4e:8b:00:83:31:3d:a4:24:5c:e1:2c:2f:a9:ca:61:32:ed:0b: 88:3f:f7:1c:dc:4c:0e:5c:c7:b5:6e:08:80:aa:d4:94:0e:53: 4c:48:99:50:3a:6e:6d:6b:2d:f8:94:49:94:4c:07:26:13:49: ef:8c:65:c1:43:d7:dc:1f:2c:c3:ca:0f:c2:b6:0f:bf:b2:40: 1f:1d:cf:ed:01:dd:d7:99:33:1a:fe:0d:98:66:ee:80:e9:ec: 17:4c:36:4c:55:2d:7d:e0:08:cc:d7:bd:93:be:7c:0d:5c:5d: ba:ec:a6:60:0c:6d:aa:3d:34:34:ce:1b:51:8d:9e:14:1c:95: a7:a7:68:9e:07:ba:28:9c:d4:61:ab:9a:af:9f:02:5b:17:48: fc:d1:c9:0d:08:78:1f:f3:5e:f1:c1:53:95:1f:d5:f3:6d:ac: b0:bc:f3:65:20:41:83:f8:52:4f:b8:34:93:f0:70:b0:36:32: ad:6a:96:e6:a0:c8:7e:c8:32:4d:8e:eb:53:9a:00:1f:92:9e: 76:53:30:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jXQTm6OUZUvREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTgxY2UwNzYtZmM4ZC00NDdjLWFmMzktYjliZDFhMDljNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6rVp3cAdz76MzcezCdR21q7TUzy1YV+Jdf1 nea/hTNQqmqJeiQW3e9V28S0hHtAU7P2I3urvKCKyaTzHgR0fCMAHK4c+QhGC1/n gIx0gc122brUSPjNdlr7f08u8USGCm0LfQx3JcndzXUaxOkz7gMhXoIEppjiggDL t2/vbBvUYmq1RxH9SNxdEffTUuc6ZAOU5ns91VR5eqh3jQAWCpStcmOKx8pRZhJX Er9JXJ4vLIA5wamxwwIsdN5mZjbVTPVsaHYc7tr+ZlJv6AMGBU1+dND38PX5Qw+n MD/a/UIXkGouOQgripznCOmf4wCBn+2DNB6f21Q+E1Mu7zSMpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNMy33US7zKmenKP85fQv4qlWZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDRjZWZlZWMtZjUxNS0z ODdlLTlkZTUtYTEwNTdjY2Y4NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC1cO56szRjw7cHKSEx7CGU6OJu7o1IDZbIoOU9HS3qQVh7OLiJlaKe 1Ob60tmvdewePO/Q5k6LAIMxPaQkXOEsL6nKYTLtC4g/9xzcTA5cx7VuCICq1JQO U0xImVA6bm1rLfiUSZRMByYTSe+MZcFD19wfLMPKD8K2D7+yQB8dz+0B3deZMxr+ DZhm7oDp7BdMNkxVLX3gCMzXvZO+fA1cXbrspmAMbao9NDTOG1GNnhQclaenaJ4H uiic1GGrmq+fAlsXSPzRyQ0IeB/zXvHBU5Uf1fNtrLC882UgQYP4Uk+4NJPwcLA2 Mq1qluagyH7IMk2O61OaAB+SnnZTMPA= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:52 2025 by rpki-client