$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbcddd25-b88d-38b0-b0ac-abc9c8448d38.roa File: dbcddd25-b88d-38b0-b0ac-abc9c8448d38.roa (raw, json) Hash identifier: JWbJxga7diywPUn1kBwUucNxDZcnhuIFDcogDfe5JP8= Subject key identifier: 89:D4:C7:E4:DB:B8:FA:15:EB:A5:B1:40:99:61:B0:B1:EC:95:D6:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26C7CD100C5A00F63ED80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbcddd25-b88d-38b0-b0ac-abc9c8448d38.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 174.68.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6c:7c:d1:00:c5:a0:0f:63:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bd95ff96-509c-4cb4-806a-433692fe8645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:bd:79:b1:2c:6d:a8:b4:07:49:d3:fa:57: 33:40:51:f4:79:a2:13:df:c0:ac:5a:e1:c9:a9:03: 0a:38:0a:ff:a7:64:56:d6:e5:1d:3e:c6:d0:33:21: a6:e4:5c:e3:19:c2:37:bc:1c:6c:95:d6:80:64:37: f2:c1:89:5d:8b:3a:e1:84:4a:fe:96:b8:9c:8f:93: a2:f7:5c:77:0c:fa:36:10:d7:33:63:eb:ce:cf:6b: f6:eb:79:1e:87:ef:0b:c5:b9:4f:80:83:e9:e9:3c: 5e:19:60:1b:1b:a5:b7:4d:f6:18:e1:f5:66:a7:f7: 17:2d:0c:33:a1:f4:8c:e4:86:1a:f9:b7:cd:5f:79: 85:d0:4c:87:96:66:b0:45:f8:8b:ab:05:0c:e6:5e: f6:88:5f:71:37:61:84:4c:63:4e:57:28:00:cb:d8: d5:4e:da:09:bb:5f:d5:4f:15:2b:04:40:7d:8b:a3: 6b:42:44:0e:27:75:d9:e1:17:f3:86:50:ab:a8:fa: c5:39:ba:3a:22:f2:8c:e9:0e:81:b8:ee:01:b6:46: 63:59:ca:de:99:f2:77:19:a3:d3:a0:80:6d:c4:4a: d3:e8:06:15:38:b6:94:ac:69:d7:64:cc:30:70:e1: 8f:74:c2:83:2d:b6:15:52:6a:49:41:21:9d:95:08: 77:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:C7:E4:DB:B8:FA:15:EB:A5:B1:40:99:61:B0:B1:EC:95:D6:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbcddd25-b88d-38b0-b0ac-abc9c8448d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:14:3a:12:21:ff:a9:ce:2e:c3:1a:3f:67:e9:e8:0e:57:c3: 96:1b:b6:b7:0e:f8:81:a2:13:77:32:7e:64:88:93:9b:59:1c: 5e:02:a5:4e:63:29:47:96:82:96:ba:b3:37:2e:ce:c8:24:a7: 5d:ae:71:36:d8:d0:b8:1b:b2:1a:2f:55:e0:1d:67:e7:4d:f5: f9:80:75:75:92:20:ca:e5:b1:3e:65:4d:aa:9a:2d:42:02:f1: 0e:c4:68:69:45:a8:5c:cb:cd:86:a7:90:10:fc:35:fd:27:5f: 26:7d:e3:c3:ea:d2:ca:3c:38:f5:47:16:d7:15:e6:cd:96:08: 13:98:b3:a2:2d:28:b0:bf:d8:1b:c5:f3:18:e0:8b:a2:24:55: 47:84:1a:f1:7b:bc:cd:88:e6:4c:e1:7c:5b:2d:cf:db:5f:b3: 54:67:8c:cb:2d:37:3a:90:21:b7:b4:8b:57:ab:b6:63:b7:13: e8:d6:89:00:b4:80:2e:1e:0b:bd:9c:43:66:b2:74:0b:b6:92: e2:69:24:86:87:22:36:98:29:06:d4:91:08:06:57:24:5c:62: 29:63:80:83:fb:be:00:5c:ae:10:43:c5:5e:71:12:c5:4b:66: 60:15:96:75:99:8c:19:dd:f1:26:5b:c1:73:60:93:a2:b4:66: 35:ba:6d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mx80QDFoA9j7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmQ5NWZmOTYtNTA5Yy00Y2I0LTgwNmEtNDMzNjkyZmU4NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ra9ebEsbai0B0nT+lczQFH0eaIT38CsWuHJ qQMKOAr/p2RW1uUdPsbQMyGm5FzjGcI3vBxsldaAZDfywYldizrhhEr+lricj5Oi 91x3DPo2ENczY+vOz2v263keh+8LxblPgIPp6TxeGWAbG6W3TfYY4fVmp/cXLQwz ofSM5IYa+bfNX3mF0EyHlmawRfiLqwUM5l72iF9xN2GETGNOVygAy9jVTtoJu1/V TxUrBEB9i6NrQkQOJ3XZ4RfzhlCrqPrFObo6IvKM6Q6BuO4BtkZjWcremfJ3GaPT oIBtxErT6AYVOLaUrGnXZMwwcOGPdMKDLbYVUmpJQSGdlQh3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInUx+TbuPoV66WxQJlhsLHsldagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGJjZGRkMjUtYjg4ZC0z OGIwLWIwYWMtYWJjOWM4NDQ4ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYUOhIh/6nOLsMaP2fp6A5Xw5YbtrcO+IGiE3cyfmSIk5tZHF4CpU5j KUeWgpa6szcuzsgkp12ucTbY0LgbshovVeAdZ+dN9fmAdXWSIMrlsT5lTaqaLUIC 8Q7EaGlFqFzLzYankBD8Nf0nXyZ948Pq0so8OPVHFtcV5s2WCBOYs6ItKLC/2BvF 8xjgi6IkVUeEGvF7vM2I5kzhfFstz9tfs1RnjMstNzqQIbe0i1ertmO3E+jWiQC0 gC4eC72cQ2aydAu2kuJpJIaHIjaYKQbUkQgGVyRcYiljgIP7vgBcrhBDxV5xEsVL ZmAVlnWZjBnd8SZbwXNgk6K0ZjW6bfs= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:01 2025 by rpki-client