$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc2dedba-ed67-3967-a4a1-b20ba4317674.roa File: dc2dedba-ed67-3967-a4a1-b20ba4317674.roa (raw, json) Hash identifier: X32roxgi6LVbOPWO3THhWwVT7MhB9E9hiWs2sgUUWJg= Subject key identifier: B2:11:6E:01:DA:D9:33:52:CE:F8:DD:BF:AC:AF:64:9A:60:AF:89:F0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F9AF89939F31C3343A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc2dedba-ed67-3967-a4a1-b20ba4317674.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f9:af:89:93:9f:31:c3:34:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=5bb729bc-2af7-465e-b7b2-5ced08c98c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7f:9c:88:de:17:2f:b7:cc:c1:f4:8c:22:f8: 75:33:40:ff:3f:1c:18:ad:ca:3f:c9:03:6e:54:60: 06:4c:a9:66:62:b8:eb:b3:8f:16:c3:87:bb:75:ee: 9c:81:58:e8:c6:a7:7e:d4:d9:ac:d8:27:b8:59:a9: 90:f5:6c:4f:52:b9:fb:2c:ab:e4:e8:a9:3a:bb:31: 7f:26:3d:e1:06:b7:ac:8c:ed:39:9a:e3:ac:25:07: fc:23:75:c1:4c:46:fa:18:7d:79:ef:5a:26:0a:0a: ad:f3:3f:32:49:e8:6e:e8:66:d5:89:0d:72:23:2d: e2:e0:00:a0:1c:1c:60:e3:3a:b1:e6:7b:73:e2:1f: 70:b1:ac:ac:24:ad:61:6c:7a:11:48:5f:9f:c6:cd: 80:a4:47:e4:17:70:9f:6a:f8:68:82:67:e5:0e:50: 0f:bc:46:a5:dc:40:6d:78:0b:a8:4f:ba:85:f8:bb: 09:f1:01:9a:16:1a:26:3c:21:a6:86:dd:b1:16:26: e9:db:96:c1:56:39:3c:9a:6e:71:26:aa:7f:e6:f6: a0:ea:8b:56:fe:da:64:50:60:fa:ce:e1:c8:6b:72: cb:87:eb:97:fb:39:9d:7a:4e:a6:39:e2:d2:04:6f: a2:5d:22:5b:53:c3:07:24:b8:56:2b:9f:9b:21:86: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:6E:01:DA:D9:33:52:CE:F8:DD:BF:AC:AF:64:9A:60:AF:89:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc2dedba-ed67-3967-a4a1-b20ba4317674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e5:bd:01:a1:c6:7a:f2:4b:13:6a:5f:57:d6:d9:bc:35:79: c7:1b:8b:50:fd:d0:fa:6f:d9:7e:40:4e:be:b7:70:5d:5c:46: 35:86:24:9e:40:46:bb:63:c7:fc:90:06:78:cc:b5:62:a9:f4: 84:06:c2:62:62:12:eb:91:66:aa:b0:cc:4d:84:86:f9:b2:29: 18:74:37:ca:3b:0f:29:34:63:c1:4e:32:31:bf:e0:02:0e:be: e9:60:6e:bc:2b:13:2e:f9:1d:79:f7:05:2f:e0:ed:9d:3a:a8: 2c:44:9f:f2:cb:bc:9c:8f:eb:1f:9d:5e:1d:4c:a6:4c:db:15: 3a:3f:c8:59:bc:bf:dc:56:df:77:b7:2c:5c:44:21:26:a2:7b: 37:74:f0:1f:fa:e7:e1:4d:95:db:18:fa:2e:1a:2b:bd:d8:6a: 46:b6:8a:39:90:bb:f6:95:90:5e:8e:06:87:b3:01:d6:cb:61: 8b:66:37:29:01:05:a3:23:dc:8f:37:59:49:ba:df:a8:b5:64: 7c:43:8a:c6:b8:e8:9c:16:06:ec:b8:95:19:83:15:57:a6:78: 1f:ff:3c:23:1e:1b:b8:ed:33:8c:24:75:9f:75:df:b1:dd:4a: 58:47:2d:9b:47:1a:7a:50:5c:76:d1:b4:54:6a:48:63:f4:2b: ab:1e:17:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvmviZOfMcM0OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NWJiNzI5YmMtMmFmNy00NjVlLWI3YjItNWNlZDA4Yzk4YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X+ciN4XL7fMwfSMIvh1M0D/PxwYrco/yQNu VGAGTKlmYrjrs48Ww4e7de6cgVjoxqd+1Nms2Ce4WamQ9WxPUrn7LKvk6Kk6uzF/ Jj3hBresjO05muOsJQf8I3XBTEb6GH1571omCgqt8z8ySehu6GbViQ1yIy3i4ACg HBxg4zqx5ntz4h9wsaysJK1hbHoRSF+fxs2ApEfkF3CfavhogmflDlAPvEal3EBt eAuoT7qF+LsJ8QGaFhomPCGmht2xFibp25bBVjk8mm5xJqp/5vag6otW/tpkUGD6 zuHIa3LLh+uX+zmdek6mOeLSBG+iXSJbU8MHJLhWK5+bIYaJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIRbgHa2TNSzvjdv6yvZJpgr4nwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGMyZGVkYmEtZWQ2Ny0z OTY3LWE0YTEtYjIwYmE0MzE3Njc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXlvQGhxnrySxNqX1fW2bw1eccbi1D90Ppv2X5ATr63cF1cRjWGJJ5A Rrtjx/yQBnjMtWKp9IQGwmJiEuuRZqqwzE2EhvmyKRh0N8o7Dyk0Y8FOMjG/4AIO vulgbrwrEy75HXn3BS/g7Z06qCxEn/LLvJyP6x+dXh1MpkzbFTo/yFm8v9xW33e3 LFxEISaiezd08B/65+FNldsY+i4aK73Yaka2ijmQu/aVkF6OBoezAdbLYYtmNykB BaMj3I83WUm636i1ZHxDisa46JwWBuy4lRmDFVemeB//PCMeG7jtM4wkdZ9137Hd SlhHLZtHGnpQXHbRtFRqSGP0K6seF0c= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:34 2025 by rpki-client