$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa File: e8225f6e-5293-3022-a030-8e64395c90ee.roa (raw, json) Hash identifier: 06bBPeTa4aP6GY4HCpaiTMUk/OcqjXb4f1XSuY+35o8= Subject key identifier: 4E:0B:7C:FC:9F:AC:2A:ED:41:CB:78:2E:30:B6:D6:E0:D6:BB:DC:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21EB3437C1665470830C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.107.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1e:b3:43:7c:16:65:47:08:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bc2ad982-28e3-45f0-b376-b5abfbe24cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:53:43:7a:32:ec:13:14:bd:d0:34:aa:90:39: 0c:e5:6a:75:bc:c5:68:55:4d:2a:ad:c0:bd:4a:35: d5:e9:30:93:64:7b:54:81:e3:0d:d1:b2:13:03:a4: 9b:16:c1:69:29:b1:57:29:76:f6:f8:eb:ea:6c:74: 67:0c:ca:dd:bb:41:c5:2c:03:52:cf:f8:57:f9:45: 44:40:45:ce:48:08:a7:25:13:eb:94:a1:e3:2d:c0: 5c:99:02:0b:20:2b:d3:1a:28:64:c0:11:6d:23:dd: 61:7c:63:92:ac:41:f3:6e:4b:bf:37:35:c7:e7:ed: e0:d3:43:4e:d0:f2:06:af:50:44:84:99:04:5e:34: d5:61:3b:ba:8e:3a:1a:73:7b:5c:76:e3:fb:4c:8b: e9:b6:b4:99:52:70:84:26:4e:6b:5e:d3:1c:5f:83: d0:78:e6:1f:aa:7e:f5:2f:86:ea:f4:db:03:34:86: 94:ab:8c:f1:8f:46:31:9c:c5:70:de:1d:9b:4d:e7: e5:cf:8c:90:3e:36:33:e0:5e:9c:09:ef:de:27:ad: 66:0c:14:e9:f3:4f:84:e9:46:a3:03:b5:5d:c7:6c: 4e:82:e4:39:4d:42:43:f5:41:f4:45:a3:00:31:0d: 8d:d0:fe:63:57:80:f7:06:12:b5:a0:56:2b:9a:3b: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0B:7C:FC:9F:AC:2A:ED:41:CB:78:2E:30:B6:D6:E0:D6:BB:DC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bc:fd:86:5d:d0:31:78:f0:f1:35:74:70:f2:6a:f4:65:fa: c6:ed:5e:02:a0:ec:27:9c:e4:32:83:92:44:bc:d8:2e:29:10: c2:91:01:30:4f:12:72:43:50:bf:86:5d:7c:fc:00:78:54:1d: b0:8e:4f:f5:81:32:6c:14:5e:ac:a2:57:77:6f:cc:70:74:61: fd:7f:da:c5:4f:f1:b6:94:a0:72:15:d6:86:60:01:e1:9e:b3: 84:cf:f0:ee:64:0e:c0:42:f4:29:33:8a:a3:0a:a4:ba:6a:a8: 07:aa:d1:95:85:d9:43:2d:78:03:18:b3:ef:da:c0:a1:6a:25: 3e:f0:b9:14:2f:81:f5:e5:18:10:08:b6:b6:95:3c:94:cc:d0: e0:21:1f:ad:21:23:ae:70:18:1c:cb:1c:32:f9:d9:71:90:a5: bf:59:6f:95:6f:16:0b:98:9a:60:d6:40:85:0f:96:d9:c9:91: d7:83:38:38:25:5f:01:b5:66:02:59:34:4e:c7:41:ba:70:24: c8:15:45:c4:e9:da:94:60:e4:16:06:33:33:cb:ad:a0:57:b9: 62:1c:a3:02:aa:da:82:f5:cf:47:79:82:2d:75:83:e1:a2:fd: aa:41:19:32:56:c3:10:b1:ea:6a:77:d0:c7:ba:9f:3f:26:ea: 62:3e:e0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28h6zQ3wWZUcIMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmMyYWQ5ODItMjhlMy00NWYwLWIzNzYtYjVhYmZiZTI0Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVNDejLsExS90DSqkDkM5Wp1vMVoVU0qrcC9 SjXV6TCTZHtUgeMN0bITA6SbFsFpKbFXKXb2+OvqbHRnDMrdu0HFLANSz/hX+UVE QEXOSAinJRPrlKHjLcBcmQILICvTGihkwBFtI91hfGOSrEHzbku/NzXH5+3g00NO 0PIGr1BEhJkEXjTVYTu6jjoac3tcduP7TIvptrSZUnCEJk5rXtMcX4PQeOYfqn71 L4bq9NsDNIaUq4zxj0YxnMVw3h2bTeflz4yQPjYz4F6cCe/eJ61mDBTp80+E6Uaj A7Vdx2xOguQ5TUJD9UH0RaMAMQ2N0P5jV4D3BhK1oFYrmjsPMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4LfPyfrCrtQct4LjC21uDWu9zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTgyMjVmNmUtNTI5My0z MDIyLWEwMzAtOGU2NDM5NWM5MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS8/YZd0DF48PE1dHDyavRl+sbtXgKg7Cec5DKDkkS82C4pEMKRATBP EnJDUL+GXXz8AHhUHbCOT/WBMmwUXqyiV3dvzHB0Yf1/2sVP8baUoHIV1oZgAeGe s4TP8O5kDsBC9CkziqMKpLpqqAeq0ZWF2UMteAMYs+/awKFqJT7wuRQvgfXlGBAI traVPJTM0OAhH60hI65wGBzLHDL52XGQpb9Zb5VvFguYmmDWQIUPltnJkdeDODgl XwG1ZgJZNE7HQbpwJMgVRcTp2pRg5BYGMzPLraBXuWIcowKq2oL1z0d5gi11g+Gi /apBGTJWwxCx6mp30Me6nz8m6mI+4FU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:45 2025 by rpki-client