$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9b55ed6-b555-3fa7-ac59-916d9a39aa34.roa File: f9b55ed6-b555-3fa7-ac59-916d9a39aa34.roa (raw, json) Hash identifier: AGFpKM1iXJ3c1nVTkzfaD2tTgEArMkTLBpiKeC4a9Bk= Subject key identifier: D5:74:38:A1:EF:AD:17:93:30:57:27:30:45:85:93:A0:F6:1B:7D:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23334F55727F5D59FF870 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9b55ed6-b555-3fa7-ac59-916d9a39aa34.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.6.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:33:34:f5:57:27:f5:d5:9f:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6a0a1142-d76c-4c3c-af56-bb2fb3a5737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e1:e0:53:d1:8b:cc:32:32:db:89:88:70:db: 8c:64:62:25:1d:21:d0:96:a1:24:31:71:7d:90:26: 7a:ef:32:56:31:e0:fc:ff:7e:36:0a:38:26:ef:a9: 3b:17:5f:aa:aa:5c:74:32:a6:29:91:13:8d:d2:e8: 79:51:ca:b1:63:0d:2b:7a:de:f0:bd:47:4e:91:58: d1:df:eb:be:cf:26:b7:9c:02:99:40:ab:8e:31:f8: 59:dc:24:b7:0d:61:3a:38:b0:cb:21:77:49:32:60: 19:b7:99:6e:bb:6b:b1:d8:54:20:99:9c:cb:c9:bd: 59:e9:1a:dc:9a:37:ce:8a:3c:0d:0e:e0:9b:46:e2: c7:85:40:e0:d3:5a:e1:7c:59:c7:22:7e:b0:c5:b1: bb:10:f8:99:5a:b3:08:be:e7:43:72:7f:d5:83:e7: 11:c4:d7:99:dd:46:e5:06:11:a0:32:61:ee:f2:d5: 26:f8:7a:35:da:0a:9e:13:2d:be:47:f7:3e:c9:9c: 6c:ae:3e:37:19:81:95:68:79:bc:be:5d:7a:98:23: e9:f7:51:03:8c:67:65:11:0c:55:3f:04:b3:e0:e7: 2e:f5:8b:ba:e0:f5:06:32:7b:00:b0:d1:82:b6:74: 79:fc:20:c2:0f:f0:6e:d5:4d:33:68:ac:05:16:ba: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:38:A1:EF:AD:17:93:30:57:27:30:45:85:93:A0:F6:1B:7D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9b55ed6-b555-3fa7-ac59-916d9a39aa34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:58:fe:1f:6f:68:31:29:4f:6a:1e:64:91:50:4e:b9:bb:db: de:96:11:d2:1a:76:bc:02:fc:3d:61:4f:5f:a8:12:17:81:d0: 35:94:96:6b:41:f4:69:32:54:58:04:55:a1:dd:9d:a3:9a:45: d0:0d:f4:ee:98:44:b1:7f:4d:04:0a:89:05:bd:28:11:06:9e: 68:9b:7f:89:41:24:40:b5:27:cd:19:89:74:b0:f1:e5:80:2f: 7b:54:0f:03:2e:96:53:dd:6f:46:36:ab:f3:16:33:da:d1:31: 9a:cb:41:80:27:e2:0c:c5:02:42:7a:e1:a0:54:a3:d4:fd:ab: 17:a9:51:e3:3c:de:eb:d8:9e:ad:31:ca:2f:0b:52:34:04:7e: a3:f1:9d:29:09:65:c2:bf:7c:c8:a8:e4:22:4f:90:c5:ec:a0: 80:a7:42:9e:45:ff:66:03:ad:f8:c5:9d:87:46:3a:5c:25:2a: 4b:1c:7a:c5:bd:87:43:46:f4:76:13:bb:e5:07:c1:7f:7e:3e: f1:b0:bd:f3:13:55:83:b8:64:7a:d0:25:d5:9f:c6:8b:6c:d3: ab:61:95:da:40:31:7a:c6:80:6e:3f:4c:05:aa:bb:30:9e:6d: 13:25:d6:55:72:7c:51:ee:55:75:20:96:76:0c:2a:43:4a:42: a1:ce:45:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jM09Vcn9dWf+HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmEwYTExNDItZDc2Yy00YzNjLWFmNTYtYmIyZmIzYTU3MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eHgU9GLzDIy24mIcNuMZGIlHSHQlqEkMXF9 kCZ67zJWMeD8/342Cjgm76k7F1+qqlx0MqYpkRON0uh5UcqxYw0ret7wvUdOkVjR 3+u+zya3nAKZQKuOMfhZ3CS3DWE6OLDLIXdJMmAZt5luu2ux2FQgmZzLyb1Z6Rrc mjfOijwNDuCbRuLHhUDg01rhfFnHIn6wxbG7EPiZWrMIvudDcn/Vg+cRxNeZ3Ubl BhGgMmHu8tUm+Ho12gqeEy2+R/c+yZxsrj43GYGVaHm8vl16mCPp91EDjGdlEQxV PwSz4Ocu9Yu64PUGMnsAsNGCtnR5/CDCD/Bu1U0zaKwFFrq33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV0OKHvrReTMFcnMEWFk6D2G32dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjliNTVlZDYtYjU1NS0z ZmE3LWFjNTktOTE2ZDlhMzlhYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRY/h9vaDEpT2oeZJFQTrm7296WEdIadrwC/D1hT1+oEheB0DWUlmtB 9GkyVFgEVaHdnaOaRdAN9O6YRLF/TQQKiQW9KBEGnmibf4lBJEC1J80ZiXSw8eWA L3tUDwMullPdb0Y2q/MWM9rRMZrLQYAn4gzFAkJ64aBUo9T9qxepUeM83uvYnq0x yi8LUjQEfqPxnSkJZcK/fMio5CJPkMXsoICnQp5F/2YDrfjFnYdGOlwlKkscesW9 h0NG9HYTu+UHwX9+PvGwvfMTVYO4ZHrQJdWfxots06thldpAMXrGgG4/TAWquzCe bRMl1lVyfFHuVXUglnYMKkNKQqHORQ4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:44 2025 by rpki-client