$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa3a8a55-9ece-3ad8-9553-6553e3ae4d48.roa File: fa3a8a55-9ece-3ad8-9553-6553e3ae4d48.roa (raw, json) Hash identifier: XrRY0wQKdLUPS43xxsEujNfJDH0MbnyM1IOegu1gn48= Subject key identifier: 05:46:50:00:02:98:A7:82:89:CA:DF:D4:08:7A:11:12:9A:45:3E:C2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F294CCC6C63C03CA0AD080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa3a8a55-9ece-3ad8-9553-6553e3ae4d48.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.6.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:94:cc:c6:c6:3c:03:ca:0a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b89beb23-9120-4762-8b40-8598415c78ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:84:28:87:65:e7:93:37:26:73:5c:4e:3f: 15:fb:18:71:2c:76:af:29:3f:a4:95:86:fa:8a:a6: 8f:64:d2:f3:58:d6:c6:02:f4:16:48:76:10:ad:e4: 7d:f9:da:e1:c7:3a:ec:1a:86:47:6a:1c:bf:80:fa: ec:26:ee:ff:40:9c:a2:44:eb:de:0b:14:41:b8:ce: f2:04:be:5c:d8:ff:2c:6b:44:5d:5d:1f:db:d1:cb: 16:76:31:65:b3:b3:81:22:fe:84:02:80:3b:83:af: 2d:00:a1:5a:ed:9f:3d:0f:88:c4:c1:a5:51:8a:c9: 19:eb:6f:7c:90:e5:0a:06:c3:69:43:e7:83:7a:e9: 3e:e4:c0:37:db:ef:85:5e:c2:98:59:ee:d7:bb:68: 7f:3c:0e:ff:7b:3e:0c:42:f7:4c:e3:23:c9:be:68: e3:dc:b8:39:87:54:f0:97:e9:f2:f4:9c:8c:e4:20: cf:a3:d0:bb:51:fc:98:7e:3f:cb:92:91:4c:ce:8a: f7:1f:1b:b1:06:4c:70:4e:d8:43:12:e0:3c:d4:e4: 8e:e6:f7:c4:c2:e6:05:ce:de:de:91:97:d6:a2:9c: 9e:23:42:e4:58:fc:8e:13:ca:6d:e1:4f:db:a3:2d: f4:e7:ca:3f:d9:74:ce:4e:e7:a2:8c:6b:be:fe:66: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:46:50:00:02:98:A7:82:89:CA:DF:D4:08:7A:11:12:9A:45:3E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa3a8a55-9ece-3ad8-9553-6553e3ae4d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:46:9e:12:d4:c0:ca:64:80:cc:ee:08:c6:df:2a:30:2b:b2: 4d:cd:49:70:bc:4d:86:0e:4f:16:61:3b:b4:fd:84:b9:11:6f: 29:35:ed:20:e5:5d:a6:0a:11:51:bb:95:65:0c:2b:2e:93:b3: d0:17:c5:06:4b:ad:de:2d:ae:3b:73:4c:da:a1:d3:99:03:95: a4:fc:b1:70:e9:89:95:9f:59:ec:da:c7:e9:74:64:6a:a9:b9: 34:76:15:69:ad:4e:9a:76:d1:d5:8e:94:b9:01:79:4e:7d:f1: 0d:e0:1d:49:1b:4f:f4:45:eb:3d:39:bc:bc:43:0e:a7:1e:2a: 1f:f4:27:c4:94:5a:58:69:10:70:d8:84:d0:c6:33:2d:15:07: 0c:4d:35:db:4a:57:00:64:5c:ed:6d:7f:22:cc:f4:c4:ef:5f: 81:a8:61:2c:cb:dc:15:1f:34:92:46:7c:9c:61:ff:50:de:94: 6d:ec:df:c4:26:28:61:f3:a2:3f:64:f1:94:a7:c4:bf:1b:03: c0:95:d5:8f:4a:74:3e:1d:c8:8b:12:ac:dc:b6:d5:66:55:09: 14:f3:0a:0c:8a:b1:0a:37:cb:d5:43:16:7d:d2:6a:6c:6b:85: de:85:7f:15:ae:76:fa:23:d4:67:01:9e:cf:b7:26:be:7b:73: 44:d8:12:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pTMxsY8A8oK0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yjg5YmViMjMtOTEyMC00NzYyLThiNDAtODU5ODQxNWM3OGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLqEKIdl55M3JnNcTj8V+xhxLHavKT+klYb6 iqaPZNLzWNbGAvQWSHYQreR9+drhxzrsGoZHahy/gPrsJu7/QJyiROveCxRBuM7y BL5c2P8sa0RdXR/b0csWdjFls7OBIv6EAoA7g68tAKFa7Z89D4jEwaVRiskZ6298 kOUKBsNpQ+eDeuk+5MA32++FXsKYWe7Xu2h/PA7/ez4MQvdM4yPJvmjj3Lg5h1Tw l+ny9JyM5CDPo9C7UfyYfj/LkpFMzor3HxuxBkxwTthDEuA81OSO5vfEwuYFzt7e kZfWopyeI0LkWPyOE8pt4U/boy3058o/2XTOTueijGu+/mZZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVGUAACmKeCicrf1Ah6ERKaRT7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmEzYThhNTUtOWVjZS0z YWQ4LTk1NTMtNjU1M2UzYWU0ZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJGnhLUwMpkgMzuCMbfKjArsk3NSXC8TYYOTxZhO7T9hLkRbyk17SDl XaYKEVG7lWUMKy6Ts9AXxQZLrd4trjtzTNqh05kDlaT8sXDpiZWfWezax+l0ZGqp uTR2FWmtTpp20dWOlLkBeU598Q3gHUkbT/RF6z05vLxDDqceKh/0J8SUWlhpEHDY hNDGMy0VBwxNNdtKVwBkXO1tfyLM9MTvX4GoYSzL3BUfNJJGfJxh/1DelG3s38Qm KGHzoj9k8ZSnxL8bA8CV1Y9KdD4dyIsSrNy21WZVCRTzCgyKsQo3y9VDFn3Samxr hd6FfxWudvoj1GcBns+3Jr57c0TYEmc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:43 2025 by rpki-client