$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd70da93-2612-3a89-b76a-5874dfa8b9c5.roa File: fd70da93-2612-3a89-b76a-5874dfa8b9c5.roa (raw, json) Hash identifier: q0CkTE8q+laPlDxwqjhMR8EsIuVG23AZ5cD1SHm3wOs= Subject key identifier: 31:FC:1B:C5:B9:FA:5A:CB:03:E9:33:B2:43:5B:FE:9E:AA:B7:34:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21E35807E29E6F0E52140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd70da93-2612-3a89-b76a-5874dfa8b9c5.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1e:35:80:7e:29:e6:f0:e5:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d3003843-7bad-4801-b635-78b23de0294a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:bf:44:ab:10:fb:1a:7e:18:bc:28:37:9c: 87:e3:4a:d4:8c:3d:ba:0a:21:e3:fa:d1:25:8a:d8: c0:0e:d5:49:07:c5:4c:13:f8:42:63:a3:87:e5:dc: 67:e8:6c:b1:a0:64:cc:c4:8d:79:09:ee:19:08:10: ac:a3:9f:e5:cc:de:92:46:de:d2:34:dd:b7:19:a8: f1:ff:f2:16:2d:9c:eb:88:0d:4f:ed:3d:35:8e:a7: b9:5e:1f:46:55:11:d5:11:98:5a:32:f4:65:9d:a5: 18:96:12:2e:34:74:40:5e:d8:d7:49:97:31:29:0f: a7:d8:de:f3:4b:98:f2:70:8f:e1:e7:f2:4a:39:9b: 61:15:5b:9a:fb:52:fc:e0:39:14:e1:c6:60:e7:4f: c8:f5:1d:da:24:0d:3a:71:4d:fe:6a:8c:19:05:dc: e0:9e:9a:60:96:5a:40:b6:23:73:03:b7:6c:7a:46: 09:4f:6e:d5:96:9e:7e:f0:ee:88:83:77:c0:51:af: 11:87:e9:dd:68:fe:8d:26:a7:69:91:ad:28:50:00: af:dc:63:38:f0:b7:ca:d5:47:37:fd:ff:d4:9b:56: 38:c8:c5:43:e1:c5:2b:ce:d1:9a:1a:ba:9a:3d:b4: db:5c:b0:ce:b7:15:40:0d:e6:e8:20:10:77:e0:cc: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:1B:C5:B9:FA:5A:CB:03:E9:33:B2:43:5B:FE:9E:AA:B7:34:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd70da93-2612-3a89-b76a-5874dfa8b9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:55:4c:8a:ab:9c:0a:50:4a:0f:0d:f0:d4:27:10:6d:b1:be: 13:63:d6:fb:79:b8:37:9b:6e:fb:d8:db:ef:7a:ce:fd:d6:36: 44:b1:49:ee:96:ff:96:84:f9:35:df:f4:e0:6f:88:84:38:0c: d4:0a:08:60:c5:da:55:f1:c4:56:25:20:77:31:8b:84:79:1a: 41:33:23:5b:f2:6b:c6:42:12:4b:b2:09:74:49:bd:e5:36:d7: 0d:68:cb:5a:02:5c:da:a7:d1:67:7a:c1:ea:bf:67:24:4f:d7: 4d:9e:f4:c3:47:40:ea:74:39:c7:f3:f1:44:00:5b:d6:1d:de: 17:2b:bf:7c:6a:c3:a3:e7:0e:78:2b:69:18:66:a1:9f:cb:1a: d2:90:db:22:eb:d1:8a:06:d0:9e:12:bc:4f:53:4c:33:a8:d9: 71:75:05:45:1b:82:c3:1f:ec:b4:01:6b:e2:f5:db:dc:53:ea: a1:e5:44:5c:65:85:74:ec:3a:aa:f7:e3:4f:6e:d7:f2:2b:20: 7a:62:d7:ad:6d:62:29:fc:af:c7:8a:4f:1a:f4:8f:3f:70:d7: d5:77:7a:f1:bb:ab:be:3f:3b:3a:19:fb:a5:7e:e5:50:28:69: 9c:b3:79:0e:65:61:bd:fe:de:92:0c:b2:52:d5:08:4d:24:44: 0b:ac:70:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28h41gH4p5vDlIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDMwMDM4NDMtN2JhZC00ODAxLWI2MzUtNzhiMjNkZTAyOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGO/RKsQ+xp+GLwoN5yH40rUjD26CiHj+tEl itjADtVJB8VME/hCY6OH5dxn6GyxoGTMxI15Ce4ZCBCso5/lzN6SRt7SNN23Gajx //IWLZzriA1P7T01jqe5Xh9GVRHVEZhaMvRlnaUYlhIuNHRAXtjXSZcxKQ+n2N7z S5jycI/h5/JKOZthFVua+1L84DkU4cZg50/I9R3aJA06cU3+aowZBdzgnppgllpA tiNzA7dsekYJT27Vlp5+8O6Ig3fAUa8Rh+ndaP6NJqdpka0oUACv3GM48LfK1Uc3 /f/Um1Y4yMVD4cUrztGaGrqaPbTbXLDOtxVADeboIBB34MysTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH8G8W5+lrLA+kzskNb/p6qtzQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQ3MGRhOTMtMjYxMi0z YTg5LWI3NmEtNTg3NGRmYThiOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdVTIqrnApQSg8N8NQnEG2xvhNj1vt5uDebbvvY2+96zv3WNkSxSe6W /5aE+TXf9OBviIQ4DNQKCGDF2lXxxFYlIHcxi4R5GkEzI1vya8ZCEkuyCXRJveU2 1w1oy1oCXNqn0Wd6weq/ZyRP102e9MNHQOp0Ocfz8UQAW9Yd3hcrv3xqw6PnDngr aRhmoZ/LGtKQ2yLr0YoG0J4SvE9TTDOo2XF1BUUbgsMf7LQBa+L129xT6qHlRFxl hXTsOqr3409u1/IrIHpi161tYin8r8eKTxr0jz9w19V3evG7q74/OzoZ+6V+5VAo aZyzeQ5lYb3+3pIMslLVCE0kRAuscOQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:18 2025 by rpki-client