$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ccde668-bac4-3d95-bbef-5e670eb7c452.roa File: 0ccde668-bac4-3d95-bbef-5e670eb7c452.roa (raw, json) Hash identifier: cU2g+8RLV7UJlKZ2StL/Bd1IgdpbgHnVr25OtzRqIyw= Subject key identifier: 13:52:E5:0E:4F:1C:D7:4C:46:76:3D:16:C1:22:A0:1D:3B:F4:93:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C228F2567437A6F58AB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ccde668-bac4-3d95-bbef-5e670eb7c452.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:22:8f:25:67:43:7a:6f:58:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=e461c75f-4f7a-4934-9a24-388376d0b8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:e7:b8:4b:13:15:b5:d1:83:70:a0:c6:d5: a3:aa:44:1d:de:60:91:7d:97:c8:2b:12:e4:bc:39: 6d:ec:74:db:9c:d1:ac:7b:c1:5b:c2:11:a9:f2:7a: 5c:de:66:a7:28:d2:50:74:32:a1:5a:22:a1:d0:af: 4f:1f:83:d4:34:b7:ae:9b:7b:70:8d:ed:23:68:da: ea:6c:44:27:0b:ad:6e:56:ec:eb:9e:96:ec:f1:dc: 3a:b5:f1:da:e2:b3:6a:51:19:38:ec:42:2a:a0:12: 74:87:ed:b6:1b:e4:66:36:7f:38:d4:fb:72:c0:15: 31:a2:86:8e:64:79:46:5a:7d:6d:bf:2b:ee:9c:aa: c1:12:38:e5:45:0c:15:72:3c:c5:83:15:74:d1:83: 36:c2:8e:ca:1e:db:cc:a7:f5:95:86:91:e7:f7:ac: d6:8e:0f:10:50:e3:d9:e8:26:b6:da:e7:36:a1:d0: 70:44:78:25:01:b3:5a:8c:31:55:29:98:2f:5e:47: 7d:9c:55:b7:5b:1e:ce:58:71:e3:21:b0:f4:02:e4: a9:19:44:d0:d0:14:dd:47:70:31:65:68:71:3d:cc: 7c:cf:ff:6d:f2:84:f1:f9:65:f3:52:a9:5f:06:06: 17:fb:f6:24:b6:7d:d9:c3:18:fb:50:ed:10:71:c6: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:52:E5:0E:4F:1C:D7:4C:46:76:3D:16:C1:22:A0:1D:3B:F4:93:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ccde668-bac4-3d95-bbef-5e670eb7c452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:96:7a:ae:f8:07:34:c9:df:2e:d1:de:3b:89:67:6e:cb:0e: 18:ed:fe:54:43:47:5b:76:79:5e:94:7b:a3:d3:fa:ba:4f:91: b8:36:f8:ea:73:cd:bc:64:e6:d6:bc:a1:8e:9e:38:c8:a9:12: 01:8c:51:c6:50:f9:85:99:86:43:43:08:19:ac:2b:e4:58:b5: 1a:39:10:f1:bc:47:11:15:fb:d8:5d:2c:b3:1e:ab:44:8c:39: 35:0b:c9:d0:57:df:12:e6:cb:3e:7d:e7:25:60:fe:cb:b3:64: 30:7a:b7:d6:6c:82:73:21:29:51:ac:31:5b:46:fd:79:68:3b: 26:8e:a0:f3:2b:66:ca:74:18:bc:3a:5f:2e:21:4b:d6:6a:7d: d5:63:a0:30:66:87:59:d3:b6:12:65:c3:04:23:c4:38:65:44: eb:e2:ba:a4:22:e2:c9:99:51:40:07:bf:7a:fe:b4:13:c6:13: eb:0c:45:3e:16:89:b4:7d:4d:2f:f3:25:b5:27:85:11:f7:db: 25:3c:c3:24:4c:53:3e:38:80:9f:b1:65:0d:e9:08:3f:2b:d2: 4b:ea:19:af:03:13:71:e2:ac:00:82:30:8d:e6:0c:33:d5:61: 83:56:c8:9f:9a:97:37:6d:c4:29:91:a3:6f:de:89:ec:21:16: 94:bf:0c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCKPJWdDem9Yq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTQ2MWM3NWYtNGY3YS00OTM0LTlhMjQtMzg4Mzc2ZDBiOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr33nuEsTFbXRg3CgxtWjqkQd3mCRfZfIKxLk vDlt7HTbnNGse8FbwhGp8npc3manKNJQdDKhWiKh0K9PH4PUNLeum3twje0jaNrq bEQnC61uVuzrnpbs8dw6tfHa4rNqURk47EIqoBJ0h+22G+RmNn841PtywBUxooaO ZHlGWn1tvyvunKrBEjjlRQwVcjzFgxV00YM2wo7KHtvMp/WVhpHn96zWjg8QUOPZ 6Ca22uc2odBwRHglAbNajDFVKZgvXkd9nFW3Wx7OWHHjIbD0AuSpGUTQ0BTdR3Ax ZWhxPcx8z/9t8oTx+WXzUqlfBgYX+/Yktn3Zwxj7UO0QccaYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNS5Q5PHNdMRnY9FsEioB079JNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNjZGU2NjgtYmFjNC0z ZDk1LWJiZWYtNWU2NzBlYjdjNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOWeq74BzTJ3y7R3juJZ27LDhjt/lRDR1t2eV6Ue6PT+rpPkbg2+Opz zbxk5ta8oY6eOMipEgGMUcZQ+YWZhkNDCBmsK+RYtRo5EPG8RxEV+9hdLLMeq0SM OTULydBX3xLmyz595yVg/suzZDB6t9ZsgnMhKVGsMVtG/XloOyaOoPMrZsp0GLw6 Xy4hS9ZqfdVjoDBmh1nTthJlwwQjxDhlROviuqQi4smZUUAHv3r+tBPGE+sMRT4W ibR9TS/zJbUnhRH32yU8wyRMUz44gJ+xZQ3pCD8r0kvqGa8DE3HirACCMI3mDDPV YYNWyJ+alzdtxCmRo2/eiewhFpS/DBI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:40 2025 by rpki-client