$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39d4263a-a49d-38c8-80e2-2d06fb6e1d5c.roa File: 39d4263a-a49d-38c8-80e2-2d06fb6e1d5c.roa (raw, json) Hash identifier: saPe+WiAA4PnOAyercc70762IT+QgD4J6ytBSyEemvU= Subject key identifier: C7:D4:E8:28:3B:73:16:4D:BF:BB:29:AE:A9:7B:2B:EC:73:EA:11:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3741253BBBC0FD817EEB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39d4263a-a49d-38c8-80e2-2d06fb6e1d5c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:41:25:3b:bb:c0:fd:81:7e:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=faa424d9-15a6-41e9-b270-88c22a9c88f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:87:2c:2f:e2:57:3a:35:61:2e:66:f8:a6: 38:10:1d:cc:a8:5e:44:33:20:a0:b4:aa:1d:20:a7: 7c:01:57:ba:5c:c2:7b:1f:ab:4f:fa:f2:0f:fe:84: f1:e1:de:1f:ac:41:99:99:11:d4:b7:95:98:15:c3: 05:f0:b6:38:58:d9:80:b7:98:5c:f5:61:30:c7:a4: af:36:07:5a:eb:05:14:23:78:60:b0:75:78:c1:6b: 06:65:1e:a2:66:11:e6:e0:43:fd:70:3e:51:52:f2: 79:06:db:b1:a0:2f:84:ea:2d:91:ae:ca:76:94:bb: 68:b2:b5:c5:17:9b:d4:49:40:1c:d8:06:79:f6:49: 34:37:22:d1:5d:58:d7:35:f1:a2:b6:19:6f:11:d9: 01:8e:0f:d9:5e:81:08:9a:d6:41:61:cf:56:f5:82: e2:49:79:79:77:af:a2:7c:77:9a:8f:fe:3a:c6:22: f5:d0:05:93:aa:cf:df:aa:a0:a1:6b:19:f3:c1:e7: 60:71:f8:de:de:08:4f:1f:2f:d0:cd:a0:fa:4f:41: bd:ab:89:fa:1f:48:80:13:7d:ed:fa:a8:a3:71:ee: ef:20:0d:71:2e:55:5b:6b:d1:ea:03:a4:2d:3f:bd: 10:f4:7e:01:1f:77:6d:e9:f3:23:55:7c:e6:f5:5e: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:E8:28:3B:73:16:4D:BF:BB:29:AE:A9:7B:2B:EC:73:EA:11:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39d4263a-a49d-38c8-80e2-2d06fb6e1d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:eb:c7:ce:0c:e5:92:22:28:63:8c:a7:f0:48:a9:a2:f1:b6: f0:c8:26:7c:a1:22:1d:49:d6:62:e0:10:d6:b0:56:23:30:99: c6:20:ed:b7:9d:9c:0e:b8:ff:fb:4e:97:f9:b7:9c:07:96:ec: 26:62:71:3b:12:62:40:04:e3:ad:52:7b:4b:4c:5b:e6:e8:ba: 50:aa:fb:bc:d4:c3:19:c8:a9:27:27:f1:9f:61:4e:cf:88:4d: bd:7b:c0:de:e4:49:1e:1b:21:62:11:f1:0f:df:b7:52:c4:5d: f9:9d:96:2c:8c:e9:31:23:28:be:c9:d0:9f:2f:de:22:c2:41: e3:45:f0:a5:87:3b:9e:27:c2:c9:30:4e:78:a9:96:73:f2:a7: 7d:ca:db:e3:e1:5a:53:ee:bc:7e:68:45:e0:8e:23:97:e9:5b: 0f:d6:79:ca:4c:6c:9b:8b:73:6a:48:47:38:06:b4:3e:51:c0: 9f:9b:ab:b0:e7:b0:fc:b3:60:26:c5:49:70:e8:0d:04:ba:a1: 16:75:2d:d9:24:b7:8f:37:0c:a6:a1:18:79:a2:74:4f:d4:0c: e7:7b:bf:26:fe:0f:48:47:30:44:fb:54:22:43:13:e4:94:3a: d9:85:d1:58:98:3c:22:1f:a5:77:a2:f7:03:e6:07:00:90:be: 2b:29:0d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0ElO7vA/YF+64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmFhNDI0ZDktMTVhNi00MWU5LWIyNzAtODhjMjJhOWM4OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNeHLC/iVzo1YS5m+KY4EB3MqF5EMyCgtKod IKd8AVe6XMJ7H6tP+vIP/oTx4d4frEGZmRHUt5WYFcMF8LY4WNmAt5hc9WEwx6Sv Ngda6wUUI3hgsHV4wWsGZR6iZhHm4EP9cD5RUvJ5BtuxoC+E6i2Rrsp2lLtosrXF F5vUSUAc2AZ59kk0NyLRXVjXNfGithlvEdkBjg/ZXoEImtZBYc9W9YLiSXl5d6+i fHeaj/46xiL10AWTqs/fqqChaxnzwedgcfje3ghPHy/QzaD6T0G9q4n6H0iAE33t +qijce7vIA1xLlVba9HqA6QtP70Q9H4BH3dt6fMjVXzm9V6juwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfU6Cg7cxZNv7sprql7K+xz6hEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzlkNDI2M2EtYTQ5ZC0z OGM4LTgwZTItMmQwNmZiNmUxZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPrx84M5ZIiKGOMp/BIqaLxtvDIJnyhIh1J1mLgENawViMwmcYg7bed nA64//tOl/m3nAeW7CZicTsSYkAE461Se0tMW+boulCq+7zUwxnIqScn8Z9hTs+I Tb17wN7kSR4bIWIR8Q/ft1LEXfmdliyM6TEjKL7J0J8v3iLCQeNF8KWHO54nwskw TniplnPyp33K2+PhWlPuvH5oReCOI5fpWw/WecpMbJuLc2pIRzgGtD5RwJ+bq7Dn sPyzYCbFSXDoDQS6oRZ1Ldkkt483DKahGHmidE/UDOd7vyb+D0hHMET7VCJDE+SU OtmF0ViYPCIfpXei9wPmBwCQvispDUE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:55 2025 by rpki-client