$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa File: 5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa (raw, json) Hash identifier: 1hR72aRXjGKHaEY9N5iPDq5KB5mBrojILWjP2DgcXBY= Subject key identifier: 73:C7:88:69:FB:E1:F9:2E:1B:DD:37:DD:03:69:DF:68:BB:A5:03:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD6287230CF82D04121E3880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.227.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:87:23:0c:f8:2d:04:12:1e:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=abce03d8-653c-490f-a1d6-4d0c32a95248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:69:a3:c5:96:91:2d:33:5c:6d:11:48:1d: 3c:a3:ea:38:18:d2:89:d1:83:15:38:48:92:08:94: 54:d2:a3:fc:60:1a:eb:f5:12:3e:c5:b7:a3:ca:cf: 1e:36:35:85:dd:a8:6a:27:e3:2a:2d:49:4f:2e:89: 54:89:73:5a:1a:91:c5:c9:62:ed:d8:44:83:0c:16: ea:9b:02:14:50:d7:11:fc:ca:ce:79:5a:41:83:51: b4:30:20:d0:5d:ec:2f:11:29:16:e6:9d:dd:ac:77: f4:6c:ec:61:b5:ed:17:84:6e:2d:69:93:b2:af:70: 92:a1:37:1d:94:97:5c:8f:10:7e:04:ba:4d:26:78: 58:3b:7f:f6:19:b0:56:d0:c8:26:a7:59:ca:b6:93: 02:75:ce:76:ad:a4:df:2b:09:63:d8:d3:ac:b9:96: 0a:86:bf:94:f7:a3:05:27:98:ac:84:07:c0:1d:c4: 7f:32:be:62:89:fe:54:40:52:fe:19:f8:58:7a:e5: 42:b7:fd:30:2c:a7:f5:5e:fc:22:14:ee:8e:3a:34: 32:90:60:71:7d:39:36:d8:a0:7b:40:a2:42:6d:08: 45:a4:d6:21:e1:9d:1e:9c:47:1c:b6:8c:1d:74:4a: 08:89:f5:90:e3:68:6f:d4:15:53:7c:32:4d:ca:bc: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C7:88:69:FB:E1:F9:2E:1B:DD:37:DD:03:69:DF:68:BB:A5:03:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:97:ca:c4:1b:d5:1d:da:fb:ce:b9:28:46:08:41:66:20:8a: 93:82:6b:e3:e0:2a:07:76:c2:09:71:93:cb:56:31:25:33:c0: 4b:59:13:6d:8a:63:43:2b:40:3f:e2:74:9a:3d:98:b8:85:7a: ee:0c:7f:5a:ab:4e:59:f2:9c:f9:4f:a2:72:f3:f0:13:80:c9: 5e:7b:ca:48:b0:0a:fc:fa:4a:67:b7:9a:97:3d:13:a5:a9:0b: 3d:a1:cb:6e:4b:e2:c3:5d:79:5d:e6:d3:f0:bc:d2:39:26:fb: 0f:c2:26:d5:6f:5d:99:6f:30:00:48:cd:42:df:a5:36:ff:01: a1:4c:45:29:ac:35:3a:99:c7:ad:f2:77:65:ac:56:b3:3b:d7: 3f:bc:bd:ef:e6:b5:02:26:62:da:b5:04:49:65:07:7c:f2:d6: 1c:d1:55:d1:29:3b:d4:e0:9b:96:bb:b2:20:80:ee:94:73:e1: 96:ef:92:b8:13:a7:d4:44:df:05:96:7f:4a:11:bc:a8:06:01: a3:80:f1:c2:b3:04:4a:1a:24:c4:ba:69:42:9b:a9:eb:de:66: d4:8f:04:e4:4d:6a:ac:31:86:90:cc:a0:76:c8:4e:0d:e3:4e: cf:04:6c:c0:88:6a:47:9a:46:29:23:bb:0f:f4:47:e8:d3:a2: a2:9f:8a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYocjDPgtBBIeOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YWJjZTAzZDgtNjUzYy00OTBmLWExZDYtNGQwYzMyYTk1MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX9po8WWkS0zXG0RSB08o+o4GNKJ0YMVOEiS CJRU0qP8YBrr9RI+xbejys8eNjWF3ahqJ+MqLUlPLolUiXNaGpHFyWLt2ESDDBbq mwIUUNcR/MrOeVpBg1G0MCDQXewvESkW5p3drHf0bOxhte0XhG4taZOyr3CSoTcd lJdcjxB+BLpNJnhYO3/2GbBW0Mgmp1nKtpMCdc52raTfKwlj2NOsuZYKhr+U96MF J5ishAfAHcR/Mr5iif5UQFL+GfhYeuVCt/0wLKf1XvwiFO6OOjQykGBxfTk22KB7 QKJCbQhFpNYh4Z0enEcctowddEoIifWQ42hv1BVTfDJNyrxQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPHiGn74fkuG9033QNp32i7pQO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWE3NmUxMWMtZTFmYy0z MGE3LWI4ZDctMzI1NjNiOWNlNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+XysQb1R3a+865KEYIQWYgipOCa+PgKgd2wglxk8tWMSUzwEtZE22K Y0MrQD/idJo9mLiFeu4Mf1qrTlnynPlPonLz8BOAyV57ykiwCvz6Sme3mpc9E6Wp Cz2hy25L4sNdeV3m0/C80jkm+w/CJtVvXZlvMABIzULfpTb/AaFMRSmsNTqZx63y d2WsVrM71z+8ve/mtQImYtq1BEllB3zy1hzRVdEpO9Tgm5a7siCA7pRz4ZbvkrgT p9RE3wWWf0oRvKgGAaOA8cKzBEoaJMS6aUKbqeveZtSPBORNaqwxhpDMoHbITg3j Ts8EbMCIakeaRikjuw/0R+jToqKfius= -----END CERTIFICATE-----Generated at Tue Nov 4 16:07:09 2025 by rpki-client