$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab0a4f60-f6ea-38ae-bf8d-152190eb2bb2.roa File: ab0a4f60-f6ea-38ae-bf8d-152190eb2bb2.roa (raw, json) Hash identifier: BMyvh/5LTtTwTQ5BufEujQSvVacqbQ/vrP6N/ngqrpk= Subject key identifier: 33:EC:26:AD:D3:E2:A0:CF:0B:0D:AB:E9:AC:2C:1D:B0:CA:19:13:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C227B1CAF8D6157A21300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab0a4f60-f6ea-38ae-bf8d-152190eb2bb2.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:22:7b:1c:af:8d:61:57:a2:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=4e2e3847-c474-499d-a2a0-1bfaccf69416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:16:b9:75:9b:8d:3b:b4:39:20:36:5c:95: c0:0b:70:da:e2:6c:8d:86:35:19:9d:e3:eb:63:1d: da:4b:4d:d9:a3:9e:e9:5e:f0:88:29:60:3f:cd:85: 61:06:c7:b2:ee:f3:2d:27:41:4e:1e:b5:ff:4b:75: 2a:4d:bb:26:d5:29:22:b9:82:67:cf:f5:4c:5a:b6: df:ae:7e:4a:3f:95:fd:2e:9d:4e:da:75:4f:bf:54: 83:5f:c8:c6:0e:01:5c:1d:13:8a:85:ee:7b:b9:bb: 09:6f:3f:68:8c:e5:08:91:8c:91:e1:13:0b:fa:f2: 11:0d:18:53:7d:15:e2:6a:e1:87:d2:96:76:8d:66: b2:8c:e9:38:b2:76:90:3d:1c:77:f5:ed:bf:fc:43: 18:38:96:6b:50:0a:7d:44:4f:47:04:af:b3:6c:6f: f5:c5:3f:b5:ab:90:bb:1a:26:23:7a:08:21:ba:b1: 59:0b:bd:1e:2f:0a:bd:12:c1:56:e6:ce:1d:04:10: d9:ec:30:75:31:58:0d:5e:7b:28:08:81:8e:8d:68: 59:47:14:20:50:3e:08:41:f1:a4:cd:78:4a:f3:d0: 5a:08:82:24:fa:c2:79:46:72:fa:98:49:a1:9b:4a: d3:4e:d2:d9:f6:dd:91:e4:96:75:fc:37:41:a4:24: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EC:26:AD:D3:E2:A0:CF:0B:0D:AB:E9:AC:2C:1D:B0:CA:19:13:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab0a4f60-f6ea-38ae-bf8d-152190eb2bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7c:f4:3d:f2:e2:a3:e8:9a:ed:c8:4f:58:03:62:91:ef:2f: f8:6e:d6:cd:79:92:bd:cf:a7:0b:37:06:3f:3f:9e:ba:b0:c0: da:58:e4:6f:07:67:22:8c:0a:3a:b5:de:a2:33:60:78:4a:8c: be:b5:76:c6:f3:d1:e7:6c:52:9b:2b:50:0f:7d:a5:2b:5d:40: f7:81:90:66:31:e2:31:f6:50:eb:53:b4:4f:88:bb:5b:a9:72: f9:24:21:73:e1:93:b6:d3:37:8f:11:fb:ba:88:cc:94:d6:6d: c3:51:e5:d9:e4:28:53:3e:12:bc:91:b0:ca:87:40:05:68:ec: e5:14:a7:b3:d1:6c:31:e3:29:7c:7d:0a:d7:82:ba:a7:d9:75: f7:c1:89:cf:39:a0:be:ce:fd:ea:53:df:f7:20:ca:60:83:1e: 22:93:86:6e:67:64:e6:d1:ff:44:88:87:b6:ef:d6:89:7f:f7: e5:a4:09:27:bd:67:06:3c:01:c9:98:fc:be:3c:b1:9a:93:00: 3d:6b:39:9f:ef:c3:ca:eb:87:d1:a2:4b:f0:b6:7d:2e:fd:c7: 31:91:23:ac:91:dc:32:40:c3:f2:18:15:cd:9c:a7:6a:a3:53: 9c:8f:4e:f3:69:b0:b2:d5:ac:3e:ca:9a:8c:0f:02:04:aa:fb: 8d:9f:e6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCJ7HK+NYVeiEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NGUyZTM4NDctYzQ3NC00OTlkLWEyYTAtMWJmYWNjZjY5NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfUWuXWbjTu0OSA2XJXAC3Da4myNhjUZnePr Yx3aS03Zo57pXvCIKWA/zYVhBsey7vMtJ0FOHrX/S3UqTbsm1SkiuYJnz/VMWrbf rn5KP5X9Lp1O2nVPv1SDX8jGDgFcHROKhe57ubsJbz9ojOUIkYyR4RML+vIRDRhT fRXiauGH0pZ2jWayjOk4snaQPRx39e2//EMYOJZrUAp9RE9HBK+zbG/1xT+1q5C7 GiYjegghurFZC70eLwq9EsFW5s4dBBDZ7DB1MVgNXnsoCIGOjWhZRxQgUD4IQfGk zXhK89BaCIIk+sJ5RnL6mEmhm0rTTtLZ9t2R5JZ1/DdBpCSq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPsJq3T4qDPCw2r6awsHbDKGRNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWIwYTRmNjAtZjZlYS0z OGFlLWJmOGQtMTUyMTkwZWIyYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD589D3y4qPomu3IT1gDYpHvL/hu1s15kr3Ppws3Bj8/nrqwwNpY5G8H ZyKMCjq13qIzYHhKjL61dsbz0edsUpsrUA99pStdQPeBkGYx4jH2UOtTtE+Iu1up cvkkIXPhk7bTN48R+7qIzJTWbcNR5dnkKFM+EryRsMqHQAVo7OUUp7PRbDHjKXx9 CteCuqfZdffBic85oL7O/epT3/cgymCDHiKThm5nZObR/0SIh7bv1ol/9+WkCSe9 ZwY8AcmY/L48sZqTAD1rOZ/vw8rrh9GiS/C2fS79xzGRI6yR3DJAw/IYFc2cp2qj U5yPTvNpsLLVrD7KmowPAgSq+42f5kc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:54 2025 by rpki-client