$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0083d32a-42cb-3165-8a4c-0a56d0fcdbdd.roa File: 0083d32a-42cb-3165-8a4c-0a56d0fcdbdd.roa (raw, json) Hash identifier: 3rqm2aRMgjFp3/ejXZAlUOt/qOwRrtT67MnF5JyJJfE= Subject key identifier: 0D:44:0D:E9:4A:62:D3:7A:96:A6:EF:E9:25:2C:F8:94:5F:C9:6D:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066E886E32AE46E4521C140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0083d32a-42cb-3165-8a4c-0a56d0fcdbdd.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.96.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e8:86:e3:2a:e4:6e:45:21:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=dff42389-375c-4868-b4e4-e8fc84bc669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:e8:22:f6:25:6d:5c:f6:35:f5:6c:39:4e: 83:eb:8b:54:14:92:70:4e:0c:3f:39:f4:1f:34:ac: 15:d3:0d:00:3a:d5:0a:84:65:f9:fb:d7:2d:66:64: d4:bf:c8:8f:93:db:b1:ae:ac:9b:15:9b:65:55:d7: 5b:04:44:5a:3d:19:d0:20:b0:10:05:6b:32:a1:d3: b2:97:b9:8c:cf:23:6a:8c:ad:19:b4:e8:44:fb:78: c9:1d:e3:34:ef:23:d5:b4:1d:a6:d3:33:48:d5:a1: 27:e8:5c:bb:7f:c5:82:43:08:52:31:76:7a:7d:61: a8:1c:c3:96:a2:a8:4f:74:f9:80:16:f8:bb:bd:73: ae:40:11:d9:98:7e:17:15:48:25:7f:d0:ad:df:78: f4:09:55:40:3b:32:89:44:81:47:81:ee:3c:24:ff: cc:c7:39:68:de:52:36:4f:a1:c6:94:11:b0:a4:7f: 3a:99:0e:97:8d:bc:c2:cb:92:ee:f2:e7:1d:c6:56: 31:51:4c:cf:9a:d3:56:b5:c2:6a:e6:01:a7:92:a1: 3d:57:4b:f6:dd:d2:45:a8:23:d5:be:87:40:3e:23: 72:b9:f8:4c:ad:bb:2e:f9:3e:b6:03:17:75:e1:04: b5:05:2a:b4:43:09:1d:fb:4f:cd:8a:51:1b:02:75: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:44:0D:E9:4A:62:D3:7A:96:A6:EF:E9:25:2C:F8:94:5F:C9:6D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0083d32a-42cb-3165-8a4c-0a56d0fcdbdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:22:b4:30:58:26:a2:65:c2:f6:e0:99:5e:58:ce:07:d4:71: 8f:97:70:4f:a3:82:3b:3a:ac:0d:13:24:6d:cb:fd:61:c3:1b: ee:b9:3c:7b:2a:6d:c6:53:f9:eb:28:3d:1e:0e:9c:38:ed:dd: 6d:9b:36:b5:cd:6e:be:71:70:3b:fb:c2:16:66:67:54:2c:a8: 4c:3d:57:ec:6c:84:de:5a:9e:f7:da:2c:ba:e1:d0:27:27:08: 2b:bf:b5:25:69:eb:b6:8f:9c:b1:aa:28:75:83:70:98:ab:27: d0:92:1f:ff:81:74:12:02:96:0f:d6:09:99:59:30:7b:49:c4: 31:1b:a5:97:1f:37:fd:52:f5:b2:25:9b:42:1e:31:1b:4f:6d: ab:5f:eb:77:54:d2:20:5e:04:e0:6c:54:c1:19:9b:5c:cc:17: 18:00:5a:f2:a4:09:43:21:44:99:35:35:1b:0b:ee:52:f0:d8: b6:ea:73:ca:c3:f0:6d:5a:5c:c9:08:34:1c:2a:2d:79:c8:e6: be:c0:22:5d:8e:dd:29:21:fd:ab:19:6f:24:ce:85:b3:96:ea: 82:6e:a6:07:2b:e1:81:e8:c3:80:53:5c:92:25:bb:a5:40:83: 1a:b6:2f:5d:1f:4b:6a:8b:01:6b:f3:65:42:47:e8:08:c0:3e: 98:55:f6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuiG4yrkbkUhwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGZmNDIzODktMzc1Yy00ODY4LWI0ZTQtZThmYzg0YmM2NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrroIvYlbVz2NfVsOU6D64tUFJJwTgw/OfQf NKwV0w0AOtUKhGX5+9ctZmTUv8iPk9uxrqybFZtlVddbBERaPRnQILAQBWsyodOy l7mMzyNqjK0ZtOhE+3jJHeM07yPVtB2m0zNI1aEn6Fy7f8WCQwhSMXZ6fWGoHMOW oqhPdPmAFvi7vXOuQBHZmH4XFUglf9Ct33j0CVVAOzKJRIFHge48JP/Mxzlo3lI2 T6HGlBGwpH86mQ6XjbzCy5Lu8ucdxlYxUUzPmtNWtcJq5gGnkqE9V0v23dJFqCPV vodAPiNyufhMrbsu+T62Axd14QS1BSq0Qwkd+0/NilEbAnURIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1EDelKYtN6lqbv6SUs+JRfyW2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDA4M2QzMmEtNDJjYi0z MTY1LThhNGMtMGE1NmQwZmNkYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcitDBYJqJlwvbgmV5YzgfUcY+XcE+jgjs6rA0TJG3L/WHDG+65PHsq bcZT+esoPR4OnDjt3W2bNrXNbr5xcDv7whZmZ1QsqEw9V+xshN5anvfaLLrh0Ccn CCu/tSVp67aPnLGqKHWDcJirJ9CSH/+BdBIClg/WCZlZMHtJxDEbpZcfN/1S9bIl m0IeMRtPbatf63dU0iBeBOBsVMEZm1zMFxgAWvKkCUMhRJk1NRsL7lLw2Lbqc8rD 8G1aXMkINBwqLXnI5r7AIl2O3Skh/asZbyTOhbOW6oJupgcr4YHow4BTXJIlu6VA gxq2L10fS2qLAWvzZUJH6AjAPphV9gM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:49 2025 by rpki-client