$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8973ca-0ecd-34fc-92e4-193e8043a0ea.roa File: 0f8973ca-0ecd-34fc-92e4-193e8043a0ea.roa (raw, json) Hash identifier: u1f/jeDHUSsTuuW4gjxl5LZTtOpKVmbSvrcrzMIzFfk= Subject key identifier: 3B:59:F9:B6:31:29:85:94:2D:21:6E:50:72:4C:4F:C5:1E:06:4B:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B56D71D5386D10FC0AA2A2640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8973ca-0ecd-34fc-92e4-193e8043a0ea.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.15.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1d:53:86:d1:0f:c0:aa:2a:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=c7512a44-90f2-4ef9-bc4b-e23e287ca982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:a0:16:ca:70:7f:ed:67:d8:5e:7a:df:6c: 4f:c6:6f:a1:7c:0b:e9:54:42:8a:74:ef:7e:46:94: 1e:6e:a6:d5:d6:8d:ea:ae:cd:41:11:26:e4:b3:c4: 40:d0:31:9f:ba:be:1b:29:64:96:49:9d:fb:30:ae: 0a:a9:c0:95:dc:3f:4d:81:90:f3:af:a5:f4:33:e3: 95:1e:ce:41:fe:c2:83:b5:7e:f8:3a:04:de:ad:98: 99:59:c5:da:7c:84:92:db:d3:b2:38:f8:bb:90:5d: e2:63:82:57:15:a0:60:61:59:69:4c:2e:69:17:72: ba:1b:c1:89:e0:ce:83:0a:25:92:b4:34:2e:1a:32: 63:e2:24:83:86:2e:ae:67:66:93:bb:cd:80:4a:5c: 4f:f6:7f:48:41:39:25:30:b5:b1:cd:89:9e:09:37: 63:d9:39:df:c2:b2:83:f1:5e:ad:f9:20:33:cf:8b: f3:09:31:dc:62:0e:09:4a:db:b2:c1:7b:ca:36:e3: 34:b3:3d:6d:e4:70:8d:47:a6:e5:76:23:5a:1d:4f: 07:59:56:76:dd:74:b4:ab:bf:07:a7:4a:21:af:94: 3e:52:24:af:ac:e4:7d:1a:c8:69:27:63:1c:33:96: 15:20:ca:92:bc:57:45:ec:e1:d4:9d:cc:c5:06:f0: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:59:F9:B6:31:29:85:94:2D:21:6E:50:72:4C:4F:C5:1E:06:4B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8973ca-0ecd-34fc-92e4-193e8043a0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.15.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:10:b3:4f:dd:dd:4d:75:fc:bf:ae:8e:df:4b:c0:f9:9e:10: 52:1e:27:fc:2f:9c:b5:4b:00:ce:63:10:09:0d:ef:98:99:d2: 74:36:87:d7:37:b6:cb:b3:74:45:a0:c6:99:4f:93:e0:31:aa: 2a:44:5c:21:35:80:3f:27:3f:82:3b:bd:19:5f:81:94:3b:8e: d9:63:56:cc:94:61:28:bd:26:a4:af:16:02:da:eb:d0:a5:81: 4d:0b:d5:ee:4c:0f:95:5f:1e:6b:43:f6:5c:f1:70:bd:19:e4: d3:e3:ca:83:ba:6f:f0:90:e6:c3:74:6b:18:ab:d2:1f:6e:de: 55:ef:81:fd:87:9c:e4:57:d1:d0:16:0d:9d:5e:31:f4:ea:7f: a1:ad:19:0e:90:2a:91:37:3b:73:92:65:9b:69:06:e1:f0:cc: f4:3e:ef:78:d8:e3:3b:1e:d6:0b:29:66:46:57:79:a6:0b:a4: ec:a1:a5:f5:b5:ca:37:79:87:73:d9:d2:b9:08:19:96:0a:bc: e2:de:ac:43:38:62:b4:91:4f:b2:c4:e7:9e:c9:af:22:36:f8: 8d:39:d2:e7:b7:e2:b2:ac:53:0b:eb:2d:76:c1:0b:ba:d4:77: a8:26:99:94:c1:5a:3d:db:57:6d:90:48:01:e9:18:1f:99:5d: f2:6b:33:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1x1ThtEPwKoqJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Yzc1MTJhNDQtOTBmMi00ZWY5LWJjNGItZTIzZTI4N2NhOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQigFspwf+1n2F5632xPxm+hfAvpVEKKdO9+ RpQebqbV1o3qrs1BESbks8RA0DGfur4bKWSWSZ37MK4KqcCV3D9NgZDzr6X0M+OV Hs5B/sKDtX74OgTerZiZWcXafISS29OyOPi7kF3iY4JXFaBgYVlpTC5pF3K6G8GJ 4M6DCiWStDQuGjJj4iSDhi6uZ2aTu82ASlxP9n9IQTklMLWxzYmeCTdj2TnfwrKD 8V6t+SAzz4vzCTHcYg4JStuywXvKNuM0sz1t5HCNR6bldiNaHU8HWVZ23XS0q78H p0ohr5Q+UiSvrOR9GshpJ2McM5YVIMqSvFdF7OHUnczFBvD7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtZ+bYxKYWULSFuUHJMT8UeBkvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGY4OTczY2EtMGVjZC0z NGZjLTkyZTQtMTkzZTgwNDNhMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRA/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoQs0/d3U11/L+ujt9LwPmeEFIeJ/wvnLVLAM5jEAkN75iZ0nQ2h9c3 tsuzdEWgxplPk+AxqipEXCE1gD8nP4I7vRlfgZQ7jtljVsyUYSi9JqSvFgLa69Cl gU0L1e5MD5VfHmtD9lzxcL0Z5NPjyoO6b/CQ5sN0axir0h9u3lXvgf2HnORX0dAW DZ1eMfTqf6GtGQ6QKpE3O3OSZZtpBuHwzPQ+73jY4zse1gspZkZXeaYLpOyhpfW1 yjd5h3PZ0rkIGZYKvOLerEM4YrSRT7LE557JryI2+I050ue34rKsUwvrLXbBC7rU d6gmmZTBWj3bV22QSAHpGB+ZXfJrM4A= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:51 2025 by rpki-client