$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13289fc1-7d01-3fbe-a704-514894fd7fdd.roa File: 13289fc1-7d01-3fbe-a704-514894fd7fdd.roa (raw, json) Hash identifier: szV8RTNPuwSpVVnXaomdNJB6uWD/CXH/9YkrCOrtKHw= Subject key identifier: E3:D8:5D:FD:DC:A0:04:1C:18:41:18:22:8E:8F:17:15:E7:90:D2:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23AB6B989FC26BA8F92C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13289fc1-7d01-3fbe-a704-514894fd7fdd.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3a:b6:b9:89:fc:26:ba:8f:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2b06cf41-4264-4ef6-a577-f3e888817688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:ee:6f:87:ab:a2:24:31:d0:25:40:0d:6d: c6:0d:5f:2a:77:1b:57:45:26:f3:16:c6:55:50:cb: 13:00:83:0b:2b:61:53:8c:0f:7c:f3:8d:a2:8e:26: 9c:e9:0b:58:b8:4c:32:25:65:42:30:26:50:3c:1a: dc:c5:4b:08:93:e4:56:69:2f:89:d1:af:51:66:16: ac:2f:e2:30:22:bf:d9:49:57:30:a4:72:5f:f2:a8: 4e:ee:1e:c4:72:cb:e5:e7:c4:74:43:a2:72:d6:bf: 31:5e:c6:42:f5:a1:43:35:7e:18:4a:6d:82:ae:fb: a8:78:fd:d4:52:32:b6:5b:6f:ce:44:86:bc:7d:68: b8:46:29:44:ea:0a:f3:8e:4e:93:28:98:c9:7f:7b: 7a:63:77:be:68:21:20:74:0a:7c:82:b9:ea:45:89: 86:3a:62:bf:6a:f1:75:17:df:fc:0a:44:37:29:4a: 75:8d:d0:81:13:b5:e7:67:55:e9:e5:7f:77:98:f8: 35:0b:ce:d9:dc:8b:29:aa:52:69:4e:0b:5e:a7:f9: e0:36:35:73:5a:f3:00:8a:42:71:9e:8f:d8:2b:97: 8e:64:ed:35:87:6d:80:5c:ef:b9:c4:71:6c:c1:fe: 99:01:66:9f:cd:71:aa:5e:b1:1f:ce:04:bf:61:5f: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:5D:FD:DC:A0:04:1C:18:41:18:22:8E:8F:17:15:E7:90:D2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13289fc1-7d01-3fbe-a704-514894fd7fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ea:6c:a2:64:34:d2:00:f2:0c:1f:80:d5:aa:8a:95:9c:cf: 56:93:8a:fa:64:33:94:67:84:21:5c:10:9d:94:da:a9:f9:e7: e3:85:a5:be:04:36:59:59:ed:a1:a3:bf:33:44:a8:6d:a6:ed: e3:3e:17:78:7d:0e:07:d0:c6:4c:cd:0d:89:83:b8:1a:c9:f6: 91:98:3d:0d:0b:13:3f:49:f1:be:5e:69:81:78:d5:71:2e:09: 3b:7e:b6:ce:a6:8a:78:db:0d:59:4d:29:a0:3d:1e:3e:f6:15: 3e:d6:d0:68:d0:09:d0:3d:c2:9d:88:55:9f:ea:7a:74:3b:78: 46:35:09:c9:28:42:c8:aa:36:93:42:e8:9f:18:48:19:f6:b0: 30:cc:a1:76:d5:d2:61:5a:87:e5:fa:d9:b6:87:09:04:c4:c7: 36:f0:0a:3d:b7:1c:66:6a:09:cf:e8:81:c2:5c:8e:a6:ba:87: 19:eb:01:b2:43:5e:29:54:e0:9c:b9:24:5e:a3:33:03:ee:a8: 3a:f9:b1:4c:f2:6e:35:52:b6:8b:59:0c:c3:0a:90:87:97:f0: 6b:0b:e2:1c:3f:a6:17:d2:8c:06:30:01:b5:86:59:42:8e:12: 49:e9:45:25:a5:18:1d:c0:20:61:a6:de:d1:d3:74:a1:16:b1: 6a:cc:c4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jq2uYn8JrqPksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmIwNmNmNDEtNDI2NC00ZWY2LWE1NzctZjNlODg4ODE3Njg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju3ub4eroiQx0CVADW3GDV8qdxtXRSbzFsZV UMsTAIMLK2FTjA98842ijiac6QtYuEwyJWVCMCZQPBrcxUsIk+RWaS+J0a9RZhas L+IwIr/ZSVcwpHJf8qhO7h7Ecsvl58R0Q6Jy1r8xXsZC9aFDNX4YSm2CrvuoeP3U UjK2W2/ORIa8fWi4RilE6grzjk6TKJjJf3t6Y3e+aCEgdAp8grnqRYmGOmK/avF1 F9/8CkQ3KUp1jdCBE7XnZ1Xp5X93mPg1C87Z3IspqlJpTgtep/ngNjVzWvMAikJx no/YK5eOZO01h22AXO+5xHFswf6ZAWafzXGqXrEfzgS/YV9VuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPYXf3coAQcGEEYIo6PFxXnkNL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMyODlmYzEtN2QwMS0z ZmJlLWE3MDQtNTE0ODk0ZmQ3ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7qbKJkNNIA8gwfgNWqipWcz1aTivpkM5RnhCFcEJ2U2qn55+OFpb4E NllZ7aGjvzNEqG2m7eM+F3h9DgfQxkzNDYmDuBrJ9pGYPQ0LEz9J8b5eaYF41XEu CTt+ts6minjbDVlNKaA9Hj72FT7W0GjQCdA9wp2IVZ/qenQ7eEY1CckoQsiqNpNC 6J8YSBn2sDDMoXbV0mFah+X62baHCQTExzbwCj23HGZqCc/ogcJcjqa6hxnrAbJD XilU4Jy5JF6jMwPuqDr5sUzybjVStotZDMMKkIeX8GsL4hw/phfSjAYwAbWGWUKO EknpRSWlGB3AIGGm3tHTdKEWsWrMxAc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:20 2025 by rpki-client