$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c9d39b-0536-367b-9736-7ca3823bcc25.roa File: 25c9d39b-0536-367b-9736-7ca3823bcc25.roa (raw, json) Hash identifier: uIMVAAdrUcd3FqsiibbbU4cfHmzQonuwTj1dKBdSNHw= Subject key identifier: 0C:84:B5:22:98:B6:61:04:E8:7A:5E:C2:C1:9F:5E:1C:A4:84:16:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373C2CE81D5782F62B9580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c9d39b-0536-367b-9736-7ca3823bcc25.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3c:2c:e8:1d:57:82:f6:2b:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=483e9b27-1f70-4f43-b2fb-c796ff3de098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:09:48:4e:8b:fb:f2:07:16:ff:e6:44:37: 1f:51:1c:cc:7c:2e:ad:58:0f:6e:53:f5:b1:90:3a: 83:fc:f7:88:1a:e7:76:d9:81:fa:27:e9:99:14:26: 14:5a:1b:b0:5e:95:cc:d4:68:2a:5f:d2:74:e4:94: c4:56:97:9e:65:89:d8:ba:5e:7d:7c:f2:9e:13:e0: 60:7c:d3:80:8a:09:f1:0f:45:b7:eb:4a:64:0c:b3: bb:a5:84:52:9d:f0:18:54:6b:72:b6:79:35:67:c8: 16:94:91:84:3e:98:f2:5a:72:e2:a6:51:bc:95:27: 27:7c:f9:12:c5:2f:c8:3c:fe:36:66:db:72:12:4c: dc:d0:a7:ca:aa:9e:e0:f3:3d:82:3c:37:a8:d2:62: ac:65:ec:41:43:8a:47:47:94:09:46:b5:e1:40:12: 82:0a:d8:86:7c:0e:48:38:2e:ad:7c:5d:c4:05:65: 71:f3:b2:1f:54:f6:9c:56:ce:28:58:a8:ac:af:2b: e9:52:d2:03:df:77:dd:f6:2f:af:20:7f:62:7f:cf: 60:0a:5f:07:fc:1f:7f:80:d2:08:b9:ab:f1:60:7b: b7:cc:c1:b7:fd:05:34:16:0b:6c:a8:c4:5d:54:0c: 1b:98:08:85:4f:9c:f0:5a:51:c7:88:1a:15:b4:f7: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:B5:22:98:B6:61:04:E8:7A:5E:C2:C1:9F:5E:1C:A4:84:16:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c9d39b-0536-367b-9736-7ca3823bcc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:0e:1c:98:54:9a:b1:79:61:8e:03:e9:3e:5f:bd:59:9a: 4e:42:2f:8a:fa:80:a1:b2:1c:08:00:58:e9:13:ee:c5:e5:68: 5d:11:97:0e:61:10:90:8e:25:16:35:5e:4e:91:86:bc:9d:c4: 02:04:a5:24:1c:22:cf:ac:69:0c:e1:3b:54:73:2c:48:7d:83: 6d:71:67:bc:d3:f6:ac:50:44:fb:e2:5f:ba:fe:2b:92:1a:76: fe:c7:55:e1:de:68:b8:7e:b6:7a:97:e1:11:83:8c:4e:41:c6: cb:b6:81:d3:56:22:ce:e9:2f:e6:12:b9:8a:98:62:26:2d:6e: 3f:8e:03:a7:8b:c3:c1:cb:43:ed:fe:14:26:37:94:0a:df:35: 25:f2:7a:60:3f:c4:06:1d:81:68:8c:42:08:70:e7:50:ef:39: bd:c4:dc:d9:a0:64:34:27:b6:95:76:49:f7:cf:29:66:2c:72: 0d:d7:94:29:f5:8b:9b:6e:b0:7d:78:75:18:89:d9:63:bb:b0: f7:28:37:7f:45:e2:69:f7:b5:15:d4:da:3e:7d:18:a4:6a:e3: c5:22:32:b2:c0:0c:1a:00:77:32:d1:8c:02:f2:d9:0f:42:20: 52:3b:aa:8e:ef:cc:e2:72:0d:b8:d0:dd:31:98:73:82:1e:27: 7f:05:74:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzws6B1XgvYrlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDgzZTliMjctMWY3MC00ZjQzLWIyZmItYzc5NmZmM2RlMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JsJSE6L+/IHFv/mRDcfURzMfC6tWA9uU/Wx kDqD/PeIGud22YH6J+mZFCYUWhuwXpXM1GgqX9J05JTEVpeeZYnYul59fPKeE+Bg fNOAignxD0W360pkDLO7pYRSnfAYVGtytnk1Z8gWlJGEPpjyWnLiplG8lScnfPkS xS/IPP42ZttyEkzc0KfKqp7g8z2CPDeo0mKsZexBQ4pHR5QJRrXhQBKCCtiGfA5I OC6tfF3EBWVx87IfVPacVs4oWKisryvpUtID33fd9i+vIH9if89gCl8H/B9/gNII uavxYHu3zMG3/QU0FgtsqMRdVAwbmAiFT5zwWlHHiBoVtPdvBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyEtSKYtmEE6HpewsGfXhykhBYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVjOWQzOWItMDUzNi0z NjdiLTk3MzYtN2NhMzgyM2JjYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYbDhyYVJqxeWGOA+k+X71Zmk5CL4r6gKGyHAgAWOkT7sXlaF0Rlw5h EJCOJRY1Xk6RhrydxAIEpSQcIs+saQzhO1RzLEh9g21xZ7zT9qxQRPviX7r+K5Ia dv7HVeHeaLh+tnqX4RGDjE5Bxsu2gdNWIs7pL+YSuYqYYiYtbj+OA6eLw8HLQ+3+ FCY3lArfNSXyemA/xAYdgWiMQghw51DvOb3E3NmgZDQntpV2SffPKWYscg3XlCn1 i5tusH14dRiJ2WO7sPcoN39F4mn3tRXU2j59GKRq48UiMrLADBoAdzLRjALy2Q9C IFI7qo7vzOJyDbjQ3TGYc4IeJ38FdDw= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:47 2025 by rpki-client