$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa File: 2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa (raw, json) Hash identifier: FT0+i67XKT7dNQQ18o3k7rSiks/gehY7KCROpbBOpb8= Subject key identifier: 9B:BB:12:FA:5E:4A:47:16:BD:AE:2A:37:A6:00:C7:F1:B9:3A:97:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28A24F1A9E850458188C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8a:24:f1:a9:e8:50:45:81:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9c4ebf38-7244-456a-aaa8-a1ee14f3af32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:a8:36:18:8f:e3:9e:fd:98:a2:55:97:55: 3f:71:78:4d:b2:6b:21:89:c6:22:cc:f0:5a:9b:5d: 4b:39:40:e3:fd:54:af:d2:da:7c:60:e2:d9:55:65: a7:3e:5a:8c:af:b4:e7:f3:a1:fd:3f:99:3f:1d:3d: 4c:a3:6e:65:3c:b9:9e:e2:fd:8c:eb:a3:1a:ff:4f: 44:4d:f6:ab:05:ee:2a:26:05:1c:07:24:70:b1:21: c6:71:ab:38:31:71:d7:2d:55:60:ac:32:27:54:a2: e4:cb:aa:3c:69:12:ab:23:fd:05:06:5a:9d:d3:96: 25:54:54:45:34:7b:f0:08:2e:fe:42:38:13:eb:53: bf:79:2d:ef:59:eb:63:bd:82:ce:08:57:12:d9:15: 2e:99:9d:ba:e2:dc:d6:20:ea:f7:cf:72:59:f6:4c: e1:30:ba:be:23:23:87:b8:86:82:19:d2:17:a6:78: 06:70:07:2e:6a:3e:d6:0a:35:17:97:d9:06:76:cd: 92:e5:de:67:28:28:4c:26:f6:8a:73:48:dc:98:1b: 56:ef:0d:10:4c:c5:23:21:57:65:02:65:4d:32:97: 20:66:9a:98:45:ed:a7:6c:4e:d2:ec:ac:7b:f3:55: 25:82:dc:a0:af:02:98:10:11:cb:e5:0d:b9:2b:5c: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:12:FA:5E:4A:47:16:BD:AE:2A:37:A6:00:C7:F1:B9:3A:97:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ce01bfd-9f97-3ad0-ab24-bc60100d3b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d2:c7:33:a1:80:0a:de:cf:99:3b:05:3d:bd:c7:e5:04:89: fc:93:a3:da:33:96:c0:b3:6d:9f:64:67:68:2d:ec:30:42:e3: d5:d8:34:06:b2:d4:3c:8d:cf:fd:e6:ac:67:7e:03:3d:c7:f3: 5b:70:12:06:d0:f4:8d:5a:28:16:fb:54:55:5f:ff:9d:9f:cd: 62:14:4a:43:79:d8:7e:07:3e:11:8d:e4:92:dd:ab:e7:5a:2b: 19:69:10:cd:a0:1c:ec:de:ff:73:6b:5f:51:77:89:cd:42:95: 0f:14:48:40:7d:96:79:46:00:62:cb:aa:5d:d6:9b:41:b5:8c: eb:3f:7c:07:84:bb:56:93:b1:fb:6e:56:3f:53:41:fd:46:33: aa:5c:a0:bb:2e:e4:fb:8e:ef:ff:43:eb:8a:35:ae:17:26:0f: 30:26:a2:98:ae:a1:5d:4f:d9:90:83:0d:dd:7f:78:27:37:29: c0:50:66:7a:f6:8f:63:41:80:5e:d0:8b:a5:a1:91:39:cb:02: c8:6e:95:88:27:7b:c1:6f:09:19:2e:88:61:9a:29:80:b0:81: b9:62:00:24:10:9e:6f:29:a3:62:4c:e3:ae:44:b3:67:76:c3: 87:d0:a2:66:a4:8d:64:0f:0a:3a:cc:fc:8b:7d:53:a5:ce:41: 26:f7:bc:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ook8anoUEWBiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWM0ZWJmMzgtNzI0NC00NTZhLWFhYTgtYTFlZTE0ZjNhZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqeoNhiP4579mKJVl1U/cXhNsmshicYizPBa m11LOUDj/VSv0tp8YOLZVWWnPlqMr7Tn86H9P5k/HT1Mo25lPLme4v2M66Ma/09E TfarBe4qJgUcByRwsSHGcas4MXHXLVVgrDInVKLky6o8aRKrI/0FBlqd05YlVFRF NHvwCC7+QjgT61O/eS3vWetjvYLOCFcS2RUumZ264tzWIOr3z3JZ9kzhMLq+IyOH uIaCGdIXpngGcAcuaj7WCjUXl9kGds2S5d5nKChMJvaKc0jcmBtW7w0QTMUjIVdl AmVNMpcgZpqYRe2nbE7S7Kx781UlgtygrwKYEBHL5Q25K1yrTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu7EvpeSkcWva4qN6YAx/G5OpdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNlMDFiZmQtOWY5Ny0z YWQwLWFiMjQtYmM2MDEwMGQzYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/SxzOhgArez5k7BT29x+UEifyTo9ozlsCzbZ9kZ2gt7DBC49XYNAay 1DyNz/3mrGd+Az3H81twEgbQ9I1aKBb7VFVf/52fzWIUSkN52H4HPhGN5JLdq+da KxlpEM2gHOze/3NrX1F3ic1ClQ8USEB9lnlGAGLLql3Wm0G1jOs/fAeEu1aTsftu Vj9TQf1GM6pcoLsu5PuO7/9D64o1rhcmDzAmopiuoV1P2ZCDDd1/eCc3KcBQZnr2 j2NBgF7Qi6WhkTnLAshulYgne8FvCRkuiGGaKYCwgbliACQQnm8po2JM465Es2d2 w4fQomakjWQPCjrM/It9U6XOQSb3vHc= -----END CERTIFICATE-----Generated at Thu Oct 16 01:54:29 2025 by rpki-client