$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e5629d3-086b-3678-a8b5-dc5ec2faa4a3.roa File: 2e5629d3-086b-3678-a8b5-dc5ec2faa4a3.roa (raw, json) Hash identifier: pk44oJH8K1q52J0VmAMC2HsGgKd5Bi3rv3N/0WSzYKE= Subject key identifier: 29:0F:E8:5A:24:4A:3E:77:78:27:6C:C6:41:77:77:43:58:0D:B0:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29F3EFCD266C7355B9080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e5629d3-086b-3678-a8b5-dc5ec2faa4a3.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.231.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9f:3e:fc:d2:66:c7:35:5b:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=96f8fbb1-a2ef-42ab-ac47-20d6cc34c3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:10:b3:a7:28:dd:fc:d9:8d:64:37:a1:2a: ea:69:cd:9b:4a:d1:c2:36:4f:68:91:7d:d5:f9:22: 7c:e7:4a:1a:8a:8f:31:fb:1b:c4:b9:d3:62:49:38: 74:da:67:3a:45:03:db:09:c4:00:a6:6c:31:6d:30: 57:6a:27:47:45:07:a6:54:67:c8:14:57:35:b6:ef: 5d:24:81:98:19:50:18:b4:13:63:7e:d4:ad:84:c9: 27:13:b7:d4:5b:38:83:28:48:f4:3a:7f:20:b3:fa: 28:5e:50:5d:bd:59:5b:3d:d5:74:7b:25:85:7a:9a: 20:6a:94:ea:d4:65:33:82:fe:fb:76:fa:51:c7:3c: f0:a8:48:d4:6e:93:6c:92:7a:b5:4d:77:b0:94:df: 0b:54:a5:7d:c7:99:89:5c:cc:6e:fc:d8:77:a6:12: 3b:30:5c:84:83:22:ab:cb:bd:12:a2:47:eb:75:f9: 05:f3:38:43:df:02:8c:18:05:19:cc:a2:db:0c:9e: 0e:22:5c:f8:d6:8d:19:80:66:ac:38:84:b6:66:d5: 62:89:b3:c2:20:59:af:43:69:df:59:93:2c:31:80: b7:9c:29:c4:8d:82:b5:ce:7c:5f:13:57:df:39:b0: 62:8c:6f:93:1f:2b:34:97:05:69:4b:05:7b:2f:88: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0F:E8:5A:24:4A:3E:77:78:27:6C:C6:41:77:77:43:58:0D:B0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e5629d3-086b-3678-a8b5-dc5ec2faa4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8f:46:00:53:8e:32:32:22:81:aa:6e:64:d3:a8:4a:c0:fe: 52:db:6c:a1:0c:57:cf:cc:b5:58:97:ef:6c:79:18:ef:aa:4d: 38:ce:91:69:1a:59:db:96:37:15:f7:05:77:91:d7:6b:11:34: 96:eb:e2:73:99:b0:94:a9:d9:e1:80:88:4b:ab:a8:d6:72:7f: 7d:6c:b8:ee:09:2e:06:4a:65:1d:ce:05:23:fa:13:f5:b5:85: c4:a4:44:86:ab:31:cf:0d:96:3f:2f:1c:e7:ac:9b:d4:0d:4b: 0e:9d:9b:1b:55:b0:0a:f5:42:1e:a6:0b:66:f1:e8:86:6a:03: 09:3e:c7:b0:04:16:81:68:0d:87:44:ca:84:b4:e3:b3:8c:bb: 58:73:4f:98:85:83:84:28:b4:66:c7:f5:40:9d:3c:c4:3e:41: ac:e6:73:af:42:36:d4:4c:81:00:08:74:de:70:36:27:d2:ab: 9d:1b:3d:d3:76:24:8a:10:f3:bc:a0:13:db:14:f0:56:33:0e: e8:65:54:cc:05:96:b1:36:f8:29:34:8d:dd:bc:cc:be:52:11: 1e:40:1c:3c:ac:9c:f0:e1:40:7f:6b:14:f4:e5:29:e4:c9:f2: 73:f9:fd:08:f8:62:a8:c5:5d:03:a9:16:fe:4d:f9:a4:57:df: 8b:da:7c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28p8+/NJmxzVbkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTZmOGZiYjEtYTJlZi00MmFiLWFjNDctMjBkNmNjMzRjM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd4Qs6co3fzZjWQ3oSrqac2bStHCNk9okX3V +SJ850oaio8x+xvEudNiSTh02mc6RQPbCcQApmwxbTBXaidHRQemVGfIFFc1tu9d JIGYGVAYtBNjftSthMknE7fUWziDKEj0On8gs/ooXlBdvVlbPdV0eyWFepogapTq 1GUzgv77dvpRxzzwqEjUbpNsknq1TXewlN8LVKV9x5mJXMxu/Nh3phI7MFyEgyKr y70SokfrdfkF8zhD3wKMGAUZzKLbDJ4OIlz41o0ZgGasOIS2ZtViibPCIFmvQ2nf WZMsMYC3nCnEjYK1znxfE1ffObBijG+THys0lwVpSwV7L4hO1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkP6FokSj53eCdsxkF3d0NYDbChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmU1NjI5ZDMtMDg2Yi0z Njc4LWE4YjUtZGM1ZWMyZmFhNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCPRgBTjjIyIoGqbmTTqErA/lLbbKEMV8/MtViX72x5GO+qTTjOkWka WduWNxX3BXeR12sRNJbr4nOZsJSp2eGAiEurqNZyf31suO4JLgZKZR3OBSP6E/W1 hcSkRIarMc8Nlj8vHOesm9QNSw6dmxtVsAr1Qh6mC2bx6IZqAwk+x7AEFoFoDYdE yoS047OMu1hzT5iFg4QotGbH9UCdPMQ+Qazmc69CNtRMgQAIdN5wNifSq50bPdN2 JIoQ87ygE9sU8FYzDuhlVMwFlrE2+Ck0jd28zL5SER5AHDysnPDhQH9rFPTlKeTJ 8nP5/Qj4YqjFXQOpFv5N+aRX34vafO8= -----END CERTIFICATE-----Generated at Thu Oct 16 04:49:33 2025 by rpki-client