$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2eb93894-5fc6-3002-a896-2920929e7df1.roa File: 2eb93894-5fc6-3002-a896-2920929e7df1.roa (raw, json) Hash identifier: ba2sszLzXt9Ox8p3Yo6KoOwU9Wef3UsXg6EbHhT0sIM= Subject key identifier: 27:D8:DA:E0:72:1C:5A:B0:D0:C2:75:72:4C:E2:8D:E4:F5:4C:36:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AF95167724DA710B55B65FBB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2eb93894-5fc6-3002-a896-2920929e7df1.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 22773 IP address blocks: 68.14.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:67:72:4d:a7:10:b5:5b:65:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=05f38bb4-17d0-49ab-a1e1-18871b368953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:c5:68:2b:7b:5c:74:5c:ba:0c:16:72:a4: b3:8e:fd:d1:23:ae:8e:db:66:52:9d:7d:d1:19:5a: 9c:fa:54:54:aa:4f:a7:34:75:33:3d:b3:dc:51:3b: ab:25:6a:63:33:30:39:0b:27:36:96:43:97:3f:68: 9a:92:b3:b0:e4:f8:c2:f7:75:39:26:0d:e5:e8:68: 44:e2:42:05:81:b2:e3:ff:c7:ca:1d:f2:47:06:54: 4b:0a:3e:4a:ee:13:7a:a9:b9:b1:61:6d:da:5a:57: 3a:0d:ca:e2:69:84:d0:6c:21:d1:3e:54:9e:a5:8c: 50:2e:f6:87:1f:a9:0c:fa:1b:fc:c7:ba:40:b9:15: 02:b4:f2:3c:35:04:45:5a:3b:51:b4:13:16:c6:58: ae:35:fb:e3:4c:c8:86:b0:33:8f:4c:08:dc:8d:e4: 0b:42:8f:42:03:33:12:51:98:14:1e:73:01:46:59: 82:a9:ad:e2:fd:9c:1c:83:4c:14:f0:20:b7:1b:26: cf:b6:c4:aa:bd:cd:98:11:14:ec:55:ed:3a:26:f0: 2b:34:1a:1c:65:80:71:0e:87:d3:b6:9c:5f:32:a4: fc:04:3b:80:f1:8c:aa:2e:1f:2b:90:39:27:dc:9c: 68:ce:ef:63:ff:de:7d:4a:59:19:ef:99:62:be:5a: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:DA:E0:72:1C:5A:B0:D0:C2:75:72:4C:E2:8D:E4:F5:4C:36:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2eb93894-5fc6-3002-a896-2920929e7df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ad:71:26:83:dc:e7:c9:6c:af:ae:b3:8c:43:1c:c6:93:2d: 1c:69:ed:35:d4:94:05:1e:ad:4d:4f:19:b1:21:f0:c9:9b:41: 2a:26:14:7c:5d:79:f8:e8:93:7d:0b:8b:be:15:d8:0d:2c:0b: 54:7e:c8:55:90:28:34:55:d6:57:a5:3c:3a:77:37:42:b5:72: 10:fd:c2:b2:a3:55:cc:a6:d9:83:d3:fd:b0:62:c5:64:64:50: a7:6b:db:0a:2f:b4:36:d1:e7:9f:20:be:67:16:ed:dc:f8:0d: ec:67:44:f7:e9:4e:2f:fd:49:21:a8:30:fd:f3:5c:60:74:fa: 2e:00:a5:f0:42:47:73:87:9a:d5:27:f4:86:52:c3:64:55:e9: ee:da:5b:6d:1b:8c:80:ba:38:09:c0:61:06:69:57:7e:8a:92: d6:bc:a4:dc:4d:ca:95:da:24:3f:e1:cb:35:0a:57:c0:0b:74: cf:60:ef:6c:8d:b7:4c:dc:84:57:70:7c:6d:71:41:25:20:17: 7e:6b:35:63:73:c5:ed:6a:bb:6a:30:04:88:4b:f1:c0:aa:45: 8d:91:e3:1b:ce:71:77:11:cd:76:13:cb:57:09:e4:08:d9:05: c8:11:24:f7:4a:c1:c2:1b:94:16:01:d0:e3:8a:c6:c9:2d:73: 83:46:ac:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UWdyTacQtVtl+7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDVmMzhiYjQtMTdkMC00OWFiLWExZTEtMTg4NzFiMzY4OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zPFaCt7XHRcugwWcqSzjv3RI66O22ZSnX3R GVqc+lRUqk+nNHUzPbPcUTurJWpjMzA5Cyc2lkOXP2iakrOw5PjC93U5Jg3l6GhE 4kIFgbLj/8fKHfJHBlRLCj5K7hN6qbmxYW3aWlc6DcriaYTQbCHRPlSepYxQLvaH H6kM+hv8x7pAuRUCtPI8NQRFWjtRtBMWxliuNfvjTMiGsDOPTAjcjeQLQo9CAzMS UZgUHnMBRlmCqa3i/Zwcg0wU8CC3GybPtsSqvc2YERTsVe06JvArNBocZYBxDofT tpxfMqT8BDuA8YyqLh8rkDkn3Jxozu9j/959SlkZ75livlrqMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfY2uByHFqw0MJ1ckzijeT1TDaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmViOTM4OTQtNWZjNi0z MDAyLWE4OTYtMjkyMDkyOWU3ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEitcSaD3OfJbK+us4xDHMaTLRxp7TXUlAUerU1PGbEh8MmbQSomFHxd efjok30Li74V2A0sC1R+yFWQKDRV1lelPDp3N0K1chD9wrKjVcym2YPT/bBixWRk UKdr2wovtDbR558gvmcW7dz4DexnRPfpTi/9SSGoMP3zXGB0+i4ApfBCR3OHmtUn 9IZSw2RV6e7aW20bjIC6OAnAYQZpV36Kkta8pNxNypXaJD/hyzUKV8ALdM9g72yN t0zchFdwfG1xQSUgF35rNWNzxe1qu2owBIhL8cCqRY2R4xvOcXcRzXYTy1cJ5AjZ BcgRJPdKwcIblBYB0OOKxsktc4NGrBA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:16 2025 by rpki-client