$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3103b0e5-48ec-305b-b2eb-21a547e0d8eb.roa File: 3103b0e5-48ec-305b-b2eb-21a547e0d8eb.roa (raw, json) Hash identifier: JMjZsR59mAXGsTSVeT3A+H+nx+4z+fSsTJlHvVN15uU= Subject key identifier: 80:D4:50:11:D8:45:DA:74:B9:B2:E5:F1:1F:D1:90:78:E9:77:29:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C27D248BA90F092542600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3103b0e5-48ec-305b-b2eb-21a547e0d8eb.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:27:d2:48:ba:90:f0:92:54:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=bcbe3961-17dc-4143-8b1c-6d57b8620229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:24:b0:0c:46:63:08:2c:54:0d:d5:70:dc: f6:e9:ac:75:44:d7:9a:8d:ca:cc:81:d6:7b:56:f7: cc:ff:0c:18:c8:01:a0:a1:64:bb:e5:7b:41:5e:53: 56:ec:e5:28:9d:e7:50:60:00:2f:ea:a8:1d:88:b2: a4:4a:e3:ff:fa:98:95:e1:ee:92:c9:ae:dc:d1:ec: d7:8e:1a:65:f3:51:54:a7:4b:14:39:7a:99:05:ad: e9:97:7c:6d:43:37:d5:01:bc:19:c5:2f:50:b6:bc: 05:db:4d:ff:e1:d7:57:b3:4d:d6:d1:b1:c0:40:9d: 50:7c:f0:3e:b7:c2:33:53:3a:63:df:7c:b9:5a:86: c1:83:f3:57:ac:ae:56:2c:91:bc:92:fe:61:d8:5e: e0:62:25:4b:38:ff:5c:3c:1b:4b:f8:25:c8:20:d6: 20:37:9f:24:b1:08:4a:8e:19:87:14:e0:35:a8:0d: b6:c4:b3:f9:51:02:ca:4a:27:41:1e:65:3d:27:83: 24:48:9e:52:71:93:a6:d6:01:4a:bc:11:e7:6b:0a: f4:b2:69:8a:ba:a5:b6:a8:6a:e4:04:a8:0a:4f:ef: 10:2f:ec:18:3c:b8:69:48:47:83:46:58:6b:89:21: c2:bd:23:3c:6a:b2:b7:bd:85:70:a5:f9:e2:93:e7: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:50:11:D8:45:DA:74:B9:B2:E5:F1:1F:D1:90:78:E9:77:29:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3103b0e5-48ec-305b-b2eb-21a547e0d8eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a6:71:cc:16:94:dd:4d:66:88:45:8b:02:56:38:bc:a4:48: 13:57:75:c6:23:c9:5c:d6:ca:3a:40:51:56:5d:88:38:9f:55: 69:61:27:70:e5:86:69:31:24:cb:ab:5d:23:20:87:fd:7d:21: 55:9b:8b:04:c1:29:23:d6:ac:90:c0:8b:a5:49:6e:a3:83:58: f0:6b:9a:5c:fa:b5:d8:45:1e:2f:a1:b3:ca:ef:ab:e0:cc:a3: 45:84:f8:27:fd:9a:6f:17:85:01:1a:c9:95:b0:fd:89:49:8c: a6:6c:b2:5d:28:fc:d0:74:f4:02:bc:f0:a2:31:8c:f4:9b:e1: d3:97:ae:0a:09:e7:a5:73:2c:38:bb:a4:1f:35:36:d7:2c:22: 3f:7a:a3:9c:d8:1d:fc:75:d6:b2:c9:71:24:67:50:c7:17:80: 1f:e8:b0:76:c9:28:cd:e5:64:b4:ec:13:29:37:ea:02:12:20: 6f:3d:5b:e7:c4:7a:9f:53:39:21:d2:e6:91:32:f0:8a:8d:05: 7a:f4:e0:44:46:4c:4c:28:f0:0c:7e:50:91:46:c3:df:dc:e1: 96:12:e4:32:ed:2e:54:73:e0:00:4f:28:39:e1:4d:2d:11:c1: 21:e7:ba:5a:de:27:ed:8e:4a:9c:cc:ff:ad:ae:6a:c1:54:7f: 18:c0:ef:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCfSSLqQ8JJUJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmNiZTM5NjEtMTdkYy00MTQzLThiMWMtNmQ1N2I4NjIwMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDIksAxGYwgsVA3VcNz26ax1RNeajcrMgdZ7 VvfM/wwYyAGgoWS75XtBXlNW7OUonedQYAAv6qgdiLKkSuP/+piV4e6Sya7c0ezX jhpl81FUp0sUOXqZBa3pl3xtQzfVAbwZxS9QtrwF203/4ddXs03W0bHAQJ1QfPA+ t8IzUzpj33y5WobBg/NXrK5WLJG8kv5h2F7gYiVLOP9cPBtL+CXIINYgN58ksQhK jhmHFOA1qA22xLP5UQLKSidBHmU9J4MkSJ5ScZOm1gFKvBHnawr0smmKuqW2qGrk BKgKT+8QL+wYPLhpSEeDRlhriSHCvSM8arK3vYVwpfnik+erUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDUUBHYRdp0ubLl8R/RkHjpdynHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzEwM2IwZTUtNDhlYy0z MDViLWIyZWItMjFhNTQ3ZTBkOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSmccwWlN1NZohFiwJWOLykSBNXdcYjyVzWyjpAUVZdiDifVWlhJ3Dl hmkxJMurXSMgh/19IVWbiwTBKSPWrJDAi6VJbqODWPBrmlz6tdhFHi+hs8rvq+DM o0WE+Cf9mm8XhQEayZWw/YlJjKZssl0o/NB09AK88KIxjPSb4dOXrgoJ56VzLDi7 pB81NtcsIj96o5zYHfx11rLJcSRnUMcXgB/osHbJKM3lZLTsEyk36gISIG89W+fE ep9TOSHS5pEy8IqNBXr04ERGTEwo8Ax+UJFGw9/c4ZYS5DLtLlRz4ABPKDnhTS0R wSHnulreJ+2OSpzM/62uasFUfxjA77A= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:11 2025 by rpki-client