$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa File: 3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa (raw, json) Hash identifier: HJ0LEzffZv84hj7pCkB0EyazxL9jsEYnDfVEvkUtRpw= Subject key identifier: D0:24:CC:F4:30:6B:0F:F5:33:8C:8C:DF:83:6A:78:7D:BA:7C:A7:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F280C2E8EB8B482A963580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:80:c2:e8:eb:8b:48:2a:96:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0062a32f-ce8c-452b-804a-8683f8c161a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:e8:f2:60:c6:99:20:1e:05:00:37:33:ae: db:f8:38:09:6c:3f:43:fe:fd:7a:83:83:03:42:ee: 34:db:1d:58:99:f4:d3:7e:3b:b5:95:c9:8d:1e:89: 4d:3a:05:e4:d0:15:ba:6b:9e:2f:62:d6:f1:fb:10: a8:bc:ea:2f:11:94:c0:61:01:07:ec:4d:ee:2e:c5: 03:f8:d4:9e:06:e9:ab:19:cf:8a:2d:b4:e6:e3:0a: 68:9e:7d:ec:ff:51:5d:d7:1c:1c:4d:b7:b8:7b:48: 21:84:67:34:ec:90:2f:1c:2b:8d:b5:a5:76:f3:49: 49:41:83:71:bb:74:49:fd:12:0a:bb:e3:e2:e2:c1: 62:3a:fb:1d:8d:f0:d3:a9:ba:62:6d:0f:d8:22:13: 1c:ed:36:88:6d:70:85:72:c7:f0:68:8c:4a:85:c6: 05:3c:06:74:e8:67:d7:97:4f:dc:a5:fc:5a:64:14: 7c:b6:9f:24:57:43:6b:a2:13:14:e4:56:16:c1:d0: 22:bb:41:3b:a4:0e:ee:86:ec:11:9d:3f:1f:a3:6f: 21:8b:ac:10:43:d6:dd:66:a2:31:87:bf:e6:b7:7a: 49:4e:9a:91:91:5a:6e:89:c1:c8:31:a5:ca:23:b4: dc:c0:99:21:36:a2:3e:54:0b:28:4c:44:d8:76:78: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:CC:F4:30:6B:0F:F5:33:8C:8C:DF:83:6A:78:7D:BA:7C:A7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:7d:4a:0e:29:c9:c7:82:ac:6d:0a:8b:6b:7a:ce:68:d7:01: 01:0d:82:7f:c9:a8:42:f7:75:14:1f:78:3f:e9:18:41:2e:0a: c4:03:f7:4d:d4:35:23:07:dd:9d:68:7b:a3:33:80:0a:a5:52: 1c:5b:85:60:3b:67:fa:cc:25:94:ff:76:71:64:0a:a4:7d:d8: a2:9f:af:40:59:19:eb:80:21:b7:3b:56:54:d6:5d:29:cf:eb: 3b:dc:01:33:36:08:de:99:06:1a:6c:ff:70:f5:4e:35:03:1f: 57:42:69:c3:bc:c0:13:88:ad:1c:5a:72:c1:b5:0b:ec:10:e2: 94:44:c3:1d:30:8a:52:62:da:40:c6:b2:a4:08:cf:9f:1f:b7: 30:f8:a0:a7:f1:40:5b:62:39:07:5f:24:7b:74:09:b1:09:92: ec:b9:e8:f0:28:a3:5b:8a:cc:f8:6b:c2:8e:3b:87:2d:7a:cd: 40:ae:7e:2b:a6:ac:77:67:15:16:03:ea:22:d0:43:29:36:0b: 50:6d:08:3b:f8:72:61:c7:6c:29:f6:0d:06:35:d2:dd:7c:4c: 43:19:15:f5:41:cc:72:71:7e:47:8e:85:f4:24:e4:69:3b:2a: 9b:39:41:3d:5b:2f:85:e8:36:d0:38:86:ae:b7:5f:c9:f7:b4: d6:48:11:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oDC6OuLSCqWNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDA2MmEzMmYtY2U4Yy00NTJiLTgwNGEtODY4M2Y4YzE2MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyro8mDGmSAeBQA3M67b+DgJbD9D/v16g4MD Qu402x1YmfTTfju1lcmNHolNOgXk0BW6a54vYtbx+xCovOovEZTAYQEH7E3uLsUD +NSeBumrGc+KLbTm4wponn3s/1Fd1xwcTbe4e0ghhGc07JAvHCuNtaV280lJQYNx u3RJ/RIKu+Pi4sFiOvsdjfDTqbpibQ/YIhMc7TaIbXCFcsfwaIxKhcYFPAZ06GfX l0/cpfxaZBR8tp8kV0NrohMU5FYWwdAiu0E7pA7uhuwRnT8fo28hi6wQQ9bdZqIx h7/mt3pJTpqRkVpuicHIMaXKI7TcwJkhNqI+VAsoTETYdnj6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAkzPQwaw/1M4yM34NqeH26fKfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FlZmI0OTUtNTdmOC0z ZGEzLThhZTktNGVjMDJjYTk4YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd9Sg4pyceCrG0Ki2t6zmjXAQENgn/JqEL3dRQfeD/pGEEuCsQD903U NSMH3Z1oe6MzgAqlUhxbhWA7Z/rMJZT/dnFkCqR92KKfr0BZGeuAIbc7VlTWXSnP 6zvcATM2CN6ZBhps/3D1TjUDH1dCacO8wBOIrRxacsG1C+wQ4pREwx0wilJi2kDG sqQIz58ftzD4oKfxQFtiOQdfJHt0CbEJkuy56PAoo1uKzPhrwo47hy16zUCufium rHdnFRYD6iLQQyk2C1BtCDv4cmHHbCn2DQY10t18TEMZFfVBzHJxfkeOhfQk5Gk7 Kps5QT1bL4XoNtA4hq63X8n3tNZIEac= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:49 2025 by rpki-client