$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d4771a5-d33e-33f2-a9c5-3ab54bdf0315.roa File: 3d4771a5-d33e-33f2-a9c5-3ab54bdf0315.roa (raw, json) Hash identifier: AH1iFg7j978UvN+zH4MbpZITHn21f5A9++4rdghqG4w= Subject key identifier: EA:43:14:66:7B:99:EA:8B:48:BB:84:5F:A6:DC:01:DD:94:4D:08:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26F1C79EE818CF28E5D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d4771a5-d33e-33f2-a9c5-3ab54bdf0315.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6f:1c:79:ee:81:8c:f2:8e:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3e85e811-2d43-4d79-ab0a-ac87535548f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:77:90:84:39:a7:2f:04:1c:39:67:89:2c: 13:a3:10:dd:d0:52:63:88:1b:03:6f:04:5f:e4:de: 7a:3e:2b:43:b1:d8:a4:0d:79:6c:5d:2a:c2:8a:96: de:fa:bc:a2:af:c7:27:5e:75:c6:28:e8:38:10:df: 93:d9:6a:1f:70:c3:30:26:2c:30:0f:d6:fa:0f:b7: c8:cd:13:d3:83:84:17:ef:9a:b9:62:f4:51:3a:e4: fe:73:14:d8:cc:86:af:b0:85:d1:16:a9:28:84:0e: a7:5a:7c:d4:82:ca:08:9d:26:ac:bd:dc:40:84:38: ef:08:18:05:f1:ab:ca:c9:99:7e:63:0f:84:12:d4: 41:33:59:c2:72:bc:8b:98:dd:1e:68:d3:b1:d7:3a: ca:57:08:0d:2d:0b:ee:b0:b7:a3:c7:94:4c:26:78: 13:76:81:84:e4:b6:b1:fb:5e:12:1f:54:d3:ac:97: 60:4b:bf:ce:f0:86:63:86:f1:a4:a8:39:ae:c7:55: 82:2c:37:b0:00:eb:8d:93:9c:77:6d:cd:08:f8:94: 12:55:2d:c1:09:be:9b:e2:88:b4:30:a5:42:20:86: 17:25:20:b6:21:5d:ea:aa:2b:38:4a:98:6d:e9:74: b9:f9:d7:02:15:58:a2:26:d9:27:f1:2e:43:d6:83: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:43:14:66:7B:99:EA:8B:48:BB:84:5F:A6:DC:01:DD:94:4D:08:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d4771a5-d33e-33f2-a9c5-3ab54bdf0315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:da:c7:95:17:36:b8:db:7a:75:40:c4:57:25:50:fd:05:cb: 2b:46:51:a1:27:4e:bb:0d:10:02:18:d8:a0:b9:58:58:56:70: 7c:b9:48:5a:ba:31:71:82:04:9a:5d:eb:6d:d3:8e:0f:6f:e0: 79:c2:28:aa:20:44:9a:53:90:8a:3a:31:b3:75:02:03:4f:78: dd:55:2d:ee:3b:2a:bf:38:cf:22:de:26:06:94:7b:30:9d:a4: db:48:c3:4d:db:8e:14:cb:f5:4a:1f:0f:0f:17:7d:9b:8d:e7: f3:f6:12:c6:54:29:c9:30:b2:77:dc:bf:09:6a:1d:72:99:0b: 5a:23:14:c5:b4:47:0d:64:15:c7:f3:e0:df:8a:23:ff:60:7f: da:90:08:87:56:3e:1c:61:e0:22:dc:fc:b8:71:0b:56:b9:13: 61:89:00:d9:7e:38:03:b3:26:94:01:71:89:f9:6e:d7:7a:63: d9:7d:08:45:03:98:c9:95:2e:fb:cc:09:3f:ae:69:8b:99:b3: 86:e8:70:4a:1a:7d:18:60:bc:84:b4:9d:17:9e:4b:57:99:07: 3c:c4:61:99:b7:f0:b2:4d:27:cc:0f:9b:22:d9:21:81:01:75: b0:64:33:ef:70:80:77:05:62:c1:81:68:bf:f9:68:62:cf:0e: fa:ed:a3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28m8cee6BjPKOXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2U4NWU4MTEtMmQ0My00ZDc5LWFiMGEtYWM4NzUzNTU0OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2R3kIQ5py8EHDlniSwToxDd0FJjiBsDbwRf 5N56PitDsdikDXlsXSrCipbe+ryir8cnXnXGKOg4EN+T2WofcMMwJiwwD9b6D7fI zRPTg4QX75q5YvRROuT+cxTYzIavsIXRFqkohA6nWnzUgsoInSasvdxAhDjvCBgF 8avKyZl+Yw+EEtRBM1nCcryLmN0eaNOx1zrKVwgNLQvusLejx5RMJngTdoGE5Lax +14SH1TTrJdgS7/O8IZjhvGkqDmux1WCLDewAOuNk5x3bc0I+JQSVS3BCb6b4oi0 MKVCIIYXJSC2IV3qqis4Spht6XS5+dcCFViiJtkn8S5D1oPvgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpDFGZ7meqLSLuEX6bcAd2UTQh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q0NzcxYTUtZDMzZS0z M2YyLWE5YzUtM2FiNTRiZGYwMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAqxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7ax5UXNrjbenVAxFclUP0FyytGUaEnTrsNEAIY2KC5WFhWcHy5SFq6 MXGCBJpd623Tjg9v4HnCKKogRJpTkIo6MbN1AgNPeN1VLe47Kr84zyLeJgaUezCd pNtIw03bjhTL9UofDw8XfZuN5/P2EsZUKckwsnfcvwlqHXKZC1ojFMW0Rw1kFcfz 4N+KI/9gf9qQCIdWPhxh4CLc/LhxC1a5E2GJANl+OAOzJpQBcYn5btd6Y9l9CEUD mMmVLvvMCT+uaYuZs4bocEoafRhgvIS0nReeS1eZBzzEYZm38LJNJ8wPmyLZIYEB dbBkM+9wgHcFYsGBaL/5aGLPDvrtozQ= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:22 2025 by rpki-client