$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8f5ff9-4f51-3e74-bb65-4d08eee499f3.roa File: 3e8f5ff9-4f51-3e74-bb65-4d08eee499f3.roa (raw, json) Hash identifier: +Dpl0eKoGb6m0++vDSDySkm1wh8u2zhqXM+w3yiCgzk= Subject key identifier: 6E:BC:B4:C6:82:1C:68:97:46:50:C9:EF:C1:70:5E:CB:4B:D3:6C:EC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C249198C96A3CD983AE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8f5ff9-4f51-3e74-bb65-4d08eee499f3.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:24:91:98:c9:6a:3c:d9:83:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=ab5b593b-d626-4fb8-8687-82162c7f037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:71:4a:34:f6:0e:c7:18:bd:ab:e1:57:5d: e5:17:6b:ef:94:23:9b:47:09:95:88:e4:f7:8b:ba: c2:45:eb:5c:fb:86:13:94:f9:e3:3d:d0:30:0b:35: 32:48:c6:bd:04:4c:cf:2c:4b:c2:62:f2:c9:bb:45: 97:34:a6:80:d6:12:2f:95:31:6d:f2:80:32:80:87: e2:af:fa:df:17:60:ac:39:6b:c0:46:33:50:d8:f4: 3c:42:40:dc:cb:96:6d:23:4c:54:d4:8e:aa:5f:80: cd:31:bb:06:04:b1:df:f8:78:19:6f:71:02:34:20: 5d:c1:bc:92:3a:d0:ba:33:1d:0b:6b:e3:0e:db:70: f5:9f:71:42:23:e4:cd:94:67:44:5c:b5:04:cb:1f: db:63:06:b2:81:cf:a1:cc:37:68:e0:d0:5a:33:9e: 72:ab:fd:4b:f6:a8:d5:0f:01:9a:d8:81:17:0c:92: c2:eb:8c:d0:85:b7:a6:b4:6e:e7:82:09:11:d2:6f: 3f:4c:a5:2e:71:b1:e3:aa:c9:49:ad:6d:75:af:44: e4:7b:e2:b6:4e:cf:0a:2f:dc:02:bb:bb:ec:56:9f: 85:3a:76:eb:7f:cc:9e:3a:06:d1:5b:e7:84:26:33: 13:df:e8:7e:5c:de:da:69:08:6b:fd:3e:3a:94:77: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BC:B4:C6:82:1C:68:97:46:50:C9:EF:C1:70:5E:CB:4B:D3:6C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8f5ff9-4f51-3e74-bb65-4d08eee499f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:85:8d:e5:06:16:2f:c8:ce:73:ff:6b:e4:e5:d1:a8:48:85: 5c:f3:b4:36:dc:0e:bb:9e:9b:6c:1c:50:81:ed:e2:b2:38:25: 20:20:10:31:f9:0b:1f:ec:f8:cf:8e:a1:39:c2:05:ab:e7:80: e6:b6:fb:ed:ad:a6:74:47:7c:e1:c7:a2:cb:e5:80:99:ae:43: d5:2e:e9:ba:c7:05:c8:41:81:78:a4:5d:65:7d:b5:e1:5b:89: 9e:f6:54:71:c7:0e:eb:37:60:9e:e2:2a:e2:71:0d:47:c0:b0: 1f:e2:a5:7f:e3:48:e6:55:a8:09:52:77:7d:c3:14:cb:16:31: c7:58:43:63:e3:fb:a1:64:ce:6c:88:78:4f:a1:0c:9d:c6:73: 75:9c:fb:aa:02:ba:ba:49:62:76:36:1f:2a:db:76:9e:96:03: ab:4f:36:77:49:94:b2:62:4b:cb:83:23:eb:66:1d:88:85:23: 24:fa:63:f4:6b:dc:1f:60:01:31:d3:7b:75:dc:f6:f8:bc:d1: 75:48:60:64:5d:0b:55:c0:07:b3:bd:29:c8:45:ef:71:20:10: 1e:56:5f:65:c0:15:d9:6d:31:41:f2:5c:79:94:99:51:12:e5: 10:c4:63:bb:69:66:7c:11:68:74:d2:de:72:ff:d5:c0:2b:eb: 28:6c:48:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCSRmMlqPNmDrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YWI1YjU5M2ItZDYyNi00ZmI4LTg2ODctODIxNjJjN2YwMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn49xSjT2DscYvavhV13lF2vvlCObRwmViOT3 i7rCRetc+4YTlPnjPdAwCzUySMa9BEzPLEvCYvLJu0WXNKaA1hIvlTFt8oAygIfi r/rfF2CsOWvARjNQ2PQ8QkDcy5ZtI0xU1I6qX4DNMbsGBLHf+HgZb3ECNCBdwbyS OtC6Mx0La+MO23D1n3FCI+TNlGdEXLUEyx/bYwaygc+hzDdo4NBaM55yq/1L9qjV DwGa2IEXDJLC64zQhbemtG7nggkR0m8/TKUucbHjqslJrW11r0Tke+K2Ts8KL9wC u7vsVp+FOnbrf8yeOgbRW+eEJjMT3+h+XN7aaQhr/T46lHdPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG68tMaCHGiXRlDJ78FwXstL02zsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U4ZjVmZjktNGY1MS0z ZTc0LWJiNjUtNGQwOGVlZTQ5OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAKWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWFjeUGFi/IznP/a+Tl0ahIhVzztDbcDruem2wcUIHt4rI4JSAgEDH5 Cx/s+M+OoTnCBavngOa2++2tpnRHfOHHosvlgJmuQ9Uu6brHBchBgXikXWV9teFb iZ72VHHHDus3YJ7iKuJxDUfAsB/ipX/jSOZVqAlSd33DFMsWMcdYQ2Pj+6FkzmyI eE+hDJ3Gc3Wc+6oCurpJYnY2Hyrbdp6WA6tPNndJlLJiS8uDI+tmHYiFIyT6Y/Rr 3B9gATHTe3Xc9vi80XVIYGRdC1XAB7O9KchF73EgEB5WX2XAFdltMUHyXHmUmVES 5RDEY7tpZnwRaHTS3nL/1cAr6yhsSKk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:46 2025 by rpki-client