$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48847bf7-ca08-368f-9228-08f63a47406f.roa File: 48847bf7-ca08-368f-9228-08f63a47406f.roa (raw, json) Hash identifier: L3aTeU6RAlEEcjWAl9CzpPBdrMqQGZel3xoe42OCOdg= Subject key identifier: 1A:C0:CA:C7:53:04:51:18:47:ED:70:87:D5:A4:39:F3:A4:E3:75:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2091D1E8B0211012AE980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48847bf7-ca08-368f-9228-08f63a47406f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:09:1d:1e:8b:02:11:01:2a:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=50e0d949-fee0-4748-b67d-9501302637e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:6f:e0:9c:29:98:bc:5a:2f:f0:2f:ee:67: a2:5d:8d:d9:c7:7e:36:a7:3f:78:9d:21:44:2f:c4: 9f:8e:4c:e5:00:41:fa:02:13:c4:af:73:74:42:db: 4a:f6:82:73:f8:c0:3f:0d:b1:ce:69:30:6e:e1:e6: dc:a8:18:08:3c:07:9c:1b:5e:62:f4:7a:34:eb:b3: c5:96:d7:7d:69:38:62:ed:3a:d1:df:0d:ee:98:e4: 84:30:45:41:5f:70:e0:08:36:36:e6:88:af:7e:50: 56:8e:93:8d:38:fd:59:2e:00:26:a4:e8:67:09:bb: f7:d1:21:15:0f:a7:0b:f9:29:19:55:53:cc:38:f2: 34:56:72:fa:56:f4:b7:c5:5b:35:d5:3e:71:8a:dd: cf:84:98:80:48:2c:2a:49:03:9d:52:32:3a:a2:7e: cf:7f:95:1f:b2:ac:2a:90:91:2c:35:b0:d8:2f:3d: 91:e1:a8:f2:0b:f1:55:07:47:0e:b2:cf:62:dd:79: bb:1f:e7:30:5a:21:cb:42:a1:b3:e1:4b:7f:ad:67: 0e:c1:2c:b2:61:34:74:ef:98:d1:8e:12:75:46:0f: 57:f6:4d:18:62:74:44:6d:8b:d7:a6:ef:64:58:c3: 0e:ec:2d:00:0a:03:0b:74:99:6a:08:a3:67:a4:e4: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:CA:C7:53:04:51:18:47:ED:70:87:D5:A4:39:F3:A4:E3:75:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48847bf7-ca08-368f-9228-08f63a47406f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b1:41:88:a9:5b:1e:c1:cb:aa:f2:d4:b6:74:5f:66:b9:71: fc:b4:e7:8d:12:0b:11:b7:a1:28:cd:2e:75:60:62:ca:bb:f0: 94:a4:42:d6:2f:f7:f4:97:c2:35:04:96:fb:43:50:a8:65:f3: cb:75:6d:0f:5a:1a:4e:d4:50:f0:16:a8:cc:bd:f5:4e:95:0e: 57:95:e5:64:87:7a:9a:4b:f0:98:41:8a:eb:1d:73:d4:94:b6: 5f:eb:59:43:ca:9d:01:9b:2c:df:7d:dd:5c:ae:82:9b:0f:2f: f6:87:dd:88:1f:dd:b8:a5:12:5f:01:ea:c5:e8:02:91:51:88: f0:6b:fb:c0:f7:1d:dd:08:72:f4:64:9b:4d:23:81:d7:69:4d: bb:d9:2e:11:b0:b7:e9:16:cf:46:ab:76:41:68:16:c1:b4:c4: 46:35:6e:a8:85:97:16:89:69:2a:c7:28:61:9c:dc:c1:45:05: 64:ed:dd:79:99:93:1d:cf:91:aa:a2:81:3d:0f:bd:c8:b7:2b: 1c:5c:99:e2:9e:86:e0:f8:1e:ed:8f:27:81:17:10:87:87:0a: 74:45:87:dc:a8:98:c0:83:66:14:ae:22:0b:63:d5:49:02:70: 2a:04:de:5e:cd:83:7e:2b:72:64:11:39:db:d9:9e:2a:b7:12: d7:f2:92:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gkdHosCEQEq6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTBlMGQ5NDktZmVlMC00NzQ4LWI2N2QtOTUwMTMwMjYzN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVNv4JwpmLxaL/Av7meiXY3Zx342pz94nSFE L8SfjkzlAEH6AhPEr3N0QttK9oJz+MA/DbHOaTBu4ebcqBgIPAecG15i9Ho067PF ltd9aThi7TrR3w3umOSEMEVBX3DgCDY25oivflBWjpONOP1ZLgAmpOhnCbv30SEV D6cL+SkZVVPMOPI0VnL6VvS3xVs11T5xit3PhJiASCwqSQOdUjI6on7Pf5Ufsqwq kJEsNbDYLz2R4ajyC/FVB0cOss9i3Xm7H+cwWiHLQqGz4Ut/rWcOwSyyYTR075jR jhJ1Rg9X9k0YYnREbYvXpu9kWMMO7C0ACgMLdJlqCKNnpOSVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrAysdTBFEYR+1wh9WkOfOk43V4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDg4NDdiZjctY2EwOC0z NjhmLTkyMjgtMDhmNjNhNDc0MDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+xQYipWx7By6ry1LZ0X2a5cfy0540SCxG3oSjNLnVgYsq78JSkQtYv 9/SXwjUElvtDUKhl88t1bQ9aGk7UUPAWqMy99U6VDleV5WSHeppL8JhBiusdc9SU tl/rWUPKnQGbLN993VyugpsPL/aH3Ygf3bilEl8B6sXoApFRiPBr+8D3Hd0IcvRk m00jgddpTbvZLhGwt+kWz0ardkFoFsG0xEY1bqiFlxaJaSrHKGGc3MFFBWTt3XmZ kx3PkaqigT0Pvci3KxxcmeKehuD4Hu2PJ4EXEIeHCnRFh9yomMCDZhSuIgtj1UkC cCoE3l7Ng34rcmQROdvZniq3Etfykp0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:43 2025 by rpki-client