$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53e43758-ac34-3f79-af51-6d64a08d30ba.roa File: 53e43758-ac34-3f79-af51-6d64a08d30ba.roa (raw, json) Hash identifier: WfeQH0hd+3yZzA1f5jEG6kQyEL38Clahqb/wEpUtrrw= Subject key identifier: 95:23:CB:64:BE:E3:74:45:52:C3:00:A7:6E:DD:42:D8:3F:28:05:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2819651D1E64BA6CAF600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53e43758-ac34-3f79-af51-6d64a08d30ba.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:81:96:51:d1:e6:4b:a6:ca:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0c91b3c7-fbd1-4a51-ae8a-a060e8f9f853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:2c:c0:db:f3:94:71:d9:c9:ba:09:c0:8b: ee:d2:0f:71:d2:c2:2c:92:28:21:8f:2f:3a:2c:d7: cd:48:9a:a0:15:ca:62:4d:69:00:64:f2:c7:8e:4d: da:af:24:bf:cb:79:28:dc:be:5f:24:87:b5:70:03: 4b:56:10:86:68:6b:42:55:56:27:0a:18:9d:a3:f3: 94:0e:54:fc:eb:a8:36:2e:f8:d8:03:3e:c7:2f:84: 90:68:11:f1:6d:3e:b8:ab:3e:b7:5d:8c:ae:13:a6: dd:d5:ee:b3:c0:a6:4d:1b:96:c6:f4:7f:f6:1d:c2: 82:05:51:60:ce:8d:23:8f:6b:c5:f2:38:26:e0:09: 00:29:4a:43:86:24:b9:9e:9a:83:7a:0e:41:06:ac: dd:2d:89:44:f1:80:67:fe:7d:67:9b:1f:82:68:41: 75:ba:56:dd:c5:9a:85:a2:8b:fe:7e:fb:24:5c:82: 1f:e4:f4:29:99:8e:49:b4:de:bf:2f:ee:ef:8f:8f: 02:60:37:67:80:02:f2:57:05:12:75:2b:95:ba:b3: 21:95:fe:bf:93:67:10:01:f5:e9:bc:a3:e6:56:2e: 11:cf:13:a0:54:77:a5:0c:30:f0:a3:b6:fe:f9:84: c1:2e:22:d9:0e:fb:7b:9a:2f:b5:13:fd:43:7d:ba: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:23:CB:64:BE:E3:74:45:52:C3:00:A7:6E:DD:42:D8:3F:28:05:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53e43758-ac34-3f79-af51-6d64a08d30ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:70:32:ce:ca:1b:c1:07:e1:26:34:36:e9:d2:07:41:e9:b7: 63:2b:ad:78:b1:d2:7a:b4:52:72:6b:3e:7c:c2:89:34:18:1a: c5:5a:82:95:9b:da:48:e4:e6:e9:cc:07:5f:cb:34:83:35:c7: 6d:a0:87:41:6e:d9:06:50:0c:cd:ca:cd:a0:3e:9a:33:8b:42: a2:05:df:3a:36:0e:1c:45:45:5b:18:27:0e:88:0c:0d:ea:de: 8e:13:e3:fa:b3:c3:4b:93:13:8a:02:c5:65:e6:41:6e:59:02: 39:9a:89:b0:1d:10:2a:e7:75:4a:67:c3:1c:f4:a5:3e:9f:84: 32:e4:36:a9:fc:3d:3a:77:bf:9d:3c:35:c0:f6:63:f7:64:1b: 79:d8:6f:a3:a3:b2:1d:bf:92:37:8d:ba:3b:a5:79:76:ab:a1: 12:64:5a:80:ec:13:55:35:50:9b:2a:93:38:79:57:dc:72:77: f1:fd:5e:36:6c:b5:b4:26:a5:94:2d:8e:84:92:1a:8a:53:6d: ad:3f:78:87:47:6c:00:05:1d:f9:6a:f6:a1:ec:31:1e:87:e6: a1:a3:42:90:88:6d:db:6a:30:69:dd:81:99:cc:26:0d:07:b3: 78:c1:f1:af:18:29:a2:3c:96:95:8b:93:f7:6d:c7:c4:43:9e: 79:0b:8b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oGWUdHmS6bK9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGM5MWIzYzctZmJkMS00YTUxLWFlOGEtYTA2MGU4ZjlmODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQswNvzlHHZyboJwIvu0g9x0sIskighjy86 LNfNSJqgFcpiTWkAZPLHjk3aryS/y3ko3L5fJIe1cANLVhCGaGtCVVYnChido/OU DlT866g2LvjYAz7HL4SQaBHxbT64qz63XYyuE6bd1e6zwKZNG5bG9H/2HcKCBVFg zo0jj2vF8jgm4AkAKUpDhiS5npqDeg5BBqzdLYlE8YBn/n1nmx+CaEF1ulbdxZqF oov+fvskXIIf5PQpmY5JtN6/L+7vj48CYDdngALyVwUSdSuVurMhlf6/k2cQAfXp vKPmVi4RzxOgVHelDDDwo7b++YTBLiLZDvt7mi+1E/1DfbqgcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUjy2S+43RFUsMAp27dQtg/KAXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTNlNDM3NTgtYWMzNC0z Zjc5LWFmNTEtNmQ2NGEwOGQzMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNwMs7KG8EH4SY0NunSB0Hpt2MrrXix0nq0UnJrPnzCiTQYGsVagpWb 2kjk5unMB1/LNIM1x22gh0Fu2QZQDM3KzaA+mjOLQqIF3zo2DhxFRVsYJw6IDA3q 3o4T4/qzw0uTE4oCxWXmQW5ZAjmaibAdECrndUpnwxz0pT6fhDLkNqn8PTp3v508 NcD2Y/dkG3nYb6Ojsh2/kjeNujuleXaroRJkWoDsE1U1UJsqkzh5V9xyd/H9XjZs tbQmpZQtjoSSGopTba0/eIdHbAAFHflq9qHsMR6H5qGjQpCIbdtqMGndgZnMJg0H s3jB8a8YKaI8lpWLk/dtx8RDnnkLiz0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:20 2025 by rpki-client