$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a315daa-4591-3b52-8bd5-6224900c43df.roa File: 7a315daa-4591-3b52-8bd5-6224900c43df.roa (raw, json) Hash identifier: kz9p28mApuwu92z0vkuptPxGUCXHMg/f5nsX7ffTXZM= Subject key identifier: 3B:D7:10:28:F8:04:F4:AE:62:B4:8D:04:CB:30:82:DC:65:02:D9:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B849BF1B9BA82DF512F1DA930 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a315daa-4591-3b52-8bd5-6224900c43df.roa Signing time: Tue 14 Oct 2025 10:28:37 +0000 ROA not before: Tue 14 Oct 2025 10:28:37 +0000 ROA not after: Mon 12 Jan 2026 11:28:37 +0000 asID: 22773 IP address blocks: 68.225.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:9b:f1:b9:ba:82:df:51:2f:1d:a9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 14 10:28:37 2025 GMT Not After : Jan 12 11:28:37 2026 GMT Subject: CN=2f267537-3300-4b09-8558-f32a445fc56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:f7:06:75:8d:cc:5c:0f:25:f2:11:13:77: 06:e8:b3:b1:f1:c9:b1:5b:1a:87:48:ec:be:8f:1e: 11:23:c7:3d:da:ec:58:b0:5b:17:8e:eb:7a:36:3c: 63:64:b6:66:e0:4a:53:1c:63:a3:d9:ce:61:74:56: 8e:32:e2:42:98:a5:42:ff:4f:19:60:85:d3:01:ad: ac:7e:14:f5:35:8a:c8:ad:09:6b:52:88:9c:5b:69: 89:84:82:d6:6c:70:ca:93:67:ff:89:32:c4:b9:11: 03:69:ac:61:3f:2d:22:27:f6:1b:6a:2a:4e:e8:20: 41:53:d7:07:b8:b9:7d:22:c3:d0:61:0c:74:a8:fa: 94:1a:bd:75:81:77:7b:bd:b4:94:1a:13:20:d8:a3: fd:81:32:2c:e0:d8:e3:75:c8:d1:d2:c4:d7:6a:b2: c0:6d:4a:3f:87:10:31:71:84:95:8d:1f:61:8b:8c: 3d:ba:a5:b0:23:3c:79:d4:98:2b:3f:bd:58:7e:fb: dd:b4:bc:71:b7:87:a9:2b:41:20:5e:f7:08:17:87: 2f:83:e9:29:39:a2:b6:36:a0:54:a2:9c:93:ad:00: 5c:34:45:e1:c4:43:78:6e:45:67:8e:2a:fa:f7:79: 5f:8f:b3:5e:8a:17:96:7f:bd:05:26:63:0d:c6:62: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:10:28:F8:04:F4:AE:62:B4:8D:04:CB:30:82:DC:65:02:D9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a315daa-4591-3b52-8bd5-6224900c43df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:13:85:42:9e:8b:7a:b1:95:74:60:33:fa:c6:50:94:12:d4: 7b:3a:7b:f6:d0:ce:3e:0d:8f:d3:91:83:87:a6:5b:9a:48:90: b6:6f:2e:25:de:5c:c1:a1:38:7d:78:8b:0e:3f:8a:f1:c3:33: 6e:6f:91:f8:37:38:a3:e0:54:4e:44:a2:41:52:0a:f1:4f:62: a6:83:32:8f:15:d9:48:88:44:23:e6:52:e2:7d:56:8e:31:22: ba:fe:33:02:4a:4e:fa:18:58:7e:0e:78:a0:6f:f0:58:27:ff: 6d:35:0b:ce:8e:6b:c9:30:c9:f9:8f:8c:f5:0b:33:41:31:0f: 96:e7:6a:17:63:a6:f3:a1:e1:a2:16:0a:b6:c3:b8:4c:eb:74: 7e:f6:c5:a0:36:68:d9:13:19:b6:af:96:ab:6f:2f:a3:16:ae: eb:2a:2a:e2:f9:16:f3:1f:e5:a0:6f:e8:f9:c0:56:68:fd:17: 83:f2:b0:d2:10:08:29:37:bc:cf:b2:e0:f1:5b:d0:d8:89:77: 67:94:5b:ae:08:02:92:78:7b:f8:7c:07:01:b7:00:73:a4:20: 48:4b:7c:9d:22:f8:11:e3:5d:87:2b:5e:bf:1a:9d:75:42:5b: d0:cc:8f:58:61:05:a9:69:94:0c:e3:98:46:39:65:86:d5:5f: 87:6c:54:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuEm/G5uoLfUS8dqTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAxNDEwMjgzN1oXDTI2MDExMjExMjgzN1owLzEtMCsGA1UEAxMk MmYyNjc1MzctMzMwMC00YjA5LTg1NTgtZjMyYTQ0NWZjNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnL3BnWNzFwPJfIRE3cG6LOx8cmxWxqHSOy+ jx4RI8c92uxYsFsXjut6NjxjZLZm4EpTHGOj2c5hdFaOMuJCmKVC/08ZYIXTAa2s fhT1NYrIrQlrUoicW2mJhILWbHDKk2f/iTLEuREDaaxhPy0iJ/YbaipO6CBBU9cH uLl9IsPQYQx0qPqUGr11gXd7vbSUGhMg2KP9gTIs4NjjdcjR0sTXarLAbUo/hxAx cYSVjR9hi4w9uqWwIzx51JgrP71YfvvdtLxxt4epK0EgXvcIF4cvg+kpOaK2NqBU opyTrQBcNEXhxEN4bkVnjir693lfj7NeiheWf70FJmMNxmKRlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvXECj4BPSuYrSNBMswgtxlAtl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2EzMTVkYWEtNDU5MS0z YjUyLThiZDUtNjIyNDkwMGM0M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcThUKei3qxlXRgM/rGUJQS1Hs6e/bQzj4Nj9ORg4emW5pIkLZvLiXe XMGhOH14iw4/ivHDM25vkfg3OKPgVE5EokFSCvFPYqaDMo8V2UiIRCPmUuJ9Vo4x Irr+MwJKTvoYWH4OeKBv8Fgn/201C86Oa8kwyfmPjPULM0ExD5bnahdjpvOh4aIW CrbDuEzrdH72xaA2aNkTGbavlqtvL6MWrusqKuL5FvMf5aBv6PnAVmj9F4PysNIQ CCk3vM+y4PFb0NiJd2eUW64IApJ4e/h8BwG3AHOkIEhLfJ0i+BHjXYcrXr8anXVC W9DMj1hhBalplAzjmEY5ZYbVX4dsVKM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:31 2025 by rpki-client