$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa File: 7a53c42f-d7af-3299-b028-af7e5432e3dd.roa (raw, json) Hash identifier: +57ahTyDw855GCNw/qd5GD8jE130Xtcq892Qyhx4RQA= Subject key identifier: 69:17:92:24:D0:7A:F3:C8:75:63:6B:6B:DE:A0:56:8F:50:42:DE:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3741BCFBC7B900C3E39700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:41:bc:fb:c7:b9:00:c3:e3:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=8b677a0e-3307-4739-bcc5-dec8c77b1f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:b6:0a:2d:34:38:01:22:e2:85:d3:27:45: 4b:0e:a6:34:80:87:b8:d5:2c:86:fc:14:5e:65:10: b7:0e:a7:2c:16:f7:ac:05:16:a3:65:a2:84:42:fa: 89:23:88:9d:e9:07:50:26:bd:8c:ef:7d:0a:57:16: f0:fe:e5:a5:5f:b5:c2:15:3a:33:c1:63:a7:65:80: 20:58:57:64:3e:53:39:27:e5:c6:fe:cd:6c:5e:26: 30:fc:9e:de:49:46:31:4c:0d:2b:64:d9:74:47:a8: c9:cd:19:3b:73:a8:b6:80:ae:aa:49:f0:41:8d:f7: 7c:64:c6:50:e1:9a:f9:6d:fa:db:07:8a:d6:d8:74: 0d:d5:03:bb:ee:ae:14:82:7e:a5:00:26:a0:91:82: 55:b0:99:0e:4d:31:a6:14:b3:74:04:89:71:a1:d9: cf:39:0a:9b:8b:2f:04:83:98:ea:42:d7:d6:b1:02: a9:94:2e:31:fe:3f:27:02:a8:2e:33:96:0d:48:85: a7:7a:94:6c:07:dc:20:a7:02:78:09:3e:dd:23:83: b0:cb:7a:1b:f9:41:f0:7e:4d:df:8c:98:c9:68:31: b3:90:89:92:9d:3c:45:87:31:79:58:bf:63:05:f8: a1:92:c5:3f:c0:c3:b9:5d:50:7c:4e:2a:ce:5c:7e: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:17:92:24:D0:7A:F3:C8:75:63:6B:6B:DE:A0:56:8F:50:42:DE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a53c42f-d7af-3299-b028-af7e5432e3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:18:0c:26:49:85:70:49:95:24:5a:d3:4e:30:1c:58:dd:cf: 21:ec:1f:6d:31:bb:85:98:0a:8b:3f:47:b4:87:11:f0:72:45: 11:92:16:6c:6c:d3:17:f6:2d:94:cc:c8:e5:1d:1a:04:26:70: cc:4c:cf:bc:b5:0b:e2:53:c7:20:ce:48:ca:df:00:37:65:d5: 71:a4:ac:06:7f:33:c8:80:1a:b0:78:8d:ae:a7:5f:26:4d:2e: 12:7e:45:9b:0f:b6:fb:0c:10:7c:32:73:cc:9e:b5:52:4b:31: 2b:41:34:4d:20:0f:20:e2:48:a9:52:22:59:d7:31:7f:f8:a6: 1a:8d:5c:fb:89:5b:52:06:de:57:66:31:95:0e:18:2d:26:f4: 5d:8f:90:6a:b2:65:1a:16:7c:3e:e5:5e:ca:5e:e8:ad:11:0c: 8a:e3:3b:f0:68:0f:b2:af:0b:f8:89:a4:e8:a4:44:2f:8b:3d: 88:81:7b:a6:dc:73:52:27:ad:63:a4:12:08:e0:c8:6b:66:c3: 83:47:ee:ea:f4:d1:cd:4a:7e:5d:8e:e6:4c:b9:8c:f5:26:3c: 75:4c:3d:0b:c7:28:54:c8:76:c7:29:c7:6b:bc:b3:c1:d0:28: f9:5a:61:27:b3:e7:d2:5c:fa:39:c6:93:98:21:5a:3e:7e:21: e8:a8:7f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0G8+8e5AMPjlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGI2NzdhMGUtMzMwNy00NzM5LWJjYzUtZGVjOGM3N2IxZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR22Ci00OAEi4oXTJ0VLDqY0gIe41SyG/BRe ZRC3DqcsFvesBRajZaKEQvqJI4id6QdQJr2M730KVxbw/uWlX7XCFTozwWOnZYAg WFdkPlM5J+XG/s1sXiYw/J7eSUYxTA0rZNl0R6jJzRk7c6i2gK6qSfBBjfd8ZMZQ 4Zr5bfrbB4rW2HQN1QO77q4Ugn6lACagkYJVsJkOTTGmFLN0BIlxodnPOQqbiy8E g5jqQtfWsQKplC4x/j8nAqguM5YNSIWnepRsB9wgpwJ4CT7dI4Owy3ob+UHwfk3f jJjJaDGzkImSnTxFhzF5WL9jBfihksU/wMO5XVB8TirOXH6xMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkXkiTQevPIdWNra96gVo9QQt6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E1M2M0MmYtZDdhZi0z Mjk5LWIwMjgtYWY3ZTU0MzJlM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoYDCZJhXBJlSRa004wHFjdzyHsH20xu4WYCos/R7SHEfByRRGSFmxs 0xf2LZTMyOUdGgQmcMxMz7y1C+JTxyDOSMrfADdl1XGkrAZ/M8iAGrB4ja6nXyZN LhJ+RZsPtvsMEHwyc8yetVJLMStBNE0gDyDiSKlSIlnXMX/4phqNXPuJW1IG3ldm MZUOGC0m9F2PkGqyZRoWfD7lXspe6K0RDIrjO/BoD7KvC/iJpOikRC+LPYiBe6bc c1InrWOkEgjgyGtmw4NH7ur00c1Kfl2O5ky5jPUmPHVMPQvHKFTIdscpx2u8s8HQ KPlaYSez59Jc+jnGk5ghWj5+Ieiof7k= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:59 2025 by rpki-client