$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f92038d-c5e0-348a-899f-189610f5ab3b.roa File: 7f92038d-c5e0-348a-899f-189610f5ab3b.roa (raw, json) Hash identifier: 5YIbaHU9jVzByt6vhXRcgM++ordZJEnPO9xf4dyD4W8= Subject key identifier: A2:0C:89:40:02:FD:25:66:45:5C:36:4B:66:DE:3F:F4:AA:21:8C:AD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373A4245449D52F447C534 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f92038d-c5e0-348a-899f-189610f5ab3b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3a:42:45:44:9d:52:f4:47:c5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0f7f5d2b-7f3e-40cb-9b04-f11afba0e093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bc:2c:51:f6:41:ba:a2:bc:85:00:cc:6b:84: aa:26:3d:b4:67:01:31:eb:cc:9c:9e:75:45:f5:00: 1a:71:c2:a2:3d:37:1c:ba:ea:fa:10:81:00:84:8a: 5e:66:d8:40:50:83:90:47:60:44:45:f3:5b:da:1c: 5e:16:26:7c:73:ea:fc:15:98:e9:3c:40:26:be:86: 1c:c6:c7:51:2e:52:68:ce:70:c3:44:97:74:05:24: a7:d4:e4:a8:61:80:fe:a3:e3:43:38:fb:70:0d:8a: 89:b7:cf:bd:9f:d3:54:89:13:b9:96:6e:ea:02:ee: e9:dc:88:c8:94:4a:91:b0:41:80:f2:a4:64:e7:b1: 28:bf:fa:d1:56:bb:36:9a:f9:60:b5:92:d1:ce:86: 75:36:1f:3c:7c:e3:00:37:7f:c8:f1:55:99:08:24: db:63:5b:f3:40:e1:2c:ff:b5:d3:17:17:f9:cf:68: d6:83:70:e6:11:63:99:1d:7c:bb:64:a3:72:61:3f: 57:3f:93:8b:87:a9:ed:42:d2:0c:ef:af:ac:32:ef: 9e:2f:60:15:1d:9d:5a:ec:9c:bc:92:0a:c8:7d:28: b5:25:74:f4:3b:80:0d:12:70:7e:ee:8c:c8:42:d1: 99:2f:d3:2e:dc:37:dd:4e:c8:ef:27:60:9e:47:1d: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:89:40:02:FD:25:66:45:5C:36:4B:66:DE:3F:F4:AA:21:8C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f92038d-c5e0-348a-899f-189610f5ab3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:09:8a:94:88:f9:60:0d:c5:97:9a:45:f1:dc:0e:d7:bf:8e: 24:a8:7e:13:4d:73:82:28:e8:7d:e7:31:30:a6:92:75:9b:12: 9a:d8:3a:71:7d:d0:a4:96:e3:3d:87:39:44:ee:96:2b:fa:b6: e7:4d:c8:5d:42:d8:ca:e9:5b:4e:a4:9a:6a:ec:e9:73:da:50: 16:31:5c:c2:b3:f6:bf:28:28:c6:86:99:4b:78:6c:e0:19:2c: 2d:c5:bc:b1:74:f6:a5:7f:c5:ec:3c:3c:27:54:5c:59:0c:94: 30:d0:0f:a3:c6:f6:26:48:34:3a:dd:b2:e6:b8:69:ee:f3:9e: 0e:ad:77:74:0a:e8:c5:48:6e:6a:36:f5:73:63:cd:88:f3:7f: 21:14:59:42:3e:dc:4b:c4:34:9c:e4:0d:55:e8:e6:36:0b:b9: 7d:49:40:46:fc:66:c9:01:3c:7e:44:0e:df:1d:d2:64:48:e7: ab:3b:b4:6c:51:c3:11:80:04:3b:bf:14:4c:5e:0d:1c:70:9a: 8f:51:ce:b1:d8:05:ec:9a:5c:5a:c7:37:ec:ca:72:0f:7e:3a: c7:9c:24:4f:a0:82:94:01:78:5b:0d:13:09:06:bf:d6:b1:43: 19:a3:d5:71:bd:76:36:b8:a8:a2:92:b1:bc:d8:e5:d7:c9:dc: 9a:3e:29:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzpCRUSdUvRHxTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGY3ZjVkMmItN2YzZS00MGNiLTliMDQtZjExYWZiYTBlMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLwsUfZBuqK8hQDMa4SqJj20ZwEx68ycnnVF 9QAaccKiPTccuur6EIEAhIpeZthAUIOQR2BERfNb2hxeFiZ8c+r8FZjpPEAmvoYc xsdRLlJoznDDRJd0BSSn1OSoYYD+o+NDOPtwDYqJt8+9n9NUiRO5lm7qAu7p3IjI lEqRsEGA8qRk57Eov/rRVrs2mvlgtZLRzoZ1Nh88fOMAN3/I8VWZCCTbY1vzQOEs /7XTFxf5z2jWg3DmEWOZHXy7ZKNyYT9XP5OLh6ntQtIM76+sMu+eL2AVHZ1a7Jy8 kgrIfSi1JXT0O4ANEnB+7ozIQtGZL9Mu3DfdTsjvJ2CeRx1bYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIMiUAC/SVmRVw2S2beP/SqIYytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2Y5MjAzOGQtYzVlMC0z NDhhLTg5OWYtMTg5NjEwZjVhYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRACYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwJipSI+WANxZeaRfHcDte/jiSofhNNc4Io6H3nMTCmknWbEprYOnF9 0KSW4z2HOUTuliv6tudNyF1C2MrpW06kmmrs6XPaUBYxXMKz9r8oKMaGmUt4bOAZ LC3FvLF09qV/xew8PCdUXFkMlDDQD6PG9iZINDrdsua4ae7zng6td3QK6MVIbmo2 9XNjzYjzfyEUWUI+3EvENJzkDVXo5jYLuX1JQEb8ZskBPH5EDt8d0mRI56s7tGxR wxGABDu/FExeDRxwmo9RzrHYBeyaXFrHN+zKcg9+OsecJE+ggpQBeFsNEwkGv9ax Qxmj1XG9dja4qKKSsbzY5dfJ3Jo+KSM= -----END CERTIFICATE-----Generated at Thu Oct 16 01:58:03 2025 by rpki-client