$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8386468a-a035-3182-993a-4c12fd796311.roa File: 8386468a-a035-3182-993a-4c12fd796311.roa (raw, json) Hash identifier: RpMLGRbpwmrd2E0vZqBemroWpwrz+dR+oqJJLWovu7c= Subject key identifier: C1:CC:92:B7:2F:7A:32:CB:C3:F2:47:78:D7:85:78:36:8C:D5:85:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3739651C9D503CDD79CCC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8386468a-a035-3182-993a-4c12fd796311.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:39:65:1c:9d:50:3c:dd:79:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5daf6489-8773-4d79-805f-c4766a41cd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:af:3d:d2:48:3f:13:84:34:55:8b:4d:7e: 8c:2f:24:72:d8:d6:6a:1a:7b:ed:01:35:73:63:92: 71:a2:46:cd:2b:a7:73:b0:4a:9b:83:8e:4d:e0:48: 74:de:05:ba:26:a0:ea:56:4f:ba:e6:22:2f:08:b8: 0d:5d:5f:5e:15:b4:e7:9b:f8:66:66:59:e4:1b:d4: 3e:1f:c7:dd:d6:c6:53:c1:7a:4f:9c:1d:1b:31:f1: bb:4f:e0:dc:85:60:1f:e5:04:6a:bc:d4:6f:6a:52: 84:a3:b7:4d:27:e7:18:87:08:97:5f:2e:58:77:a9: 3a:43:91:24:1d:cd:a0:70:57:02:e6:a9:1a:0c:73: 17:67:ed:ad:b4:c4:b0:7d:86:ce:49:42:06:3f:64: ca:94:66:4f:ac:62:1e:71:ed:60:61:a7:98:0b:09: 04:00:2b:d2:f7:fd:a2:71:84:03:a0:bc:de:2f:8b: 0f:2b:28:c8:b4:56:49:58:18:16:76:08:10:01:d9: 92:0f:97:fc:5c:5c:58:be:7e:de:48:34:38:b8:e6: ab:78:8c:e0:e1:fb:0b:d8:be:f1:1f:81:b6:08:14: 2e:86:ae:8b:b3:44:96:46:68:c6:da:16:a9:15:13: 37:f0:c6:ef:ef:49:4e:65:6b:94:7e:69:80:76:d6: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CC:92:B7:2F:7A:32:CB:C3:F2:47:78:D7:85:78:36:8C:D5:85:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8386468a-a035-3182-993a-4c12fd796311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fc:26:b0:a6:ab:c7:7a:83:40:a5:a6:0e:2a:23:9d:a0:6c: 2b:ce:3e:64:1a:21:60:82:35:35:04:bc:ca:17:6a:76:83:83: 0c:73:bf:79:b3:e2:a7:a7:f2:3c:1c:68:d7:b9:bd:4f:52:a7: 26:59:70:64:97:5a:d6:b4:c9:d0:66:54:1d:90:df:d4:6b:a9: 1c:69:b1:4c:5a:26:d0:89:cb:2b:f9:b9:8e:13:c5:50:c0:0a: 01:03:71:20:b7:f4:52:8c:9f:81:92:3c:1e:f9:a0:19:72:f4: 7e:11:9a:ae:67:cc:f9:ee:78:fe:ec:21:62:9d:d2:bd:09:13: 35:78:02:d5:c4:70:31:bc:03:66:bf:94:a8:48:b1:eb:58:ad: 2f:2f:d1:e5:7b:e2:fc:3f:ef:f0:e8:dc:85:ba:3a:a4:7d:8f: b9:ca:9b:fd:91:f2:97:93:24:28:22:3e:bf:78:47:ca:2f:03: 6f:52:6c:2e:06:81:21:8a:c2:e0:e0:a6:af:85:53:ed:de:62: 04:1b:56:ad:c4:5a:e8:e3:7e:36:75:17:b5:3d:78:7b:e8:85: 11:93:b4:95:1a:2b:c3:02:e2:b3:83:8a:41:0f:8c:9c:96:c1: 97:c5:42:30:36:55:27:f4:f5:ef:3a:ff:38:24:76:ef:a7:77: c1:1a:20:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzllHJ1QPN15zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWRhZjY0ODktODc3My00ZDc5LTgwNWYtYzQ3NjZhNDFjZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW2vPdJIPxOENFWLTX6MLyRy2NZqGnvtATVz Y5JxokbNK6dzsEqbg45N4Eh03gW6JqDqVk+65iIvCLgNXV9eFbTnm/hmZlnkG9Q+ H8fd1sZTwXpPnB0bMfG7T+DchWAf5QRqvNRvalKEo7dNJ+cYhwiXXy5Yd6k6Q5Ek Hc2gcFcC5qkaDHMXZ+2ttMSwfYbOSUIGP2TKlGZPrGIece1gYaeYCwkEACvS9/2i cYQDoLzeL4sPKyjItFZJWBgWdggQAdmSD5f8XFxYvn7eSDQ4uOareIzg4fsL2L7x H4G2CBQuhq6Ls0SWRmjG2hapFRM38Mbv70lOZWuUfmmAdtZdXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHMkrcvejLLw/JHeNeFeDaM1YV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODM4NjQ2OGEtYTAzNS0z MTgyLTk5M2EtNGMxMmZkNzk2MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf8JrCmq8d6g0Clpg4qI52gbCvOPmQaIWCCNTUEvMoXanaDgwxzv3mz 4qen8jwcaNe5vU9SpyZZcGSXWta0ydBmVB2Q39RrqRxpsUxaJtCJyyv5uY4TxVDA CgEDcSC39FKMn4GSPB75oBly9H4Rmq5nzPnueP7sIWKd0r0JEzV4AtXEcDG8A2a/ lKhIsetYrS8v0eV74vw/7/Do3IW6OqR9j7nKm/2R8peTJCgiPr94R8ovA29SbC4G gSGKwuDgpq+FU+3eYgQbVq3EWujjfjZ1F7U9eHvohRGTtJUaK8MC4rODikEPjJyW wZfFQjA2VSf09e86/zgkdu+nd8EaINA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:07 2025 by rpki-client