$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86e89c6b-814e-3506-8f25-cbd0b3420f65.roa File: 86e89c6b-814e-3506-8f25-cbd0b3420f65.roa (raw, json) Hash identifier: vsEc5uJRyCgIeE14iA+2ROwWROQB2OhdP0QmkVlBMPw= Subject key identifier: BD:D3:B9:35:66:F8:FA:CC:B8:BA:C2:4F:AA:EB:43:6A:BF:66:9D:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4F2EE918B4180E2BABE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86e89c6b-814e-3506-8f25-cbd0b3420f65.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4f:2e:e9:18:b4:18:0e:2b:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=c8b39447-79e7-4181-b5ff-ce4ee5e7da24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:85:60:56:4c:89:da:5c:c2:6b:e7:24:b6: 52:bf:fe:f9:79:d1:ba:50:ae:27:18:81:76:e7:5c: bb:ef:4d:27:19:c3:10:50:18:01:1d:18:ac:61:03: 08:ad:0f:04:fe:88:85:c9:53:2d:31:ad:a7:fd:8c: aa:54:6f:18:76:48:e4:c9:02:d1:c4:ea:05:b0:0a: ec:ae:a1:1b:10:80:5e:16:33:f5:60:d9:9f:47:fe: 25:f6:a5:1b:b9:c0:be:c2:25:b2:49:fa:b2:66:96: 28:d0:66:f0:e0:51:bb:8e:93:23:6e:81:37:f0:fe: 56:f5:8d:5c:76:40:18:d3:a5:76:86:79:e2:f5:87: 91:af:83:52:33:7e:1e:8c:83:b4:f2:51:47:86:a5: 4f:9e:3a:dd:08:1a:36:29:26:f1:33:62:fb:83:e4: 54:a6:6c:19:e2:dd:3d:cf:73:23:8c:cc:86:a7:c8: 91:1b:9f:cc:4c:8b:c2:59:ca:db:ca:4c:94:da:e6: 0b:14:d8:67:d0:24:30:38:de:0b:4b:53:e1:90:b5: ac:6e:18:a7:c4:52:ef:05:f5:82:3f:aa:de:bf:fb: bb:72:de:bc:ca:f3:49:5f:3d:55:48:29:4e:e7:57: 31:6e:77:8b:f8:91:28:13:76:ef:c9:3c:09:46:f7: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:B9:35:66:F8:FA:CC:B8:BA:C2:4F:AA:EB:43:6A:BF:66:9D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86e89c6b-814e-3506-8f25-cbd0b3420f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:10:46:f7:b1:96:11:2c:2c:4b:ea:44:47:89:90:75:3d:ee: 71:fd:bc:43:18:51:d6:fa:f9:f1:6b:36:8e:36:b1:23:75:92: 24:8a:7a:55:8a:da:4c:06:86:a2:5d:7a:20:a3:f4:c7:0c:40: 9b:cd:c0:78:f1:fb:dc:9f:75:b0:f4:21:ed:49:32:d5:e6:ea: e9:5b:be:27:b7:c0:83:95:91:54:43:f2:48:c8:2c:8d:24:40: 3e:a7:28:54:12:48:3d:0f:61:a4:9f:a6:7e:9d:a9:14:8e:41: 48:17:d9:5e:ed:ef:6a:6e:92:d2:3d:18:db:bf:15:78:13:61: 1d:3b:c7:15:af:8a:77:00:b9:57:07:29:92:e6:49:c2:e5:c6: 3f:40:e1:4d:d2:c3:e4:4a:ff:47:13:ae:d8:94:bc:13:cd:7c: c9:e3:b5:a5:8f:1d:cb:25:13:1f:af:91:73:07:6f:97:50:fa: a7:83:4b:6b:d4:ec:61:c7:0e:a7:74:49:24:37:99:30:bd:bc: 61:15:15:f8:e8:bf:b6:09:79:c9:76:76:fa:15:5d:05:0c:18: 38:5a:89:35:99:a0:1d:8e:48:3f:f8:83:d6:7d:14:e3:1f:a7: 91:af:7d:b5:11:91:1c:cc:a5:4f:50:5a:50:f4:6c:e1:87:84: 2b:50:59:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnE8u6Ri0GA4rq+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YzhiMzk0NDctNzllNy00MTgxLWI1ZmYtY2U0ZWU1ZTdkYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fKFYFZMidpcwmvnJLZSv/75edG6UK4nGIF2 51y7700nGcMQUBgBHRisYQMIrQ8E/oiFyVMtMa2n/YyqVG8YdkjkyQLRxOoFsArs rqEbEIBeFjP1YNmfR/4l9qUbucC+wiWySfqyZpYo0Gbw4FG7jpMjboE38P5W9Y1c dkAY06V2hnni9YeRr4NSM34ejIO08lFHhqVPnjrdCBo2KSbxM2L7g+RUpmwZ4t09 z3MjjMyGp8iRG5/MTIvCWcrbykyU2uYLFNhn0CQwON4LS1PhkLWsbhinxFLvBfWC P6rev/u7ct68yvNJXz1VSClO51cxbneL+JEoE3bvyTwJRvf9MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3TuTVm+PrMuLrCT6rrQ2q/Zp1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZlODljNmItODE0ZS0z NTA2LThmMjUtY2JkMGIzNDIwZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEQRvexlhEsLEvqREeJkHU97nH9vEMYUdb6+fFrNo42sSN1kiSKelWK 2kwGhqJdeiCj9McMQJvNwHjx+9yfdbD0Ie1JMtXm6ulbvie3wIOVkVRD8kjILI0k QD6nKFQSSD0PYaSfpn6dqRSOQUgX2V7t72puktI9GNu/FXgTYR07xxWvincAuVcH KZLmScLlxj9A4U3Sw+RK/0cTrtiUvBPNfMnjtaWPHcslEx+vkXMHb5dQ+qeDS2vU 7GHHDqd0SSQ3mTC9vGEVFfjov7YJecl2dvoVXQUMGDhaiTWZoB2OSD/4g9Z9FOMf p5GvfbURkRzMpU9QWlD0bOGHhCtQWVM= -----END CERTIFICATE-----Generated at Thu Oct 16 01:47:00 2025 by rpki-client