$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89b3dc21-4b10-37dc-90b2-e02d478f0a12.roa File: 89b3dc21-4b10-37dc-90b2-e02d478f0a12.roa (raw, json) Hash identifier: chyWQ9kRYMiGElqf7PJiT59UDnG5LRcjco7JEJfm6p8= Subject key identifier: F2:86:1A:EB:BF:FA:2E:A4:09:D3:5D:10:96:C8:E5:A3:1C:60:11:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2133A95D2D3FF2017200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89b3dc21-4b10-37dc-90b2-e02d478f0a12.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:21:33:a9:5d:2d:3f:f2:01:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=1dbb2b09-db5a-478c-8120-5063a2b0f696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:84:51:9a:9b:1a:ec:87:7a:ee:6d:a9:23: 1e:20:80:a6:62:08:9b:95:f5:cd:cc:e2:87:9d:b1: 53:c8:36:81:a8:3c:79:62:89:99:12:99:74:c9:64: 19:d0:a1:21:4d:96:9c:c6:5f:02:3c:fa:cb:bc:52: 9a:92:37:65:0b:27:c7:28:36:fe:6e:49:14:a0:8e: 11:c8:79:c9:d4:92:4b:03:5f:30:3e:d4:a7:e0:76: ce:18:5f:ab:12:39:76:83:10:5f:2b:3f:a9:2f:be: 6b:52:f0:4c:65:1d:90:8a:c9:2d:f2:1c:4d:61:12: 73:60:52:85:e4:04:f8:45:3d:1d:d6:02:b9:c0:60: 42:dd:9c:e5:2d:00:91:55:f9:39:48:c9:93:68:76: f8:9e:02:d9:71:ec:fd:e6:d8:77:6e:6d:50:98:b6: 66:61:e1:ed:d8:3b:17:69:4e:01:fa:cd:26:f7:b5: e9:16:98:d2:bc:be:f6:75:84:f3:62:b1:77:97:c3: c3:14:3e:50:8e:79:a6:b4:ae:1f:f5:32:1b:5e:56: 76:bf:04:92:0c:cc:c7:51:d5:32:64:b2:3c:80:0c: db:73:82:2b:23:87:a1:c0:b1:71:fb:ac:e5:8d:76: 11:46:fb:cb:11:90:a2:ab:92:c8:28:5f:b6:95:93: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:86:1A:EB:BF:FA:2E:A4:09:D3:5D:10:96:C8:E5:A3:1C:60:11:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89b3dc21-4b10-37dc-90b2-e02d478f0a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d7:95:d1:a6:f5:88:2b:0c:37:4a:6a:cc:fc:b0:af:78:ad: 34:3d:71:de:6d:84:f6:e7:35:ad:b6:c6:96:9f:2d:d6:b6:d0: 8e:87:f2:67:c9:79:f3:d2:08:73:90:7c:35:a4:eb:64:d0:34: f8:e7:eb:29:ac:ad:0f:6c:da:e4:23:ac:00:04:13:54:d8:97: d6:c0:04:41:2e:9b:e4:20:50:ae:d0:f2:86:74:6b:59:92:20: 2e:33:d4:38:8d:b2:19:0a:ac:e0:8c:ec:20:75:86:9e:c7:4c: e5:07:c2:b4:9f:72:85:c7:88:d8:1d:86:a8:d4:d0:8f:d8:36: c9:40:4f:1a:dc:5f:c2:cc:1a:a4:1e:c2:a1:2a:97:f8:7d:8e: 89:a0:5b:0f:fe:b1:a9:b6:f9:98:4f:15:bb:77:7d:c0:55:c4: 0a:3e:54:52:ce:3b:eb:76:36:26:dd:cb:d6:66:5a:a7:2d:fb: f0:9a:2b:a5:99:a6:10:94:91:a5:d4:90:b0:8d:43:2e:14:3b: 70:6a:37:40:7a:4e:2e:55:2a:04:ff:69:88:3b:19:6a:76:02: 8f:e8:e0:39:b3:ed:ad:5f:d5:e3:e6:b9:ff:83:9f:71:1b:65: d9:50:dd:b2:e4:45:41:fb:96:00:24:ed:2f:cf:68:88:21:8d: 51:d4:08:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCEzqV0tP/IBcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MWRiYjJiMDktZGI1YS00NzhjLTgxMjAtNTA2M2EyYjBmNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXyEUZqbGuyHeu5tqSMeIICmYgiblfXNzOKH nbFTyDaBqDx5YomZEpl0yWQZ0KEhTZacxl8CPPrLvFKakjdlCyfHKDb+bkkUoI4R yHnJ1JJLA18wPtSn4HbOGF+rEjl2gxBfKz+pL75rUvBMZR2Qiskt8hxNYRJzYFKF 5AT4RT0d1gK5wGBC3ZzlLQCRVfk5SMmTaHb4ngLZcez95th3bm1QmLZmYeHt2DsX aU4B+s0m97XpFpjSvL72dYTzYrF3l8PDFD5QjnmmtK4f9TIbXlZ2vwSSDMzHUdUy ZLI8gAzbc4IrI4ehwLFx+6zljXYRRvvLEZCiq5LIKF+2lZMnJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKGGuu/+i6kCdNdEJbI5aMcYBG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODliM2RjMjEtNGIxMC0z N2RjLTkwYjItZTAyZDQ3OGYwYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfXldGm9YgrDDdKasz8sK94rTQ9cd5thPbnNa22xpafLda20I6H8mfJ efPSCHOQfDWk62TQNPjn6ymsrQ9s2uQjrAAEE1TYl9bABEEum+QgUK7Q8oZ0a1mS IC4z1DiNshkKrOCM7CB1hp7HTOUHwrSfcoXHiNgdhqjU0I/YNslATxrcX8LMGqQe wqEql/h9jomgWw/+sam2+ZhPFbt3fcBVxAo+VFLOO+t2Nibdy9ZmWqct+/CaK6WZ phCUkaXUkLCNQy4UO3BqN0B6Ti5VKgT/aYg7GWp2Ao/o4Dmz7a1f1ePmuf+Dn3Eb ZdlQ3bLkRUH7lgAk7S/PaIghjVHUCOc= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:33 2025 by rpki-client