$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ae08212-3f06-335c-85bc-b1cd6e6541a6.roa File: 8ae08212-3f06-335c-85bc-b1cd6e6541a6.roa (raw, json) Hash identifier: rHa0Oz4hlt626Zd7xmLYcdWHCEmrwMLIF3FE+7qvuFk= Subject key identifier: BD:C5:C4:6C:7B:34:1F:67:64:A3:B8:33:C8:76:7A:B5:CC:C6:35:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C540D338117CFC5E5F4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ae08212-3f06-335c-85bc-b1cd6e6541a6.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:54:0d:33:81:17:cf:c5:e5:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=c882e863-fbba-47bc-b647-c9f8231a4c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:d0:8a:cd:f9:b8:53:ed:b8:59:dd:06:04: 31:2f:c1:9a:ce:f1:63:22:70:1b:49:c1:8a:3a:1d: 4b:78:b8:17:8b:04:57:a9:9b:f6:a1:37:ad:ba:f2: 42:8a:b0:3f:b9:c4:17:de:5b:0c:06:1e:38:9d:e5: 2d:b6:f6:44:57:bb:77:c1:a6:e0:cf:45:e8:cf:96: 44:e7:f3:55:e2:45:d5:07:c5:09:6f:41:11:d9:5b: a6:c0:e2:f2:92:18:0e:74:6f:96:6c:be:da:ec:cd: 4c:78:a1:70:ed:0e:ad:13:60:d7:4e:95:7c:95:da: 91:51:d6:89:33:d0:2f:8a:c7:91:50:82:95:72:9f: 43:ab:5a:a5:ac:3a:5c:28:ae:3e:45:99:5f:42:98: 8b:81:8c:90:cc:d2:1a:60:49:aa:98:71:f2:f9:ac: c8:b3:54:58:b9:fc:1e:3a:ed:ec:65:fc:9c:3b:83: 08:e5:7d:54:ef:48:8e:0b:ff:ff:ad:34:90:94:0f: 8b:02:e9:57:a0:d6:f4:ef:9a:b8:21:45:a6:8b:82: 82:42:4c:36:73:13:97:80:dd:6e:42:fb:c9:00:2c: 89:e6:81:fd:3c:9e:38:48:13:59:04:0a:50:bf:51: 8c:6b:6b:1b:ce:2f:93:22:bd:c0:db:9f:ad:90:d1: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C5:C4:6C:7B:34:1F:67:64:A3:B8:33:C8:76:7A:B5:CC:C6:35:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ae08212-3f06-335c-85bc-b1cd6e6541a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:09:f3:b9:6a:c1:60:e7:6c:2c:21:fd:f1:c8:c8:38:9e:45: 82:ed:9e:7c:be:5c:a6:a1:f5:9e:a5:a2:9a:c6:35:30:47:97: aa:1a:97:c0:5b:94:47:bc:ba:20:6e:45:c8:34:f4:ae:28:27: 98:2d:61:1a:e8:3a:bf:7c:25:e4:37:65:2e:6e:a6:17:92:00: e2:d1:1d:5b:92:7e:bc:01:b9:06:71:32:76:9b:fd:bc:b5:e1: ce:f7:51:dd:7f:89:16:05:80:dd:b4:fe:84:22:d4:dd:83:03: 3c:e3:ff:04:c1:41:db:7c:86:b3:23:53:44:48:69:c3:9b:2c: 7a:63:2e:31:35:6f:83:61:42:bc:7e:23:c0:bc:94:cd:1e:4b: 50:04:1d:c1:c4:c0:69:8a:a9:e6:59:49:40:06:f7:c2:7b:80: da:98:79:df:d1:71:0f:4a:61:ec:29:ea:b6:15:2a:86:4e:da: c3:0f:54:12:21:6f:94:b2:24:31:bc:3e:af:33:c8:ac:53:ec: 4c:63:19:b2:f7:46:13:4d:6a:91:8e:08:3f:2b:47:12:55:9d: e1:35:a4:29:74:16:3f:09:78:d0:cc:c5:03:7b:2e:e6:37:02: 94:b4:cd:09:c8:dd:fd:fb:bd:3a:44:42:3b:66:5c:7a:d9:03: ac:77:d4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFQNM4EXz8Xl9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Yzg4MmU4NjMtZmJiYS00N2JjLWI2NDctYzlmODIzMWE0Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQPQis35uFPtuFndBgQxL8GazvFjInAbScGK Oh1LeLgXiwRXqZv2oTetuvJCirA/ucQX3lsMBh44neUttvZEV7t3wabgz0Xoz5ZE 5/NV4kXVB8UJb0ER2VumwOLykhgOdG+WbL7a7M1MeKFw7Q6tE2DXTpV8ldqRUdaJ M9AviseRUIKVcp9Dq1qlrDpcKK4+RZlfQpiLgYyQzNIaYEmqmHHy+azIs1RYufwe Ou3sZfycO4MI5X1U70iOC///rTSQlA+LAulXoNb075q4IUWmi4KCQkw2cxOXgN1u QvvJACyJ5oH9PJ44SBNZBApQv1GMa2sbzi+TIr3A25+tkNGyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3FxGx7NB9nZKO4M8h2erXMxjW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGFlMDgyMTItM2YwNi0z MzVjLTg1YmMtYjFjZDZlNjU0MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQJ87lqwWDnbCwh/fHIyDieRYLtnny+XKah9Z6loprGNTBHl6oal8Bb lEe8uiBuRcg09K4oJ5gtYRroOr98JeQ3ZS5upheSAOLRHVuSfrwBuQZxMnab/by1 4c73Ud1/iRYFgN20/oQi1N2DAzzj/wTBQdt8hrMjU0RIacObLHpjLjE1b4NhQrx+ I8C8lM0eS1AEHcHEwGmKqeZZSUAG98J7gNqYed/RcQ9KYewp6rYVKoZO2sMPVBIh b5SyJDG8Pq8zyKxT7ExjGbL3RhNNapGOCD8rRxJVneE1pCl0Fj8JeNDMxQN7LuY3 ApS0zQnI3f37vTpEQjtmXHrZA6x31Fw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:53 2025 by rpki-client