$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fe87d01-da59-324f-a812-07ff8314b023.roa File: 8fe87d01-da59-324f-a812-07ff8314b023.roa (raw, json) Hash identifier: c3OczFJBl7nqOCKNMP90DbUPTlmZ8dWwApBc6XPBIno= Subject key identifier: 87:6C:49:AA:7C:5A:A5:25:DA:0A:EB:B4:B0:52:A4:D7:68:B2:6F:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373C0A2DBB3508EEAC8C30 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fe87d01-da59-324f-a812-07ff8314b023.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3c:0a:2d:bb:35:08:ee:ac:8c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=81695526-ecd8-48e1-a76f-ee2287df9f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:04:3b:cf:5c:59:b1:64:8a:6c:fe:ac:39: 92:59:b4:43:f4:48:72:fd:c0:fc:c3:d0:36:1a:82: 75:75:d1:ce:aa:86:00:e3:7d:d6:e0:59:53:99:82: 18:dc:94:e2:79:b3:42:24:ae:7e:4b:60:4c:c1:1a: 0c:ec:95:e0:d9:f1:da:c3:85:c2:c8:c5:56:b8:96: 90:18:2c:e0:2b:d1:2c:5a:34:ca:8e:e8:48:3d:43: 44:25:04:68:d8:b9:5c:16:d7:76:09:03:ec:4c:41: a1:81:de:01:3e:c8:6d:31:a4:33:35:33:c0:0e:e6: 62:13:f1:50:ef:5e:0e:e6:47:32:66:65:71:20:57: 68:02:40:04:a6:ca:19:36:47:50:a5:19:63:7c:29: 18:45:47:0d:a5:ef:f6:4e:1f:db:00:03:fe:5d:c1: aa:47:ba:fc:96:6d:b5:ee:73:ce:51:55:52:b3:b8: 42:40:42:09:f3:a4:d5:50:d7:7e:34:5d:92:2b:11: 41:26:f3:00:10:60:9f:32:2b:c6:ef:d3:80:ab:c4: 3d:c7:11:aa:c9:0f:be:4f:ca:02:a5:9b:7b:fd:34: 12:e6:13:a4:05:ca:e3:fe:e1:0d:3c:6b:01:f9:e6: e1:99:ea:b2:43:84:f1:84:cc:03:85:35:3c:0c:e2: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6C:49:AA:7C:5A:A5:25:DA:0A:EB:B4:B0:52:A4:D7:68:B2:6F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fe87d01-da59-324f-a812-07ff8314b023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6d:34:4e:9a:51:85:37:0c:c4:88:5c:ff:e5:12:66:23:0c: fb:d9:e1:93:cf:7f:74:8d:ae:98:39:99:57:22:5f:cc:7a:db: d8:79:df:10:98:58:a5:cf:16:f8:f1:37:a8:d9:e2:8c:1f:fd: 5f:58:00:4d:e7:78:58:cf:8f:96:0f:90:fd:4f:c3:e2:44:d9: 0c:9b:92:1b:83:d9:c9:22:61:83:ae:ba:42:51:6e:31:ad:1b: ac:be:05:ec:97:54:56:a9:d1:98:35:e7:c5:c4:5b:04:a9:09: 03:85:d5:b6:60:d2:4c:7a:b3:d9:eb:09:2e:cd:5e:54:30:d1: 00:b9:13:0e:23:b0:b8:33:23:59:45:0e:3f:7e:fc:0d:5f:b9: 91:86:4d:dc:db:81:6b:45:94:1b:02:fc:88:c9:49:c5:14:e3: bf:47:28:56:6c:df:f2:8e:f4:64:78:44:d1:67:1b:07:e6:67: 52:7e:00:b6:08:9b:9f:d7:ac:e1:bd:c3:81:9c:84:24:30:cb: 70:20:22:0d:e7:21:66:9d:b9:e3:7c:26:70:bf:b3:83:ba:0f: 20:e2:9f:29:c5:3f:39:dd:fd:64:b1:21:cb:61:b4:ca:7c:e6: 15:a1:c5:67:74:58:cc:45:df:02:d6:9e:36:35:15:ce:d6:dc: 36:17:d2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzwKLbs1CO6sjDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODE2OTU1MjYtZWNkOC00OGUxLWE3NmYtZWUyMjg3ZGY5ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP4EO89cWbFkimz+rDmSWbRD9Ehy/cD8w9A2 GoJ1ddHOqoYA433W4FlTmYIY3JTiebNCJK5+S2BMwRoM7JXg2fHaw4XCyMVWuJaQ GCzgK9EsWjTKjuhIPUNEJQRo2LlcFtd2CQPsTEGhgd4BPshtMaQzNTPADuZiE/FQ 714O5kcyZmVxIFdoAkAEpsoZNkdQpRljfCkYRUcNpe/2Th/bAAP+XcGqR7r8lm21 7nPOUVVSs7hCQEIJ86TVUNd+NF2SKxFBJvMAEGCfMivG79OAq8Q9xxGqyQ++T8oC pZt7/TQS5hOkBcrj/uENPGsB+ebhmeqyQ4TxhMwDhTU8DOLfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdsSap8WqUl2grrtLBSpNdosm+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGZlODdkMDEtZGE1OS0z MjRmLWE4MTItMDdmZjgzMTRiMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhtNE6aUYU3DMSIXP/lEmYjDPvZ4ZPPf3SNrpg5mVciX8x629h53xCY WKXPFvjxN6jZ4owf/V9YAE3neFjPj5YPkP1Pw+JE2QybkhuD2ckiYYOuukJRbjGt G6y+BeyXVFap0Zg158XEWwSpCQOF1bZg0kx6s9nrCS7NXlQw0QC5Ew4jsLgzI1lF Dj9+/A1fuZGGTdzbgWtFlBsC/IjJScUU479HKFZs3/KO9GR4RNFnGwfmZ1J+ALYI m5/XrOG9w4GchCQwy3AgIg3nIWadueN8JnC/s4O6DyDinynFPznd/WSxIcthtMp8 5hWhxWd0WMxF3wLWnjY1Fc7W3DYX0os= -----END CERTIFICATE-----Generated at Thu Oct 16 01:58:08 2025 by rpki-client