$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9afddce8-a12b-3570-8868-371fd5adf033.roa File: 9afddce8-a12b-3570-8868-371fd5adf033.roa (raw, json) Hash identifier: bgO3Ri53S0nu4DUS4S3DI4kbEbVe+dIiGnu9nOfFYhg= Subject key identifier: 7B:03:A5:C3:41:D9:45:B1:25:8B:68:94:F4:D7:74:17:2D:B7:79:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24D5D909BE9DF38171000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9afddce8-a12b-3570-8868-371fd5adf033.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.1.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4d:5d:90:9b:e9:df:38:17:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6cb65e53-ce81-4642-9eb6-f2d7e7a8fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bc:e4:54:68:bb:19:5d:2e:51:21:aa:7b:f2: 4d:97:68:f2:b7:36:2c:13:9f:d9:85:b1:ce:21:3e: 31:8c:81:06:01:6f:20:61:90:c0:79:79:b2:a8:2f: ba:26:f2:48:50:be:f9:13:04:db:ea:4a:c9:d6:35: b4:76:3f:c6:02:3b:3c:e2:d6:c9:91:8e:b1:32:0c: 3e:7e:3a:49:2e:db:03:23:9a:2e:12:d5:cd:29:7d: 29:23:88:b5:f8:b3:1f:50:5c:c5:8b:ba:88:ce:c1: 01:19:15:86:52:24:6f:e2:71:22:12:9b:0b:0f:23: f0:08:76:d8:7a:0c:45:95:4d:75:d5:79:8b:68:95: 69:e1:fc:4b:82:34:cb:36:fb:69:af:fa:9b:76:a0: ba:7d:36:8b:eb:42:7b:17:8c:be:0a:d5:c3:f3:13: 2e:fb:20:32:8e:84:44:04:4e:53:9d:e7:ee:9d:4c: 9b:da:8b:ca:cb:71:dd:38:82:41:7d:3b:3d:0b:9a: 48:67:9a:4c:94:7e:66:a1:77:c0:64:04:1c:37:9b: d9:90:bd:65:12:ed:b3:27:2b:16:85:2f:ad:cc:5d: 07:4f:7b:8d:ba:25:f3:3e:5f:9d:2e:ec:af:d6:b9: 6f:1e:1a:fa:28:f0:57:79:ed:a6:25:be:7d:72:3c: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:03:A5:C3:41:D9:45:B1:25:8B:68:94:F4:D7:74:17:2D:B7:79:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9afddce8-a12b-3570-8868-371fd5adf033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5b:fb:3e:38:10:0c:23:ad:35:ab:eb:a0:00:1e:10:7b:e0: 91:07:06:58:bf:99:8b:b2:00:c8:08:a0:c2:b3:77:aa:6a:4c: 19:9b:1b:a6:3c:6e:9c:33:4c:ef:48:ea:37:a6:1f:00:d2:45: 7e:f6:11:11:aa:46:bc:0a:4f:28:29:b4:f5:3f:1e:f6:ba:82: fb:00:71:b5:59:12:90:98:37:57:a2:0d:6a:5e:58:ce:30:40: 1a:f3:91:94:92:b4:a0:97:96:1d:d8:ae:ad:8c:3c:2a:bf:6a: 3b:24:d6:76:19:c7:d9:36:2a:2e:46:01:87:d4:52:0a:d0:27: 6b:18:82:7c:6c:6e:d7:51:6f:5f:bc:43:b2:a3:37:b0:74:21: af:cd:a7:ae:19:27:f9:9c:94:21:a2:bd:95:e1:7c:7b:6c:db: 0c:7e:70:1d:15:68:15:82:cd:11:ba:17:22:a5:1e:54:d6:cb: 1f:57:f9:7d:11:4a:00:b3:7d:63:35:7c:2c:1f:5f:a0:71:cd: e7:cb:df:8c:e5:73:95:37:37:cc:01:b1:54:21:50:fe:91:c2: 23:b7:20:4a:bb:fa:c9:7f:26:6a:44:97:5a:56:da:3b:d8:78: 50:31:c9:77:20:12:8e:51:32:f3:20:58:35:39:be:13:b5:aa: 1e:97:99:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k1dkJvp3zgXEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmNiNjVlNTMtY2U4MS00NjQyLTllYjYtZjJkN2U3YThmY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrzkVGi7GV0uUSGqe/JNl2jytzYsE5/ZhbHO IT4xjIEGAW8gYZDAeXmyqC+6JvJIUL75EwTb6krJ1jW0dj/GAjs84tbJkY6xMgw+ fjpJLtsDI5ouEtXNKX0pI4i1+LMfUFzFi7qIzsEBGRWGUiRv4nEiEpsLDyPwCHbY egxFlU111XmLaJVp4fxLgjTLNvtpr/qbdqC6fTaL60J7F4y+CtXD8xMu+yAyjoRE BE5TnefunUyb2ovKy3HdOIJBfTs9C5pIZ5pMlH5moXfAZAQcN5vZkL1lEu2zJysW hS+tzF0HT3uNuiXzPl+dLuyv1rlvHhr6KPBXee2mJb59cjxP6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsDpcNB2UWxJYtolPTXdBctt3mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFmZGRjZTgtYTEyYi0z NTcwLTg4NjgtMzcxZmQ1YWRmMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAG7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItb+z44EAwjrTWr66AAHhB74JEHBli/mYuyAMgIoMKzd6pqTBmbG6Y8 bpwzTO9I6jemHwDSRX72ERGqRrwKTygptPU/Hva6gvsAcbVZEpCYN1eiDWpeWM4w QBrzkZSStKCXlh3Yrq2MPCq/ajsk1nYZx9k2Ki5GAYfUUgrQJ2sYgnxsbtdRb1+8 Q7KjN7B0Ia/Np64ZJ/mclCGivZXhfHts2wx+cB0VaBWCzRG6FyKlHlTWyx9X+X0R SgCzfWM1fCwfX6BxzefL34zlc5U3N8wBsVQhUP6RwiO3IEq7+sl/JmpEl1pW2jvY eFAxyXcgEo5RMvMgWDU5vhO1qh6XmYA= -----END CERTIFICATE-----Generated at Thu Oct 16 01:37:22 2025 by rpki-client