$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a33ef038-abb4-33ae-87f0-5ff025582128.roa File: a33ef038-abb4-33ae-87f0-5ff025582128.roa (raw, json) Hash identifier: BdMAo9FmIQE7sItOHIVb9p/F8iwRoYymber5HTqNfGI= Subject key identifier: AA:2F:F3:66:2A:E9:35:CF:4C:5D:9C:3C:72:AA:1C:A3:D4:D2:47:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2084BD8BB28AED0E270C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a33ef038-abb4-33ae-87f0-5ff025582128.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:08:4b:d8:bb:28:ae:d0:e2:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9fb76c3f-e1a9-4b3f-807e-7ce0ccc488a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:93:0b:e0:e5:48:6f:94:ec:f8:7b:8d:22: 13:11:5b:56:0d:c0:52:4d:da:b0:02:62:3f:bf:6b: a6:91:16:7c:09:93:24:28:47:73:9e:55:25:54:2d: f0:5d:4d:f6:36:3d:04:2b:83:c2:9d:f1:3e:d9:24: 8f:98:6c:50:03:4e:5f:89:c2:d4:bf:4e:07:01:cf: 29:9c:bd:94:f1:d7:13:77:b1:a3:8e:5f:a7:7b:d9: 9a:a3:c0:cf:f4:fe:2f:0b:4f:71:a4:a8:c0:1a:c4: a2:19:56:7c:be:94:c5:b9:97:12:d0:82:30:17:4a: 5d:e6:9c:a8:79:35:81:60:31:4a:fd:3f:c8:d1:aa: de:fc:d0:4a:34:60:6e:b1:6e:40:7d:14:ab:f9:7b: d1:aa:b3:29:f7:a6:3a:33:e4:a3:00:47:50:20:ed: cd:cd:78:39:ce:c8:d1:67:80:3f:31:f9:df:af:7d: 6b:d0:24:9d:4b:89:ae:fb:c3:d7:0c:b4:83:4e:8c: 0c:4a:af:be:32:0f:12:df:64:a2:9f:ac:ae:01:28: 05:bd:b5:53:00:3f:4f:b9:b4:83:ad:bc:ab:4a:cc: ba:d1:6d:68:be:6d:6e:a9:bf:ee:89:a5:f9:8d:79: 8b:f2:e3:88:ea:4f:3e:44:ea:19:0a:f5:54:2e:4b: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2F:F3:66:2A:E9:35:CF:4C:5D:9C:3C:72:AA:1C:A3:D4:D2:47:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a33ef038-abb4-33ae-87f0-5ff025582128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bd:2a:74:2d:33:37:ac:1c:97:f9:16:cb:a8:22:74:6b:37: fa:69:09:cc:65:4f:ed:bf:c1:72:a1:6f:47:2a:cb:c1:3f:8e: 4f:d1:d1:de:08:f2:81:b1:5c:27:9c:dc:d2:e5:7e:cc:7e:36: 10:b5:49:9f:3c:2e:f2:55:e0:c2:4c:d5:bb:ee:06:21:ec:25: f1:36:b4:16:d9:02:f6:bf:2f:88:98:5d:7e:f6:e3:10:6f:a6: 2f:73:ee:6d:48:18:8a:07:39:73:dd:e1:00:70:81:4a:10:9d: 7d:7f:e2:03:94:82:14:f3:cd:c3:f2:d0:b3:86:02:cf:d3:d0: 78:bd:6e:bb:a2:9f:ff:dc:f7:8c:ac:01:df:8c:36:8c:ea:fa: e0:65:85:10:28:88:fc:b2:f1:fe:e4:0a:bc:34:bd:35:7c:68: a2:20:d6:66:e0:49:e8:77:dc:3d:13:15:b9:70:eb:e4:fc:93: 35:b3:29:b6:bc:16:08:7a:e4:b8:30:d0:3d:3f:c2:f2:ef:22: 25:19:fb:5f:56:07:dc:83:44:a1:3c:9f:b2:99:42:29:f6:dc: bc:de:7e:09:ba:40:80:1f:3e:7b:40:4f:80:b1:3f:45:17:73: 5f:99:02:c3:8a:dc:f6:87:3a:89:88:89:b8:7a:6a:44:05:a3: 1f:34:48:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ghL2LsortDicMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWZiNzZjM2YtZTFhOS00YjNmLTgwN2UtN2NlMGNjYzQ4OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7eTC+DlSG+U7Ph7jSITEVtWDcBSTdqwAmI/ v2umkRZ8CZMkKEdznlUlVC3wXU32Nj0EK4PCnfE+2SSPmGxQA05ficLUv04HAc8p nL2U8dcTd7Gjjl+ne9mao8DP9P4vC09xpKjAGsSiGVZ8vpTFuZcS0IIwF0pd5pyo eTWBYDFK/T/I0are/NBKNGBusW5AfRSr+XvRqrMp96Y6M+SjAEdQIO3NzXg5zsjR Z4A/Mfnfr31r0CSdS4mu+8PXDLSDTowMSq++Mg8S32Sin6yuASgFvbVTAD9PubSD rbyrSsy60W1ovm1uqb/uiaX5jXmL8uOI6k8+ROoZCvVULksrrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKov82Yq6TXPTF2cPHKqHKPU0kftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTMzZWYwMzgtYWJiNC0z M2FlLTg3ZjAtNWZmMDI1NTgyMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW9KnQtMzesHJf5FsuoInRrN/ppCcxlT+2/wXKhb0cqy8E/jk/R0d4I 8oGxXCec3NLlfsx+NhC1SZ88LvJV4MJM1bvuBiHsJfE2tBbZAva/L4iYXX724xBv pi9z7m1IGIoHOXPd4QBwgUoQnX1/4gOUghTzzcPy0LOGAs/T0Hi9bruin//c94ys Ad+MNozq+uBlhRAoiPyy8f7kCrw0vTV8aKIg1mbgSeh33D0TFblw6+T8kzWzKba8 Fgh65Lgw0D0/wvLvIiUZ+19WB9yDRKE8n7KZQin23Lzefgm6QIAfPntAT4CxP0UX c1+ZAsOK3PaHOomIibh6akQFox80SL4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:25 2025 by rpki-client