$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa File: a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa (raw, json) Hash identifier: OHYBfL4SfbwKrgtygGHf0H5MxXYiBw8CsrRnt+WuVuo= Subject key identifier: 0A:50:20:C3:30:A2:2E:80:78:67:EF:31:3E:3E:85:AD:45:73:1B:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20884C08D709B37734140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.225.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:08:84:c0:8d:70:9b:37:73:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=084b69eb-fc73-4758-bda7-b54196f14706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:97:2b:dc:ba:d5:e9:4f:87:68:7f:98:b4:fa: 5e:c3:34:8a:d2:f5:4b:93:92:06:2a:b0:4d:8a:11: e0:29:51:b2:44:d9:9a:2e:35:8d:cc:c8:f4:92:e1: e0:af:da:0f:a4:a5:97:c3:d9:22:86:a0:49:48:cb: f5:e6:ac:31:3d:1c:36:1a:4a:e2:a6:8a:95:6e:10: 0e:63:d5:6e:48:b4:d0:d8:53:1a:e7:6a:3e:ef:c6: 93:34:2e:56:95:c3:5b:94:92:76:20:db:9a:43:62: f6:69:fc:8e:7d:59:1a:49:2d:89:0d:ca:0a:dc:b8: aa:c9:e5:55:5e:58:45:08:99:39:01:c4:3c:04:cd: 98:e4:dc:fd:a0:9d:8e:4d:a2:47:c4:e1:e6:6d:2b: 71:ac:92:93:cc:f4:5f:3b:d1:64:d2:c0:1f:18:87: 98:28:da:50:c3:b9:6a:e3:15:29:33:39:56:54:61: 5d:fa:a2:78:5f:75:8e:71:7a:9d:78:be:0b:4f:42: 03:6b:23:c1:2e:72:8e:18:cf:4d:b3:b3:eb:5c:8c: a6:24:1e:5c:d6:d2:39:b2:43:b1:84:65:08:c2:86: 82:68:3f:b6:d2:4c:9e:7e:b2:9b:d1:f9:c4:10:df: 36:3f:fc:2f:58:48:03:39:97:12:0f:b8:6c:5e:fb: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:20:C3:30:A2:2E:80:78:67:EF:31:3E:3E:85:AD:45:73:1B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66fb8df-78b1-31ec-b4e4-84e5e066a474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d3:a2:6b:47:53:06:4b:ef:4b:c5:4f:d1:f6:35:1e:13:cd: 6c:22:39:3c:8f:ec:d1:97:8c:f2:38:36:93:28:41:70:d1:00: 62:d9:7a:68:0b:be:67:d6:31:2d:30:22:60:27:4b:47:e3:6d: 18:51:0b:5e:4f:b1:ae:aa:8c:c9:8f:88:fb:ca:f7:20:9e:79: 76:24:f8:04:cd:a7:cd:58:18:93:7c:78:1c:1c:47:d7:6f:83: 43:8e:09:c3:57:22:c4:c4:b0:f8:f1:4f:7b:ef:7d:ee:77:c4: 5f:2c:85:f3:89:c8:de:d5:6d:9e:b9:2d:2b:87:21:6d:4b:19: b2:a6:8c:58:0d:57:bd:8e:5a:31:a1:63:e7:a2:72:36:6e:c9: 3a:55:bc:e9:20:e2:4e:18:ff:ce:0d:f6:46:80:49:a6:0a:62: 0d:63:53:4f:16:73:01:4d:cf:4b:09:1d:5e:94:91:5b:eb:7a: 46:8c:a5:35:73:c8:27:ee:a0:27:36:82:09:56:8b:2b:f6:57: 9b:76:74:af:75:19:80:9c:68:53:39:95:a5:bd:e0:ea:b2:04: 27:08:a7:a9:85:35:d2:87:4e:fa:ea:ea:9b:ae:bd:ff:5d:7e: 08:35:ab:f6:93:68:d9:ef:5a:67:83:61:8d:d0:c4:fd:07:82: 20:ac:f7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28giEwI1wmzdzQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDg0YjY5ZWItZmM3My00NzU4LWJkYTctYjU0MTk2ZjE0NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5cr3LrV6U+HaH+YtPpewzSK0vVLk5IGKrBN ihHgKVGyRNmaLjWNzMj0kuHgr9oPpKWXw9kihqBJSMv15qwxPRw2GkripoqVbhAO Y9VuSLTQ2FMa52o+78aTNC5WlcNblJJ2INuaQ2L2afyOfVkaSS2JDcoK3LiqyeVV XlhFCJk5AcQ8BM2Y5Nz9oJ2OTaJHxOHmbStxrJKTzPRfO9Fk0sAfGIeYKNpQw7lq 4xUpMzlWVGFd+qJ4X3WOcXqdeL4LT0IDayPBLnKOGM9Ns7PrXIymJB5c1tI5skOx hGUIwoaCaD+20kyefrKb0fnEEN82P/wvWEgDOZcSD7hsXvuhhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApQIMMwoi6AeGfvMT4+ha1FcxsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2ZmI4ZGYtNzhiMS0z MWVjLWI0ZTQtODRlNWUwNjZhNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXTomtHUwZL70vFT9H2NR4TzWwiOTyP7NGXjPI4NpMoQXDRAGLZemgL vmfWMS0wImAnS0fjbRhRC15Psa6qjMmPiPvK9yCeeXYk+ATNp81YGJN8eBwcR9dv g0OOCcNXIsTEsPjxT3vvfe53xF8shfOJyN7VbZ65LSuHIW1LGbKmjFgNV72OWjGh Y+eicjZuyTpVvOkg4k4Y/84N9kaASaYKYg1jU08WcwFNz0sJHV6UkVvrekaMpTVz yCfuoCc2gglWiyv2V5t2dK91GYCcaFM5laW94OqyBCcIp6mFNdKHTvrq6puuvf9d fgg1q/aTaNnvWmeDYY3QxP0HgiCs92o= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:28 2025 by rpki-client