$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7cae6bf-8767-319a-80d8-702c2ca7b36b.roa File: a7cae6bf-8767-319a-80d8-702c2ca7b36b.roa (raw, json) Hash identifier: aY7vSg7N+DjNzr6SMFREMJ9cNPT6yB7tv6k6NkAVY+A= Subject key identifier: 8B:50:61:98:25:89:8B:BA:61:EB:A1:DC:E1:2E:90:6B:A8:A3:22:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C25A69ACAC3F791153F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7cae6bf-8767-319a-80d8-702c2ca7b36b.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:25:a6:9a:ca:c3:f7:91:15:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=a334653c-8a3d-4335-a999-b48cede93409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:e8:1d:d0:61:ba:26:cb:c2:c0:77:53:1c: a9:bc:fc:cb:2b:3e:df:f9:9e:88:aa:98:ea:17:71: ba:89:f0:67:cf:c7:79:64:48:fe:53:77:7b:0e:6e: 34:e4:84:8f:db:1b:85:d7:8c:ea:34:68:2f:ee:96: 27:d4:29:e0:72:75:8d:70:48:e7:fa:8f:4e:c6:7d: 93:08:ad:75:3c:3d:22:12:fd:53:08:c7:52:ec:b9: 04:8f:5b:4a:2a:88:74:4d:02:78:39:ef:92:9c:a9: de:79:36:70:66:e7:c8:92:ee:d9:c4:44:3c:4d:52: d9:1d:33:17:56:60:5e:9d:b8:e2:c6:90:98:0a:2c: 0e:12:c2:3c:03:57:a4:94:ca:ef:48:a3:82:d3:b8: a4:cc:60:b6:a5:9e:8f:ff:6a:92:b4:3e:99:33:d0: c6:87:59:c2:12:5d:4c:d8:b5:3f:61:7e:12:a7:5d: 39:3c:19:d7:e8:d4:8b:1b:2b:f6:9c:d4:c0:62:bf: 34:c8:b9:b6:71:9b:e7:3a:c1:0c:f3:bb:96:81:94: a2:14:ac:11:ca:79:25:ae:2a:50:83:2d:f8:8c:03: c1:13:4b:8b:3f:dd:fb:b0:38:54:75:46:f2:e2:fe: 3d:2e:c7:e1:e1:5a:85:aa:8d:e1:d7:91:a0:02:a7: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:61:98:25:89:8B:BA:61:EB:A1:DC:E1:2E:90:6B:A8:A3:22:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7cae6bf-8767-319a-80d8-702c2ca7b36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:38:6a:5b:3e:34:c6:3a:f1:9d:a6:84:b7:40:6c:51:35:08: f6:26:3b:b6:cf:14:64:64:a3:c5:7b:60:06:c4:5f:91:d6:58: 4e:27:30:42:42:20:44:e1:37:2f:ea:21:26:db:67:bf:db:24: 2c:46:00:ae:87:4c:4d:77:bc:35:68:af:23:bb:f1:53:af:b7: fe:17:3f:ff:07:25:aa:b2:8c:4b:62:8b:a1:bd:cd:1d:b9:a1: 5a:07:f7:97:f0:7e:d5:8e:df:68:eb:b3:e4:1e:d8:d9:bc:2b: fa:1f:dd:aa:52:fe:c6:4b:76:d8:9b:61:96:e3:c6:ae:a9:a9: f5:d3:e6:8a:49:f0:89:3a:b4:03:8b:06:44:ea:17:6c:9e:45: 58:15:c3:75:88:bf:c2:74:0f:f9:fb:8c:af:f1:76:39:0e:da: 57:3b:60:b0:ad:10:f8:80:42:2d:e0:be:52:d3:40:af:96:4e: 87:3e:91:68:36:82:3d:29:9a:f5:ad:35:8d:4c:20:58:4b:d9: e8:5e:ee:f0:a6:e2:32:72:cd:1f:8a:35:2c:56:72:b5:da:b6: be:c7:ea:b4:17:f5:90:93:5b:13:91:c1:9c:49:db:57:99:09: 34:68:86:68:c2:ea:f1:19:10:2e:78:7c:d9:4d:8c:cc:cf:8f: d2:2b:98:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCWmmsrD95EVPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YTMzNDY1M2MtOGEzZC00MzM1LWE5OTktYjQ4Y2VkZTkzNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoDoHdBhuibLwsB3UxypvPzLKz7f+Z6Iqpjq F3G6ifBnz8d5ZEj+U3d7Dm405ISP2xuF14zqNGgv7pYn1CngcnWNcEjn+o9Oxn2T CK11PD0iEv1TCMdS7LkEj1tKKoh0TQJ4Oe+SnKneeTZwZufIku7ZxEQ8TVLZHTMX VmBenbjixpCYCiwOEsI8A1eklMrvSKOC07ikzGC2pZ6P/2qStD6ZM9DGh1nCEl1M 2LU/YX4Sp105PBnX6NSLGyv2nNTAYr80yLm2cZvnOsEM87uWgZSiFKwRynklripQ gy34jAPBE0uLP937sDhUdUby4v49Lsfh4VqFqo3h15GgAqcjwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItQYZgliYu6Yeuh3OEukGuooyI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdjYWU2YmYtODc2Ny0z MTlhLTgwZDgtNzAyYzJjYTdiMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAK0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ4als+NMY68Z2mhLdAbFE1CPYmO7bPFGRko8V7YAbEX5HWWE4nMEJC IEThNy/qISbbZ7/bJCxGAK6HTE13vDVoryO78VOvt/4XP/8HJaqyjEtii6G9zR25 oVoH95fwftWO32jrs+Qe2Nm8K/of3apS/sZLdtibYZbjxq6pqfXT5opJ8Ik6tAOL BkTqF2yeRVgVw3WIv8J0D/n7jK/xdjkO2lc7YLCtEPiAQi3gvlLTQK+WToc+kWg2 gj0pmvWtNY1MIFhL2ehe7vCm4jJyzR+KNSxWcrXatr7H6rQX9ZCTWxORwZxJ21eZ CTRohmjC6vEZEC54fNlNjMzPj9IrmMo= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:03 2025 by rpki-client