$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af63fbef-3ae2-34fc-846e-035d7bb02837.roa File: af63fbef-3ae2-34fc-846e-035d7bb02837.roa (raw, json) Hash identifier: 7NuZwVYYi+off9A5EDgg8G/uQgt0NX+MYpTNq0kJF/o= Subject key identifier: A3:7A:5B:DF:ED:F1:FD:99:B9:C4:2A:92:55:40:D4:F3:92:B7:78:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AF95168CFFDD892996F608880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af63fbef-3ae2-34fc-846e-035d7bb02837.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 22773 IP address blocks: 68.7.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:68:cf:fd:d8:92:99:6f:60:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=d8f26c65-8920-4b3f-b74d-99ca38d96f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:48:be:f6:1a:ec:fc:23:b2:e0:16:06:59: 39:d6:39:31:df:51:f1:1c:0e:64:81:f1:8b:79:ed: 80:5e:04:c0:31:bd:0b:5c:ea:08:8b:4b:f5:0c:7e: 12:a5:88:9c:69:cb:c1:32:10:2d:4c:3a:2b:3e:a5: b2:67:c2:59:6e:0a:28:85:7c:40:4b:c8:ce:fe:a1: 88:3c:71:35:ec:17:72:94:ec:bc:d4:9e:3c:c2:4b: 1c:55:b7:4c:2e:5c:dc:c5:c2:a8:ad:5b:ab:cd:c1: 33:5c:d7:a6:71:cf:5a:f5:b4:9c:44:10:08:2d:22: 44:f4:90:17:1a:60:95:5e:b9:bf:1a:74:10:3c:84: 32:08:65:48:e7:da:3f:2c:04:a7:ef:8a:9f:63:61: dd:07:6d:cc:53:40:70:49:92:35:a7:95:0e:fc:b7: 81:40:07:24:99:80:57:65:83:af:16:44:f2:7f:25: e2:ca:68:03:e7:c9:bd:11:90:f3:7f:e3:9d:53:0d: 74:3d:3f:df:86:f3:52:4d:05:8d:8a:5b:09:c3:78: 23:ed:be:67:2d:f1:44:9f:e5:65:79:4c:a0:ab:9f: 14:6c:0c:30:75:2c:c8:5b:b7:10:a8:f1:5a:69:fe: cd:05:1f:53:a9:a6:e5:cb:7c:e2:7f:4f:24:e7:ac: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:5B:DF:ED:F1:FD:99:B9:C4:2A:92:55:40:D4:F3:92:B7:78:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af63fbef-3ae2-34fc-846e-035d7bb02837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:95:97:e8:d9:67:16:ee:51:0a:08:b6:d2:e5:28:3b:d6:e3: 08:1a:89:4c:b0:be:41:8c:6f:3b:66:43:5f:e1:f6:87:d4:fd: 03:51:71:1b:d7:96:97:fd:55:ca:fb:d0:eb:c2:e9:9b:18:3e: 2b:b0:5d:e7:74:84:f9:53:f8:1e:a9:c0:05:f3:8c:22:e2:71: 42:14:92:c9:a6:23:d0:5a:8e:fd:a1:23:c4:9c:79:96:dd:a6: b0:1e:e7:2f:98:5c:41:d9:66:fc:58:3d:eb:fe:f4:ea:6b:d7: 6d:4a:c7:07:26:a1:31:49:24:21:2b:82:d4:a8:c9:94:3e:7e: c7:3b:ff:c6:ac:88:13:b0:5c:ea:e2:c4:ee:b4:fd:d0:e8:71: 5e:fd:ec:e3:02:40:2d:c4:ca:96:3b:e4:2c:64:97:0d:75:db: 8e:72:6f:1d:ad:83:48:49:46:6c:a8:f4:11:ad:d1:90:b7:c4: 4e:e0:5e:a0:dd:de:9f:c2:ab:25:1c:de:ff:44:a9:ba:c1:f9: 35:0a:65:00:8e:09:9f:a6:0d:3d:e0:db:0a:42:47:9f:44:21: dc:7a:1a:d5:c6:a6:64:02:68:9f:ad:e6:c5:e5:b2:02:cf:57: 26:aa:a2:56:79:df:0c:5a:e1:48:f0:33:a0:ef:22:26:33:0f: 02:c3:e3:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UWjP/diSmW9giIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDhmMjZjNjUtODkyMC00YjNmLWI3NGQtOTljYTM4ZDk2ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWZIvvYa7PwjsuAWBlk51jkx31HxHA5kgfGL ee2AXgTAMb0LXOoIi0v1DH4SpYicacvBMhAtTDorPqWyZ8JZbgoohXxAS8jO/qGI PHE17BdylOy81J48wkscVbdMLlzcxcKorVurzcEzXNemcc9a9bScRBAILSJE9JAX GmCVXrm/GnQQPIQyCGVI59o/LASn74qfY2HdB23MU0BwSZI1p5UO/LeBQAckmYBX ZYOvFkTyfyXiymgD58m9EZDzf+OdUw10PT/fhvNSTQWNilsJw3gj7b5nLfFEn+Vl eUygq58UbAwwdSzIW7cQqPFaaf7NBR9Tqably3zif08k56wMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN6W9/t8f2ZucQqklVA1POSt3gWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY2M2ZiZWYtM2FlMi0z NGZjLTg0NmUtMDM1ZDdiYjAyODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+Vl+jZZxbuUQoIttLlKDvW4wgaiUywvkGMbztmQ1/h9ofU/QNRcRvX lpf9Vcr70OvC6ZsYPiuwXed0hPlT+B6pwAXzjCLicUIUksmmI9Bajv2hI8SceZbd prAe5y+YXEHZZvxYPev+9Opr121KxwcmoTFJJCErgtSoyZQ+fsc7/8asiBOwXOri xO60/dDocV797OMCQC3EypY75Cxklw11245ybx2tg0hJRmyo9BGt0ZC3xE7gXqDd 3p/CqyUc3v9EqbrB+TUKZQCOCZ+mDT3g2wpCR59EIdx6GtXGpmQCaJ+t5sXlsgLP VyaqolZ53wxa4UjwM6DvIiYzDwLD47E= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:25 2025 by rpki-client