$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b02d8fef-9176-380a-9ec8-c98092ea2d37.roa File: b02d8fef-9176-380a-9ec8-c98092ea2d37.roa (raw, json) Hash identifier: LJbvLyRFeumfFRG3UXteGNn1/rFHsdHvFNeaUvG64QQ= Subject key identifier: 63:A2:27:9D:61:1C:69:DC:BD:FB:71:7D:EA:67:92:D5:50:A9:D4:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2030EA8E852534230F6DC Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b02d8fef-9176-380a-9ec8-c98092ea2d37.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.226.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:03:0e:a8:e8:52:53:42:30:f6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=32ec008f-ce30-4808-8ce7-f2904761b86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:90:9b:90:f8:6d:8c:c4:32:32:02:e2:db: 97:6e:e9:ad:f8:dc:d1:77:dd:fa:c4:a6:56:1b:c9: 9e:c2:77:d9:e8:b5:a6:f7:4b:22:f1:59:c4:08:4e: 4e:26:6b:b8:22:8e:a1:f6:f8:fc:1e:27:c4:ab:3e: d6:cb:5c:d4:8f:d1:ee:3f:ee:90:b0:1e:ef:e5:e1: dc:c0:c1:7d:c2:e0:43:06:9e:cf:eb:01:dc:b8:5b: 88:f3:a0:ef:f0:f6:0b:51:6d:a5:6f:c0:66:35:46: 20:57:1d:c8:59:16:01:9f:3d:10:f0:be:d8:55:56: 84:3c:84:00:7a:0c:b2:f5:9b:d3:e2:bf:7c:1d:6c: 7e:3f:3a:7f:45:c6:1b:1c:68:4e:c0:d1:d9:69:0e: a5:02:2c:a0:ec:ee:d9:e7:c5:fd:78:c3:f0:bd:2d: bf:57:c8:58:44:34:7a:c9:a7:39:1f:70:f8:ee:39: 83:0d:ca:a9:3e:db:72:78:1a:a8:1d:17:fb:5a:f0: d0:41:85:23:07:22:45:ce:1a:e4:12:ee:f7:35:77: c9:93:87:c8:bf:1d:66:04:03:00:12:16:47:fb:0c: d0:ae:30:39:e7:22:9a:04:e1:5d:98:39:e0:eb:f2: 2c:58:5a:f9:fd:35:7d:c6:12:eb:29:ac:9e:dc:ec: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:27:9D:61:1C:69:DC:BD:FB:71:7D:EA:67:92:D5:50:A9:D4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b02d8fef-9176-380a-9ec8-c98092ea2d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:93:40:e9:79:6c:6f:e3:26:f5:48:72:e2:8f:f0:4a:c9:36: 5b:53:6a:66:fb:5a:a4:70:54:ac:35:03:0c:77:04:3c:0d:1e: 22:65:33:51:57:e6:9d:e3:97:46:36:31:38:82:2d:ec:55:d2: 7b:27:fd:0d:79:23:3d:e1:b1:41:c3:7d:fa:0b:58:0a:11:fc: 59:cc:ab:80:47:06:c2:04:27:aa:cc:01:06:65:65:bd:9a:fe: ba:50:9a:c5:8e:b9:f6:61:5c:09:f8:59:87:74:de:8b:9e:a8: bf:52:2d:9a:13:96:c5:e6:ed:c1:bb:25:54:a8:02:f2:7c:f2: b3:78:40:02:4a:2f:c1:13:d6:f2:16:c1:2c:a2:14:e2:17:ae: c7:c2:d0:5a:e7:69:62:1f:89:85:bc:6f:f2:9e:ec:6d:b5:1c: c8:6e:12:fc:71:0f:d6:d4:3c:05:9c:df:62:66:38:38:42:01: 9e:bb:99:37:d9:07:eb:28:3f:cd:5e:c1:42:7f:13:0d:99:49: 67:5a:38:be:5a:e1:14:f7:3f:eb:57:e5:e1:2d:50:c8:9b:ae: 91:65:9a:ae:e1:1a:5b:9b:07:bc:3d:87:fa:4e:b8:a6:26:ee: be:91:80:16:7f:0d:64:b5:24:89:3e:ae:34:74:d4:95:59:db: 44:00:cf:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gMOqOhSU0Iw9twwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzJlYzAwOGYtY2UzMC00ODA4LThjZTctZjI5MDQ3NjFiODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+6Qm5D4bYzEMjIC4tuXbumt+NzRd936xKZW G8mewnfZ6LWm90si8VnECE5OJmu4Io6h9vj8HifEqz7Wy1zUj9HuP+6QsB7v5eHc wMF9wuBDBp7P6wHcuFuI86Dv8PYLUW2lb8BmNUYgVx3IWRYBnz0Q8L7YVVaEPIQA egyy9ZvT4r98HWx+Pzp/RcYbHGhOwNHZaQ6lAiyg7O7Z58X9eMPwvS2/V8hYRDR6 yac5H3D47jmDDcqpPttyeBqoHRf7WvDQQYUjByJFzhrkEu73NXfJk4fIvx1mBAMA EhZH+wzQrjA55yKaBOFdmDng6/IsWFr5/TV9xhLrKaye3OzRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOiJ51hHGncvftxfepnktVQqdQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjAyZDhmZWYtOTE3Ni0z ODBhLTllYzgtYzk4MDkyZWEyZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROJSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSTQOl5bG/jJvVIcuKP8ErJNltTamb7WqRwVKw1Awx3BDwNHiJlM1FX 5p3jl0Y2MTiCLexV0nsn/Q15Iz3hsUHDffoLWAoR/FnMq4BHBsIEJ6rMAQZlZb2a /rpQmsWOufZhXAn4WYd03oueqL9SLZoTlsXm7cG7JVSoAvJ88rN4QAJKL8ET1vIW wSyiFOIXrsfC0FrnaWIfiYW8b/Ke7G21HMhuEvxxD9bUPAWc32JmODhCAZ67mTfZ B+soP81ewUJ/Ew2ZSWdaOL5a4RT3P+tX5eEtUMibrpFlmq7hGlubB7w9h/pOuKYm 7r6RgBZ/DWS1JIk+rjR01JVZ20QAz4E= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:06 2025 by rpki-client