$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b34bf6fa-1c6e-3035-870a-a1be235361bd.roa File: b34bf6fa-1c6e-3035-870a-a1be235361bd.roa (raw, json) Hash identifier: MzsG3+MV3L/I+9JAaa3KjhsFyEAfj0OvOElUTPKfr3U= Subject key identifier: E7:6B:3E:2F:32:C3:92:44:AB:A8:06:84:E8:5E:91:7B:2E:9F:5D:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3741FB5D98AFCE6EFBEA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b34bf6fa-1c6e-3035-870a-a1be235361bd.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:41:fb:5d:98:af:ce:6e:fb:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=fb9c9c3a-7768-4ab1-aad8-e84c338a58f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:ae:b9:8f:14:43:ca:44:26:bd:73:00:f3: c5:5e:59:6f:eb:b8:8c:b8:ac:92:4d:64:8b:40:cc: 8a:bc:9a:35:35:7b:c1:5a:25:67:2b:63:55:85:84: bb:56:8c:7d:6e:23:4a:94:51:85:ef:ce:23:bc:c4: 03:a0:78:96:ba:2f:6b:ca:80:69:eb:ca:3e:0e:04: 6a:9f:c9:05:e7:98:de:5b:13:7b:3c:7f:82:12:ed: 43:78:be:9c:07:ad:9e:bb:50:e1:11:2c:ef:31:cd: 44:30:08:31:e9:be:22:a2:94:4d:2c:0b:88:73:33: da:c0:fd:e9:a1:52:8c:4d:24:10:a9:4a:b9:b3:f0: ec:b6:8d:7a:df:2d:2c:a3:f1:f1:be:c2:06:8e:fb: 52:50:60:74:12:05:4d:6d:b7:24:8a:82:45:01:2f: c6:3a:6b:c9:09:63:ab:98:fa:79:be:f3:7f:af:80: 5a:53:13:12:75:a8:57:04:cc:ee:55:e8:5c:10:68: 55:dc:e7:59:2f:52:66:63:63:b1:3a:7d:02:22:19: 5c:3b:11:49:de:ea:8f:73:ab:d4:67:3f:a7:ed:44: 8b:34:13:8e:85:b7:3a:c4:9d:5f:76:aa:7b:e3:2d: ee:d9:89:a9:d2:5c:3e:4b:bb:59:2f:eb:de:c6:69: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:3E:2F:32:C3:92:44:AB:A8:06:84:E8:5E:91:7B:2E:9F:5D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b34bf6fa-1c6e-3035-870a-a1be235361bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:73:e0:6e:b1:e3:73:30:48:2c:07:18:56:75:8d:0c:27:44: 21:d7:8d:51:eb:ef:37:f9:5f:1f:03:f5:6e:11:20:e7:f2:ac: 70:ca:ab:69:e8:00:4e:be:9a:6e:a8:12:f4:34:74:10:e9:cd: d9:67:ed:86:c2:4e:50:a9:a3:29:e1:e8:d3:c7:07:8d:a3:c3: 6f:0c:95:19:aa:b4:6b:40:59:e1:74:13:cd:ad:46:bf:28:ce: 1b:05:c4:4a:c6:eb:11:c3:e8:26:5f:7e:b9:0b:c8:0a:f5:de: 47:db:45:3b:02:ca:77:79:f4:5d:2f:db:7e:c0:8e:cf:c5:c8: 9d:06:f0:7d:61:9b:39:e7:61:1c:2f:bb:2f:d1:af:44:3e:e0: 09:2b:b7:d4:62:22:81:2b:c6:78:4c:f4:7c:f1:e0:86:af:9e: 30:10:28:a0:58:a8:6b:b9:a9:1b:f5:08:a6:a6:3f:9f:0b:80: e0:94:cf:1c:f9:90:60:32:14:4c:05:87:c9:7a:cc:13:f1:02: 03:60:45:bc:94:3c:4f:75:ab:05:4a:79:59:f6:16:2d:b8:fc: 1a:d9:1a:90:00:ed:70:47:0e:aa:ad:48:8a:74:41:e3:43:b6: 49:1c:3e:78:c0:37:6c:14:d8:d0:8f:45:16:df:48:b8:8e:67: ca:7e:f1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0H7XZivzm776gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmI5YzljM2EtNzc2OC00YWIxLWFhZDgtZTg0YzMzOGE1OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xWuuY8UQ8pEJr1zAPPFXllv67iMuKySTWSL QMyKvJo1NXvBWiVnK2NVhYS7Vox9biNKlFGF784jvMQDoHiWui9ryoBp68o+DgRq n8kF55jeWxN7PH+CEu1DeL6cB62eu1DhESzvMc1EMAgx6b4iopRNLAuIczPawP3p oVKMTSQQqUq5s/Dsto163y0so/HxvsIGjvtSUGB0EgVNbbckioJFAS/GOmvJCWOr mPp5vvN/r4BaUxMSdahXBMzuVehcEGhV3OdZL1JmY2OxOn0CIhlcOxFJ3uqPc6vU Zz+n7USLNBOOhbc6xJ1fdqp74y3u2Ymp0lw+S7tZL+vexmkPGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdrPi8yw5JEq6gGhOhekXsun10nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjM0YmY2ZmEtMWM2ZS0z MDM1LTg3MGEtYTFiZTIzNTM2MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAOjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5z4G6x43MwSCwHGFZ1jQwnRCHXjVHr7zf5Xx8D9W4RIOfyrHDKq2no AE6+mm6oEvQ0dBDpzdln7YbCTlCpoynh6NPHB42jw28MlRmqtGtAWeF0E82tRr8o zhsFxErG6xHD6CZffrkLyAr13kfbRTsCynd59F0v237Ajs/FyJ0G8H1hmznnYRwv uy/Rr0Q+4Akrt9RiIoErxnhM9Hzx4IavnjAQKKBYqGu5qRv1CKamP58LgOCUzxz5 kGAyFEwFh8l6zBPxAgNgRbyUPE91qwVKeVn2Fi24/BrZGpAA7XBHDqqtSIp0QeND tkkcPnjAN2wU2NCPRRbfSLiOZ8p+8QI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:10 2025 by rpki-client