$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e8477e-6d3b-3263-bd1f-2fc9beba5c43.roa File: b3e8477e-6d3b-3263-bd1f-2fc9beba5c43.roa (raw, json) Hash identifier: 9JhGv70e7QDIzdaLPFFNzwLhoVrkjtOhxuveVGHlvEw= Subject key identifier: 6D:5B:B9:FB:09:9C:E0:44:05:F6:D1:A3:36:B0:84:1D:D3:6C:46:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20AFB3D5FAC997E383C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e8477e-6d3b-3263-bd1f-2fc9beba5c43.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0a:fb:3d:5f:ac:99:7e:38:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1809eac2-38cb-4a31-8cc0-799ff5a863b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:b2:db:de:b1:b3:2d:47:f7:b4:6e:bb:5f: 72:aa:56:af:31:8c:e3:9d:d9:53:a6:e8:6d:41:fe: 50:a0:3c:8d:f4:69:a8:e9:34:49:14:78:a7:05:e5: a8:6f:a7:a6:23:8b:c1:95:da:3e:d0:d6:af:7b:a0: 5a:05:66:b1:ea:75:2a:75:76:14:62:93:e5:6e:32: 1e:14:61:a5:db:d7:d9:67:6f:58:6d:e9:85:36:4c: c6:2d:2b:75:66:28:bf:52:77:3c:05:20:20:f7:1e: 2d:0c:8c:7a:63:b3:55:54:56:70:73:55:ef:3e:99: 8e:54:51:25:f8:6e:6e:3e:9a:39:1a:df:60:6d:86: 01:61:b5:2c:6f:b4:61:93:6c:b3:73:af:6e:da:4f: 6f:99:21:0c:0d:3d:c8:1b:92:b4:78:3f:e2:ef:f0: 6f:16:0a:c3:39:08:68:44:8c:ed:3d:8a:54:48:a0: 5c:56:28:77:d2:a0:9e:ce:f8:dd:aa:0f:3f:67:f2: 94:1a:e4:ea:7c:95:ca:87:f8:4f:ed:f6:e2:c7:92: fd:da:2f:c4:46:2a:f3:a1:60:a2:4b:1e:c4:d5:ae: c6:ac:64:69:38:1b:e7:9a:e3:c8:58:1b:d9:f2:c8: c3:2f:b6:3e:19:62:3e:a7:50:36:c2:21:c3:ea:05: 3b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:B9:FB:09:9C:E0:44:05:F6:D1:A3:36:B0:84:1D:D3:6C:46:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e8477e-6d3b-3263-bd1f-2fc9beba5c43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1d:e9:23:e9:ba:2c:39:a7:0f:a1:51:29:b2:60:4a:31:4f: 0e:13:79:47:06:38:16:cd:5f:52:49:f7:c1:6c:2f:d3:69:11: f6:c3:de:40:3f:49:63:52:34:d9:0f:ff:03:f6:ea:35:93:7e: 67:e7:fa:d1:f9:03:6a:bf:6a:15:b4:bf:73:53:47:af:9f:57: 9a:c5:3b:84:6e:4d:f7:6c:44:83:96:33:85:9f:cb:37:17:93: a4:0d:22:2c:5b:e1:79:a6:88:e3:8b:8d:8b:bd:a6:37:9c:63: d3:b4:49:b1:c3:c9:2c:c6:70:7c:21:54:cb:5a:0c:38:2d:86: f3:0e:54:28:3b:ca:90:f9:e8:df:88:9b:fc:7c:26:f7:43:6f: 49:15:ea:6c:ab:03:c5:c2:9c:ad:3e:dc:b2:d9:63:27:94:a6: f2:21:72:6b:30:57:a5:11:90:a8:35:91:5e:c7:86:b5:d7:34: 52:10:13:dc:f9:f4:4a:af:c7:99:5f:6a:95:d4:42:20:03:ae: 69:d5:81:3c:7a:40:17:0b:90:b8:ae:03:6f:d7:9f:d1:f1:38: 34:0d:90:0c:e3:2c:33:b5:fa:b4:32:ea:00:ef:49:85:5b:be: 73:7f:a0:5b:8e:87:7c:94:18:53:4c:0f:49:13:55:1c:2e:27: 45:e2:72:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gr7PV+smX44PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTgwOWVhYzItMzhjYi00YTMxLThjYzAtNzk5ZmY1YTg2M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLey296xsy1H97Ruu19yqlavMYzjndlTpuht Qf5QoDyN9Gmo6TRJFHinBeWob6emI4vBldo+0Nave6BaBWax6nUqdXYUYpPlbjIe FGGl29fZZ29YbemFNkzGLSt1Zii/Unc8BSAg9x4tDIx6Y7NVVFZwc1XvPpmOVFEl +G5uPpo5Gt9gbYYBYbUsb7Rhk2yzc69u2k9vmSEMDT3IG5K0eD/i7/BvFgrDOQho RIztPYpUSKBcVih30qCezvjdqg8/Z/KUGuTqfJXKh/hP7fbix5L92i/ERirzoWCi Sx7E1a7GrGRpOBvnmuPIWBvZ8sjDL7Y+GWI+p1A2wiHD6gU7rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1bufsJnOBEBfbRozawhB3TbEaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjNlODQ3N2UtNmQzYi0z MjYzLWJkMWYtMmZjOWJlYmE1YzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADId6SPpuiw5pw+hUSmyYEoxTw4TeUcGOBbNX1JJ98FsL9NpEfbD3kA/ SWNSNNkP/wP26jWTfmfn+tH5A2q/ahW0v3NTR6+fV5rFO4RuTfdsRIOWM4WfyzcX k6QNIixb4XmmiOOLjYu9pjecY9O0SbHDySzGcHwhVMtaDDgthvMOVCg7ypD56N+I m/x8JvdDb0kV6myrA8XCnK0+3LLZYyeUpvIhcmswV6URkKg1kV7HhrXXNFIQE9z5 9Eqvx5lfapXUQiADrmnVgTx6QBcLkLiuA2/Xn9HxODQNkAzjLDO1+rQy6gDvSYVb vnN/oFuOh3yUGFNMD0kTVRwuJ0XiclA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:25 2025 by rpki-client