$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa File: b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa (raw, json) Hash identifier: gnfvM5y8K5xCc6pbmKHXbcjTKiOfu4gOwJ0O3XTUtlQ= Subject key identifier: BD:DC:AF:0B:21:56:72:05:9E:2D:53:74:10:35:58:AD:44:A4:49:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B4081B428177887738B946F20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 22773 IP address blocks: 68.225.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b4:28:17:78:87:73:8b:94:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=3f370639-286f-42a4-b1ff-33ee69743f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:0f:90:d2:4d:4f:b4:e6:50:a7:d2:20:ed: ec:ad:94:ab:9a:89:ef:58:62:e5:11:f1:f8:98:ce: 71:06:52:8c:ab:d3:7d:42:6d:99:d3:53:d1:e4:96: 07:c9:28:f6:e7:55:38:66:cf:1f:3d:69:23:d2:79: e1:66:11:ff:2c:1a:87:5d:02:d8:be:1a:37:33:13: 00:de:fd:7d:49:9d:b4:33:87:1a:35:c0:0e:df:f7: 62:31:24:ce:83:10:04:bf:cf:37:86:1c:bc:48:c1: 24:de:39:f4:9e:2c:0c:9b:83:87:61:4d:ee:03:ed: 0c:54:f8:7f:90:c9:10:45:83:db:7a:17:71:5d:18: 57:ea:1f:9c:9a:79:e3:99:b8:3d:9b:0d:08:4c:40: 7b:70:da:dc:3c:f5:79:ac:f3:65:1d:7e:1d:ab:f3: 22:c4:d4:ef:86:64:58:a3:a2:b8:02:08:68:88:83: ae:27:49:f1:8f:59:40:ef:8f:96:8b:53:2a:5a:c7: 09:28:e5:30:66:29:d3:4c:d7:da:cf:9e:d4:e3:01: 81:cf:8a:a4:1c:9a:b6:29:cd:87:e6:57:a5:6a:b6: 9f:17:e6:63:72:8e:f8:1c:4a:45:96:1d:c9:e8:4e: c3:bb:86:a7:4b:2f:a4:43:d9:18:51:85:c6:06:2c: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DC:AF:0B:21:56:72:05:9E:2D:53:74:10:35:58:AD:44:A4:49:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b3:74:d9:93:3a:93:e4:45:03:50:bd:85:02:1e:51:f2:a0: 8e:67:42:9b:04:b7:08:c6:96:e3:6b:d7:24:81:be:0f:2f:2e: 2f:66:cd:98:42:e1:45:50:93:2f:e4:e3:b7:44:77:3a:b9:f0: 0e:1a:4a:9f:7d:cb:2b:c0:cb:28:3b:e4:1d:d4:d4:94:9a:8f: c8:5a:57:37:1c:ba:45:01:47:dc:7a:f8:90:62:81:79:77:32: 32:83:66:65:b0:2b:f7:f7:f4:ae:81:13:51:8d:9b:c8:35:43: d3:f9:b7:9b:29:ca:91:85:fe:56:4b:a3:19:8b:2b:46:24:b6: 91:5b:16:7c:c1:22:5b:47:4b:48:90:df:49:ba:e8:84:f2:a8: a5:3c:05:fc:23:39:b2:81:7d:28:05:bb:36:cf:ad:51:34:2e: 5b:99:00:cf:93:6a:82:b5:ab:de:67:65:1a:a1:c3:5f:fa:21: 7b:e9:90:c9:cb:ac:0b:b4:21:98:91:11:05:70:5f:0d:33:eb: 8a:03:e4:ed:c2:da:88:d4:6e:ad:4d:b3:79:21:4b:54:79:7b: cd:a4:cc:92:84:1c:fe:0e:58:6f:6a:80:59:8f:03:50:76:07: cc:d4:e1:91:e4:5d:27:06:89:75:f6:2e:b9:73:40:7e:ba:5c: a8:84:af:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbQoF3iHc4uUbyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk M2YzNzA2MzktMjg2Zi00MmE0LWIxZmYtMzNlZTY5NzQzZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4sPkNJNT7TmUKfSIO3srZSrmonvWGLlEfH4 mM5xBlKMq9N9Qm2Z01PR5JYHySj251U4Zs8fPWkj0nnhZhH/LBqHXQLYvho3MxMA 3v19SZ20M4caNcAO3/diMSTOgxAEv883hhy8SMEk3jn0niwMm4OHYU3uA+0MVPh/ kMkQRYPbehdxXRhX6h+cmnnjmbg9mw0ITEB7cNrcPPV5rPNlHX4dq/MixNTvhmRY o6K4AghoiIOuJ0nxj1lA74+Wi1MqWscJKOUwZinTTNfaz57U4wGBz4qkHJq2Kc2H 5lelarafF+Zjco74HEpFlh3J6E7Du4anSy+kQ9kYUYXGBizp/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3crwshVnIFni1TdBA1WK1EpEksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjVkODNlMjAtMjNhMC0z YWUzLWEwYmEtZTE0NDMxOTlhZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6zdNmTOpPkRQNQvYUCHlHyoI5nQpsEtwjGluNr1ySBvg8vLi9mzZhC 4UVQky/k47dEdzq58A4aSp99yyvAyyg75B3U1JSaj8haVzccukUBR9x6+JBigXl3 MjKDZmWwK/f39K6BE1GNm8g1Q9P5t5spypGF/lZLoxmLK0YktpFbFnzBIltHS0iQ 30m66ITyqKU8BfwjObKBfSgFuzbPrVE0LluZAM+TaoK1q95nZRqhw1/6IXvpkMnL rAu0IZiREQVwXw0z64oD5O3C2ojUbq1Ns3khS1R5e82kzJKEHP4OWG9qgFmPA1B2 B8zU4ZHkXScGiXX2LrlzQH66XKiErzY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:00 2025 by rpki-client