$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba8b9c47-539d-3601-9010-1e4960c26656.roa File: ba8b9c47-539d-3601-9010-1e4960c26656.roa (raw, json) Hash identifier: ekSm+2OrXmfSyXNDxU1sYoHLwMD4EDUg19UcZm7uRUI= Subject key identifier: 3E:17:64:17:7F:90:0E:AF:0F:EE:3F:C5:C6:EE:67:EA:5E:56:21:5F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22D4EACD86EDD69B16340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba8b9c47-539d-3601-9010-1e4960c26656.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2d:4e:ac:d8:6e:dd:69:b1:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6f43eae8-d28a-427e-b147-978eb9dfccba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:09:60:1d:d2:8d:b5:24:8a:15:d1:89:20: 70:f9:75:54:2a:48:c5:ba:bc:f2:ea:bc:29:e1:c8: 6d:99:eb:61:cc:74:72:70:e3:37:fa:e7:fc:be:19: da:89:c9:dd:1d:44:49:9d:7e:9b:27:22:8d:9f:c2: 76:88:dd:b0:8e:c5:dc:06:50:d1:9d:01:1c:77:84: 8d:80:e2:0f:09:08:bc:ef:31:ca:43:4c:b5:27:d5: fe:74:c0:0d:5f:11:93:48:60:9b:bf:e2:e5:a0:9f: 57:2a:c8:bd:9a:bd:bb:e9:a7:af:2a:13:4a:d2:1f: 33:35:9e:1b:f3:a4:74:5c:26:55:a9:92:8e:2e:b6: ea:ce:bb:79:a1:11:1b:95:34:62:89:ff:b4:83:73: c6:47:c8:82:38:a9:53:5a:61:c3:c8:1a:41:66:ac: 6a:86:cd:f7:37:a5:a2:5f:af:2f:91:49:93:ce:18: 86:fe:0c:7d:4f:69:50:a1:fb:d9:08:08:ba:fb:75: 72:74:9a:dd:fd:cb:f2:07:6c:87:33:c3:ca:e1:86: b2:5c:ec:65:ed:ae:6f:81:15:42:92:db:81:cd:e2: bc:4d:32:0a:45:29:57:67:5e:bf:7b:c0:a6:96:09: 0e:7b:da:25:19:53:16:44:fa:6f:df:70:e0:39:de: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:17:64:17:7F:90:0E:AF:0F:EE:3F:C5:C6:EE:67:EA:5E:56:21:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba8b9c47-539d-3601-9010-1e4960c26656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d4:8c:68:18:e3:51:cc:f6:7e:2a:41:ed:90:0b:9b:7c:bf: 0a:10:08:d3:45:a0:78:95:ac:85:e7:48:c9:6d:8c:d0:4a:f3: 79:9a:e6:f8:bc:7c:e6:1b:3c:b7:9e:90:23:27:70:4b:e8:ba: f4:aa:52:9f:e8:c3:d3:ce:6c:04:e6:c7:9e:4c:d3:6d:9d:9a: 72:79:b5:c8:c5:e2:c0:f3:30:bd:42:cf:e4:89:3d:b4:4c:20: 34:87:1b:79:1f:a9:cf:39:80:d8:dd:dc:ae:71:c4:3e:35:b7: fb:55:48:14:7c:94:18:2e:c3:30:b6:86:ee:46:fe:3a:85:df: 65:9b:77:7a:c1:91:ec:90:e4:5a:85:31:9d:b7:81:8f:1c:c0: 2d:1a:ad:4e:d4:77:b5:09:37:39:91:89:d4:70:a6:e5:5e:cd: 7a:e0:34:3f:7d:34:92:d6:51:a9:dc:a3:4d:f1:ea:dc:d3:c3: fa:6a:1d:67:28:6d:8b:0f:30:dc:45:d0:c7:f2:45:ef:50:c9: 79:3a:85:c9:39:e9:4b:7e:9e:b8:a9:5c:54:7e:aa:62:5e:ba: 2f:fe:35:35:6b:b4:64:b8:d0:4c:62:54:b2:38:26:f9:57:9d: a0:44:29:68:84:b2:d5:d9:2f:c2:44:5d:15:f2:2b:90:ea:5c: c9:04:aa:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28i1OrNhu3WmxY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmY0M2VhZTgtZDI4YS00MjdlLWIxNDctOTc4ZWI5ZGZjY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEUJYB3SjbUkihXRiSBw+XVUKkjFurzy6rwp 4chtmethzHRycOM3+uf8vhnaicndHURJnX6bJyKNn8J2iN2wjsXcBlDRnQEcd4SN gOIPCQi87zHKQ0y1J9X+dMANXxGTSGCbv+LloJ9XKsi9mr276aevKhNK0h8zNZ4b 86R0XCZVqZKOLrbqzrt5oREblTRiif+0g3PGR8iCOKlTWmHDyBpBZqxqhs33N6Wi X68vkUmTzhiG/gx9T2lQofvZCAi6+3VydJrd/cvyB2yHM8PK4YayXOxl7a5vgRVC ktuBzeK8TTIKRSlXZ16/e8CmlgkOe9olGVMWRPpv33DgOd6r0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4XZBd/kA6vD+4/xcbuZ+peViFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE4YjljNDctNTM5ZC0z NjAxLTkwMTAtMWU0OTYwYzI2NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAi0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/UjGgY41HM9n4qQe2QC5t8vwoQCNNFoHiVrIXnSMltjNBK83ma5vi8 fOYbPLeekCMncEvouvSqUp/ow9PObATmx55M022dmnJ5tcjF4sDzML1Cz+SJPbRM IDSHG3kfqc85gNjd3K5xxD41t/tVSBR8lBguwzC2hu5G/jqF32Wbd3rBkeyQ5FqF MZ23gY8cwC0arU7Ud7UJNzmRidRwpuVezXrgND99NJLWUanco03x6tzTw/pqHWco bYsPMNxF0MfyRe9QyXk6hck56Ut+nripXFR+qmJeui/+NTVrtGS40ExiVLI4JvlX naBEKWiEstXZL8JEXRXyK5DqXMkEqlU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:50 2025 by rpki-client