$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb960dbd-ee72-3115-8911-459398287bdf.roa File: bb960dbd-ee72-3115-8911-459398287bdf.roa (raw, json) Hash identifier: 7gFHntrcKm4KYKMV/p1GaT5eRaoXNLb17/sDI6/hTPA= Subject key identifier: 2B:F1:67:EA:8C:01:4D:2B:DD:95:E3:B4:B4:A5:27:F6:47:A9:FA:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C586ECDA1043E5C69DA60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb960dbd-ee72-3115-8911-459398287bdf.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:58:6e:cd:a1:04:3e:5c:69:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=9dbc49c2-6972-41f8-a8e8-1a96a7276cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:69:20:b9:d9:b3:12:87:f8:41:3b:39:f5: 73:d2:c7:05:5f:91:54:b1:2d:48:37:45:17:5b:eb: a1:ca:d0:99:42:31:4e:e7:4e:d2:80:13:01:fa:9c: 7f:23:d2:fe:7a:dc:49:94:51:e9:39:60:a0:9d:95: be:ca:9f:8d:bf:5d:82:93:a7:7f:64:2a:4a:49:f5: 68:40:e7:88:4a:86:64:95:df:8f:37:2e:8f:27:40: e4:e2:ec:13:53:8e:86:10:de:1f:6a:93:b9:9b:1a: 0c:56:36:34:8a:89:50:ce:38:b7:92:e0:a9:f4:a5: 73:c0:66:1e:b1:e4:e8:44:da:1e:1c:a1:eb:3a:9c: 9a:42:7d:d9:6d:b1:41:0b:88:32:e7:16:ec:fd:99: af:41:20:c3:de:a5:dd:8d:65:fa:85:4b:97:02:df: 5b:23:4d:a0:3d:aa:8d:4c:03:4d:73:56:b9:01:8c: cc:27:51:f1:89:b8:15:5d:9c:93:db:06:c7:12:ea: c4:8f:56:f1:cc:d5:ff:96:ec:f8:d9:73:d1:cf:f2: 1b:c9:59:d2:14:37:1f:8f:db:aa:31:a7:48:22:bf: 72:5c:60:e4:69:0f:19:1f:8f:a5:4b:ab:1b:7f:e7: 04:e6:b6:f0:21:b7:b9:75:27:e3:80:9f:81:47:af: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:67:EA:8C:01:4D:2B:DD:95:E3:B4:B4:A5:27:F6:47:A9:FA:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb960dbd-ee72-3115-8911-459398287bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:97:15:01:77:2a:38:74:41:d5:53:43:fe:fa:50:3e:ad:43: 63:ce:1b:db:8e:84:7b:84:4e:56:65:04:8f:99:c6:aa:87:8e: 99:ef:34:98:97:e8:ba:a2:fc:61:dc:f9:79:f4:4d:b8:fa:fc: bf:5f:0a:6b:4c:34:c9:42:b3:39:e3:74:60:5b:06:96:40:13: 81:08:0c:ca:a8:0e:a4:92:cb:54:11:7e:82:92:57:3f:54:47: 61:2a:9a:ec:5d:b0:5b:06:99:f9:c1:f7:72:a9:64:bd:e4:71: 5f:aa:d3:70:f3:64:6f:13:cd:3c:12:a6:6c:92:3d:08:0b:c0: fc:87:5a:58:99:a7:92:af:e8:db:d6:91:17:16:16:11:06:d5: dc:32:b9:e3:62:d7:09:66:01:bf:04:8b:65:15:eb:57:06:a4: 49:2c:4f:e7:fa:f0:75:a7:fe:b3:ac:a7:78:e4:92:08:43:0a: 6b:54:98:00:a0:9d:3a:d9:5b:8b:85:50:9b:42:2c:35:65:b3: 03:29:57:fa:70:2c:9e:a4:64:fe:2b:b9:57:4d:a7:ae:78:fb: 36:c5:25:ec:b4:02:37:8e:1b:b0:b2:18:1a:ac:b6:f5:86:86: c9:b0:10:d3:5c:45:f9:ea:bd:37:12:cc:a8:b5:ff:4b:88:22: 19:ca:ff:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFhuzaEEPlxp2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk OWRiYzQ5YzItNjk3Mi00MWY4LWE4ZTgtMWE5NmE3Mjc2Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo75pILnZsxKH+EE7OfVz0scFX5FUsS1IN0UX W+uhytCZQjFO507SgBMB+px/I9L+etxJlFHpOWCgnZW+yp+Nv12Ck6d/ZCpKSfVo QOeISoZkld+PNy6PJ0Dk4uwTU46GEN4fapO5mxoMVjY0iolQzji3kuCp9KVzwGYe seToRNoeHKHrOpyaQn3ZbbFBC4gy5xbs/ZmvQSDD3qXdjWX6hUuXAt9bI02gPaqN TANNc1a5AYzMJ1HxibgVXZyT2wbHEurEj1bxzNX/luz42XPRz/IbyVnSFDcfj9uq MadIIr9yXGDkaQ8ZH4+lS6sbf+cE5rbwIbe5dSfjgJ+BR6/IJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvxZ+qMAU0r3ZXjtLSlJ/ZHqfr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI5NjBkYmQtZWU3Mi0z MTE1LTg5MTEtNDU5Mzk4Mjg3YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyXFQF3Kjh0QdVTQ/76UD6tQ2POG9uOhHuETlZlBI+ZxqqHjpnvNJiX 6Lqi/GHc+Xn0Tbj6/L9fCmtMNMlCsznjdGBbBpZAE4EIDMqoDqSSy1QRfoKSVz9U R2EqmuxdsFsGmfnB93KpZL3kcV+q03DzZG8TzTwSpmySPQgLwPyHWliZp5Kv6NvW kRcWFhEG1dwyueNi1wlmAb8Ei2UV61cGpEksT+f68HWn/rOsp3jkkghDCmtUmACg nTrZW4uFUJtCLDVlswMpV/pwLJ6kZP4ruVdNp654+zbFJey0AjeOG7CyGBqstvWG hsmwENNcRfnqvTcSzKi1/0uIIhnK/wM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:38 2025 by rpki-client