$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be334ada-78cd-3099-b4e9-4f3456d85046.roa File: be334ada-78cd-3099-b4e9-4f3456d85046.roa (raw, json) Hash identifier: ZiG2Ts9jfmH9BWjHLuwbBU0oce6WW8QGGVYj3shtgWY= Subject key identifier: E1:CF:FD:BA:D0:61:C6:35:4B:9B:55:65:EB:75:C5:75:42:85:94:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C471CF927889A9C7E62C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be334ada-78cd-3099-b4e9-4f3456d85046.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.225.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:47:1c:f9:27:88:9a:9c:7e:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=0aff3028-002a-4411-adda-2df351417600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:ad:70:08:a1:b4:6d:03:f8:3d:ef:34:c7: 1e:f4:b8:8a:79:88:01:62:3a:ae:9e:fa:6f:53:57: 7c:af:ce:f1:1d:42:9b:0e:f5:0c:5d:db:0d:5f:6c: 7c:85:ba:97:eb:ab:51:75:6f:cb:82:15:c5:89:aa: c8:eb:5d:e5:94:fb:e1:74:b0:ae:e9:5c:9c:df:da: ad:bb:b6:00:a6:42:78:62:8d:8a:23:f3:fc:6e:0f: d3:42:15:42:74:57:f1:af:60:67:70:a1:84:4f:28: 35:8c:2d:43:cf:27:75:5b:80:08:f6:8c:aa:c3:04: 4d:7f:ff:a0:5f:f1:83:fc:df:d2:e6:ce:6c:39:e6: 83:87:7e:36:0c:c2:77:27:b7:b6:1e:e5:e3:6e:45: e4:57:e1:a5:50:58:48:27:0d:b1:b1:ae:22:65:61: cb:c4:66:68:a8:7f:19:0d:29:6e:61:12:26:bd:29: 8f:1a:8a:ee:a3:73:90:b1:0a:6d:0a:01:5a:f0:f4: 61:b0:89:f4:3f:d6:4f:de:0d:dd:85:11:48:af:76: 50:de:61:d2:4f:d5:f9:fc:aa:2f:94:38:8c:ff:85: 36:03:b3:a1:0d:6b:44:1f:24:a0:e0:74:0b:f2:c4: 94:b5:56:f2:36:11:3a:18:1c:39:90:98:c0:08:6d: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:FD:BA:D0:61:C6:35:4B:9B:55:65:EB:75:C5:75:42:85:94:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be334ada-78cd-3099-b4e9-4f3456d85046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5f:f8:84:e4:2a:88:d1:c9:3e:45:2b:9f:66:4c:2e:ee:24: 03:83:ca:19:d4:7c:91:c5:70:40:f6:ea:00:a3:29:b3:68:67: 02:66:e6:71:d2:40:fa:0f:f6:d6:43:69:95:d8:65:01:de:cf: 4a:5f:1f:15:13:23:cc:24:9f:24:db:41:60:d4:85:08:05:1a: 17:a0:db:f6:88:0f:e4:57:ad:75:85:5d:c2:a5:3c:05:04:d7: 86:f4:0f:21:ab:22:56:63:79:2c:25:d5:6b:09:65:11:6c:31: c7:f6:eb:ae:97:3c:e0:3b:c9:39:47:b7:1a:e4:a7:7c:da:54: 59:80:64:29:c0:eb:50:51:7a:97:99:9e:4c:bd:77:bd:05:f9: e7:91:ad:45:d3:e6:76:d7:53:2a:90:c0:29:21:73:bf:9f:34: 85:dd:81:bd:61:12:8e:f5:73:ff:72:9f:0b:f6:a2:e8:5a:6c: 50:a8:42:4e:d6:0f:09:37:90:3d:73:b2:6c:92:05:89:ec:b4: 92:92:3d:c4:c3:d2:e2:5c:04:72:17:8f:ad:12:a7:6f:e0:a0: 70:01:e8:82:f9:21:08:f7:35:cf:0e:11:cf:a9:96:cd:45:25: 9e:25:30:14:40:0c:28:8f:84:00:db:da:dd:fa:af:11:e6:fc: 3b:bd:bc:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEcc+SeImpx+YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MGFmZjMwMjgtMDAyYS00NDExLWFkZGEtMmRmMzUxNDE3NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQatcAihtG0D+D3vNMce9LiKeYgBYjqunvpv U1d8r87xHUKbDvUMXdsNX2x8hbqX66tRdW/LghXFiarI613llPvhdLCu6Vyc39qt u7YApkJ4Yo2KI/P8bg/TQhVCdFfxr2BncKGETyg1jC1Dzyd1W4AI9oyqwwRNf/+g X/GD/N/S5s5sOeaDh342DMJ3J7e2HuXjbkXkV+GlUFhIJw2xsa4iZWHLxGZoqH8Z DSluYRImvSmPGoruo3OQsQptCgFa8PRhsIn0P9ZP3g3dhRFIr3ZQ3mHST9X5/Kov lDiM/4U2A7OhDWtEHySg4HQL8sSUtVbyNhE6GBw5kJjACG3GnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHP/brQYcY1S5tVZet1xXVChZR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmUzMzRhZGEtNzhjZC0z MDk5LWI0ZTktNGYzNDU2ZDg1MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1f+ITkKojRyT5FK59mTC7uJAODyhnUfJHFcED26gCjKbNoZwJm5nHS QPoP9tZDaZXYZQHez0pfHxUTI8wknyTbQWDUhQgFGheg2/aID+RXrXWFXcKlPAUE 14b0DyGrIlZjeSwl1WsJZRFsMcf2666XPOA7yTlHtxrkp3zaVFmAZCnA61BRepeZ nky9d70F+eeRrUXT5nbXUyqQwCkhc7+fNIXdgb1hEo71c/9ynwv2ouhabFCoQk7W Dwk3kD1zsmySBYnstJKSPcTD0uJcBHIXj60Sp2/goHAB6IL5IQj3Nc8OEc+pls1F JZ4lMBRADCiPhADb2t36rxHm/Du9vO4= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:59 2025 by rpki-client