$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf862b39-9068-3187-9cb7-f7ea0944396c.roa File: bf862b39-9068-3187-9cb7-f7ea0944396c.roa (raw, json) Hash identifier: 5MGsVgcUe8ZGbqRS/PNXlbc2RyqUpygw43MGv0n78S8= Subject key identifier: EE:3E:9E:39:C4:4A:E5:E8:38:0C:95:4C:23:1C:D2:B3:42:4F:DA:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24CE5363490AD0C734980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf862b39-9068-3187-9cb7-f7ea0944396c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.1.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4c:e5:36:34:90:ad:0c:73:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3fa40977-7e88-4b6a-8d90-82acc14afe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:7f:12:ef:e1:05:70:b3:15:21:c5:62:58: b3:1e:a3:42:53:ff:c1:11:b0:28:a7:ad:92:34:fc: b0:40:1b:d9:c3:cd:20:35:b7:b2:75:fe:0b:01:ed: 88:ac:03:5e:aa:23:ec:62:04:9a:3e:7f:05:b8:34: 1a:20:b2:d9:4c:b7:0f:d4:02:64:91:bd:92:c1:59: 46:a9:e4:f5:d9:e0:fe:c1:13:f1:1c:ac:ac:ce:39: 8d:be:7e:e8:ff:2e:1d:d7:7a:fa:0d:b2:61:7c:2b: 1f:65:36:59:b7:6d:de:ec:c2:69:b6:f2:f5:1d:4d: 77:35:22:c9:1b:b0:db:f0:51:44:6a:e4:08:fe:6f: bd:d3:ff:2f:c6:bf:8e:88:01:be:fa:9c:9b:d2:bd: b2:dd:92:bf:f3:e3:2f:8b:a2:3f:0f:5e:f0:c4:ad: 75:fb:ac:18:e0:99:54:93:d7:25:0e:1d:cd:2f:bc: 63:af:b9:6e:c8:46:29:fa:c7:c3:f2:7e:00:9b:ff: 59:c6:de:11:7d:8f:8b:09:47:38:b0:af:7c:0a:8f: e2:e0:de:62:95:f3:d2:3e:3d:46:3e:98:c0:af:66: bb:38:2b:0b:cd:20:f5:98:de:8c:62:56:84:85:0a: 36:40:65:70:7d:2c:d1:96:ef:72:30:21:83:60:4d: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3E:9E:39:C4:4A:E5:E8:38:0C:95:4C:23:1C:D2:B3:42:4F:DA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf862b39-9068-3187-9cb7-f7ea0944396c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d0:7d:64:4c:35:84:76:45:d6:3f:8c:e7:9f:cb:a1:6a:14: d9:d0:bc:d6:06:ae:90:06:f4:11:56:96:2d:ad:54:c5:65:a7: 0c:a6:cd:5b:27:ce:39:db:29:92:47:6c:cb:97:df:72:43:f3: c7:58:dc:10:3e:08:56:4a:29:69:85:15:43:81:e7:a2:fa:be: b8:db:e7:36:4e:7b:20:4f:a9:c6:0d:0c:d2:b9:9b:c7:7f:60: 01:f6:ae:c2:d1:58:6d:54:85:e7:2f:8b:10:48:d5:f2:19:10: c3:07:fc:5d:0e:d7:33:33:b8:c6:e4:79:d7:d1:c3:9c:36:51: 82:a6:ee:19:89:f4:b4:f7:6f:13:24:aa:0b:e8:1f:a6:12:ef: 66:37:14:2b:0c:19:6f:96:bd:77:cc:30:6f:48:d8:90:80:15: 2c:0e:e4:ab:07:fa:1a:ec:91:f4:40:b9:fb:2b:23:8e:ec:73: 73:70:e5:a6:82:8c:a2:05:9e:be:d4:bd:23:d1:3a:e6:bb:6f: 80:0c:2e:6d:bc:ad:e2:ad:ac:0d:e0:d8:d7:95:97:82:bb:2b: 49:87:60:56:a1:ef:61:53:40:6f:92:3f:07:ff:53:bb:89:e7: 19:92:ee:ca:83:8f:6c:92:8f:9f:69:d2:f7:d0:67:7e:04:42: 99:81:bd:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kzlNjSQrQxzSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2ZhNDA5NzctN2U4OC00YjZhLThkOTAtODJhY2MxNGFmZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rR/Eu/hBXCzFSHFYlizHqNCU//BEbAop62S NPywQBvZw80gNbeydf4LAe2IrANeqiPsYgSaPn8FuDQaILLZTLcP1AJkkb2SwVlG qeT12eD+wRPxHKyszjmNvn7o/y4d13r6DbJhfCsfZTZZt23e7MJptvL1HU13NSLJ G7Db8FFEauQI/m+90/8vxr+OiAG++pyb0r2y3ZK/8+Mvi6I/D17wxK11+6wY4JlU k9clDh3NL7xjr7luyEYp+sfD8n4Am/9Zxt4RfY+LCUc4sK98Co/i4N5ilfPSPj1G PpjAr2a7OCsLzSD1mN6MYlaEhQo2QGVwfSzRlu9yMCGDYE0BMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4+njnESuXoOAyVTCMc0rNCT9qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY4NjJiMzktOTA2OC0z MTg3LTljYjctZjdlYTA5NDQzOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvQfWRMNYR2RdY/jOefy6FqFNnQvNYGrpAG9BFWli2tVMVlpwymzVsn zjnbKZJHbMuX33JD88dY3BA+CFZKKWmFFUOB56L6vrjb5zZOeyBPqcYNDNK5m8d/ YAH2rsLRWG1UhecvixBI1fIZEMMH/F0O1zMzuMbkedfRw5w2UYKm7hmJ9LT3bxMk qgvoH6YS72Y3FCsMGW+WvXfMMG9I2JCAFSwO5KsH+hrskfRAufsrI47sc3Nw5aaC jKIFnr7UvSPROua7b4AMLm28reKtrA3g2NeVl4K7K0mHYFah72FTQG+SPwf/U7uJ 5xmS7sqDj2ySj59p0vfQZ34EQpmBvSg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:12 2025 by rpki-client