$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbe9e274-c492-3042-bdd8-8025b688defe.roa File: dbe9e274-c492-3042-bdd8-8025b688defe.roa (raw, json) Hash identifier: PybXahZPeeX3zbHol4KuGUlpy3H0I0Wf5Hnq3hHAbbs= Subject key identifier: D7:3B:6A:B8:A8:B4:14:9C:FA:16:6A:CF:46:05:C2:83:B5:1C:1F:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F269FC9193986F08BF3FF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbe9e274-c492-3042-bdd8-8025b688defe.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:69:fc:91:93:98:6f:08:bf:3f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0fc368c1-81f3-4f0a-94a0-a4291e3fa824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:44:a3:ba:ac:6a:28:4a:18:b7:2d:57:b5:b0: 67:37:17:33:66:30:f4:05:8f:43:29:e0:37:ca:cb: 4a:08:df:96:06:69:ef:e9:93:79:e6:f5:85:f8:be: ac:ec:9c:1d:27:89:4a:9b:00:65:31:30:8e:53:97: 4d:3f:01:6f:d3:e6:c0:62:5b:87:49:5b:c1:51:fc: a0:61:0e:8e:87:73:f6:e8:84:12:5b:25:8a:ca:9d: d0:62:62:cb:24:de:ae:64:6a:fc:65:3b:95:ab:95: 82:32:b0:f9:7b:01:c0:53:fc:24:df:a0:5c:7e:5c: ea:e9:8c:44:e2:7e:46:3b:d1:3b:9c:91:ab:88:c9: 5b:a1:f8:62:ba:82:2f:db:7d:37:86:69:5a:c0:be: be:70:11:79:31:4f:56:25:20:d9:51:01:1f:53:1b: 09:21:70:31:6d:41:fa:82:9d:00:55:f1:01:4f:86: 20:98:86:1b:89:2a:d1:72:dd:3f:3c:25:ab:80:55: 02:49:9a:ba:04:e6:41:e5:ba:66:44:72:f4:42:b5: be:a1:25:a1:79:0c:75:63:23:de:06:4e:11:78:f6: 34:37:45:d0:e5:fe:26:cd:fa:83:c5:5c:5f:a3:fe: 8e:a6:ec:7f:0d:ba:a4:a6:cd:3d:37:2c:ac:3d:cd: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:6A:B8:A8:B4:14:9C:FA:16:6A:CF:46:05:C2:83:B5:1C:1F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbe9e274-c492-3042-bdd8-8025b688defe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0e:9c:fe:ef:39:b7:87:45:a9:37:0c:4c:df:ec:19:dc:7d: 8e:de:1a:ae:e1:5a:5c:ed:29:72:7d:3d:08:27:b5:55:fd:bc: d3:f1:17:d8:06:9a:6b:be:83:6e:be:9d:6c:d9:d6:3c:0d:19: 12:23:8b:8d:4f:5a:85:c7:ca:15:fb:39:08:1c:91:58:a4:ea: db:fa:80:cc:ce:d4:89:9f:41:9f:72:f9:45:ac:60:b5:41:83: 83:5f:9a:f0:29:16:80:a6:fd:b7:e2:28:14:55:11:42:f0:77: 7e:ca:39:94:51:38:05:a3:91:83:5c:a8:87:9f:19:85:7e:dd: 93:b7:79:01:1a:28:1c:cd:86:1c:af:14:af:20:5d:01:4a:65: 09:2d:68:32:0f:f9:d0:43:c6:b7:cc:10:c0:46:68:fe:2c:d2: d5:e9:cd:3b:74:83:70:ad:0d:94:95:f8:f7:82:ca:69:d8:27: 0c:8a:5c:28:b1:3b:ce:82:24:0e:78:33:7e:59:fd:7f:d6:63: d6:2d:6d:79:ee:20:54:5c:6c:19:f1:ed:3b:d7:c8:10:84:06: c2:a3:7f:6c:28:24:01:3f:49:fb:08:6a:23:21:f4:14:2d:79: 9c:fc:9c:e0:f6:7e:e2:ad:d5:7d:3b:b0:42:16:85:57:10:47: 94:67:96:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mn8kZOYbwi/P/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGZjMzY4YzEtODFmMy00ZjBhLTk0YTAtYTQyOTFlM2ZhODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUSjuqxqKEoYty1XtbBnNxczZjD0BY9DKeA3 ystKCN+WBmnv6ZN55vWF+L6s7JwdJ4lKmwBlMTCOU5dNPwFv0+bAYluHSVvBUfyg YQ6Oh3P26IQSWyWKyp3QYmLLJN6uZGr8ZTuVq5WCMrD5ewHAU/wk36Bcflzq6YxE 4n5GO9E7nJGriMlbofhiuoIv2303hmlawL6+cBF5MU9WJSDZUQEfUxsJIXAxbUH6 gp0AVfEBT4YgmIYbiSrRct0/PCWrgFUCSZq6BOZB5bpmRHL0QrW+oSWheQx1YyPe Bk4RePY0N0XQ5f4mzfqDxVxfo/6Opux/Dbqkps09NyysPc37DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc7ariotBSc+hZqz0YFwoO1HB9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGJlOWUyNzQtYzQ5Mi0z MDQyLWJkZDgtODAyNWI2ODhkZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYOnP7vObeHRak3DEzf7BncfY7eGq7hWlztKXJ9PQgntVX9vNPxF9gG mmu+g26+nWzZ1jwNGRIji41PWoXHyhX7OQgckVik6tv6gMzO1ImfQZ9y+UWsYLVB g4NfmvApFoCm/bfiKBRVEULwd37KOZRROAWjkYNcqIefGYV+3ZO3eQEaKBzNhhyv FK8gXQFKZQktaDIP+dBDxrfMEMBGaP4s0tXpzTt0g3CtDZSV+PeCymnYJwyKXCix O86CJA54M35Z/X/WY9YtbXnuIFRcbBnx7TvXyBCEBsKjf2woJAE/SfsIaiMh9BQt eZz8nOD2fuKt1X07sEIWhVcQR5RnlmI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:03 2025 by rpki-client