$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3895cbb-13b8-3b7f-8da2-fcae1265ad0f.roa File: e3895cbb-13b8-3b7f-8da2-fcae1265ad0f.roa (raw, json) Hash identifier: jFy1idByyPlWnFxtJNcxP61U0fz8qElVNk0GDrFIwqc= Subject key identifier: 10:D4:87:D9:7E:37:45:11:5A:54:B5:3F:51:32:BD:A7:02:51:BC:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F235AC87A62E6DB8DDF800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3895cbb-13b8-3b7f-8da2-fcae1265ad0f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:35:ac:87:a6:2e:6d:b8:dd:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=349ce9c3-9d67-4d4f-82cd-f624760c24f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:92:cf:13:4d:64:af:c2:7f:4c:16:12:e3: 64:32:b6:f4:33:ae:87:57:8f:35:0a:27:c1:83:5b: a6:cd:8f:77:83:bb:62:28:b7:47:95:c0:5f:3c:7b: 8f:45:60:8a:ab:a2:ab:b5:0a:d9:03:17:a0:1d:b0: 47:e5:41:19:61:5c:9a:75:37:fc:b0:91:6f:a4:b6: 05:24:50:c8:3d:c4:f2:ee:cc:16:58:18:25:b4:9c: cd:87:42:93:1b:e9:cf:0d:fb:e2:a8:55:cf:88:75: e2:bc:28:59:39:b0:76:10:a0:e4:08:95:87:c2:9d: d6:0b:d6:29:78:59:dc:8d:e3:97:d8:ca:cc:0e:22: 45:9e:5c:8c:25:8a:f4:93:8c:a8:08:d3:30:ca:e8: 0b:89:55:0b:60:ba:94:c8:7f:51:21:78:cc:a5:b2: a6:3d:6c:30:5c:28:f8:5b:d8:ac:22:5a:9f:d9:f0: 77:8a:26:05:c2:84:19:0b:39:55:31:33:25:f4:87: 4f:96:6b:d8:a9:ec:b9:dc:37:22:ad:5b:16:7f:41: 1a:85:4e:f3:1c:7f:5c:8a:e8:6d:88:d6:ab:87:3e: 0a:1b:b8:50:a9:1b:63:d3:64:b2:86:75:06:40:07: 7b:e0:a1:5b:ef:99:50:1d:1f:f2:ad:ff:0a:62:ca: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D4:87:D9:7E:37:45:11:5A:54:B5:3F:51:32:BD:A7:02:51:BC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3895cbb-13b8-3b7f-8da2-fcae1265ad0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:bc:e4:40:f0:5a:14:a7:7f:94:3e:a1:f0:8c:c6:7e:e4: 0a:73:bb:53:8a:1f:d9:6a:64:60:ac:2e:60:e0:df:52:ac:52: 45:39:bb:48:59:28:5c:d5:05:d1:74:35:f2:ca:3a:3a:32:29: cb:ed:40:2d:04:90:47:92:b4:0f:5e:f6:10:90:b2:91:72:0b: 43:1b:26:76:51:6d:cc:1c:85:6a:45:de:06:50:dd:d8:27:dd: bb:9f:f6:15:9b:67:88:63:2f:a5:24:ce:c5:ca:e2:e9:86:c9: 5b:6d:89:24:c0:f8:31:75:3e:79:fc:5c:32:41:13:ae:02:3a: de:a2:83:e6:fd:51:a2:1f:68:2b:ab:8a:23:81:06:0e:32:c0: dc:d1:39:f2:4d:30:33:05:3c:c5:e5:7e:8e:ad:c2:8f:25:cf: 2d:b5:e2:da:8a:f4:12:59:40:cc:7b:34:ec:2c:92:fb:96:f0: 47:0b:44:32:84:e6:0e:c5:87:b4:11:d8:1a:4b:88:d8:a8:60: ec:58:3d:22:2f:31:2f:9f:6b:80:24:34:e9:da:e9:5f:97:70: 26:f9:22:fb:e7:56:ca:00:4f:28:55:8f:90:1a:4b:b8:db:47: 33:60:1c:57:37:eb:7a:be:37:90:0b:4b:65:98:3b:f7:f6:c3: f5:d5:b1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jWsh6Yubbjd+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzQ5Y2U5YzMtOWQ2Ny00ZDRmLTgyY2QtZjYyNDc2MGMyNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxGSzxNNZK/Cf0wWEuNkMrb0M66HV481CifB g1umzY93g7tiKLdHlcBfPHuPRWCKq6KrtQrZAxegHbBH5UEZYVyadTf8sJFvpLYF JFDIPcTy7swWWBgltJzNh0KTG+nPDfviqFXPiHXivChZObB2EKDkCJWHwp3WC9Yp eFncjeOX2MrMDiJFnlyMJYr0k4yoCNMwyugLiVULYLqUyH9RIXjMpbKmPWwwXCj4 W9isIlqf2fB3iiYFwoQZCzlVMTMl9IdPlmvYqey53DcirVsWf0EahU7zHH9ciuht iNarhz4KG7hQqRtj02SyhnUGQAd74KFb75lQHR/yrf8KYspchQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDUh9l+N0URWlS1P1EyvacCUbzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTM4OTVjYmItMTNiOC0z YjdmLThkYTItZmNhZTEyNjVhZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtUvORA8FoUp3+UPqHwjMZ+5Apzu1OKH9lqZGCsLmDg31KsUkU5u0hZ KFzVBdF0NfLKOjoyKcvtQC0EkEeStA9e9hCQspFyC0MbJnZRbcwchWpF3gZQ3dgn 3buf9hWbZ4hjL6UkzsXK4umGyVttiSTA+DF1Pnn8XDJBE64COt6ig+b9UaIfaCur iiOBBg4ywNzROfJNMDMFPMXlfo6two8lzy214tqK9BJZQMx7NOwskvuW8EcLRDKE 5g7Fh7QR2BpLiNioYOxYPSIvMS+fa4AkNOna6V+XcCb5IvvnVsoATyhVj5AaS7jb RzNgHFc363q+N5ALS2WYO/f2w/XVsWA= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:04 2025 by rpki-client