$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e39501d6-583b-3984-9d61-5019296d2d9b.roa File: e39501d6-583b-3984-9d61-5019296d2d9b.roa (raw, json) Hash identifier: Jqw32jLjsmIwY7TE2L2G14NZaJqnI4or/Wti8hBZzy4= Subject key identifier: B8:8E:AB:DA:91:2B:90:46:9D:F0:93:74:57:E3:74:AD:F9:2E:9B:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20629F6EAF28272AA9A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e39501d6-583b-3984-9d61-5019296d2d9b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:06:29:f6:ea:f2:82:72:aa:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=afcb0f45-53a0-481a-938c-aee61206e112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:37:cd:b4:12:4d:4a:02:2a:64:78:10:2d: c3:91:63:df:2e:18:ee:f1:39:44:ae:7f:e6:07:85: 88:9c:bb:80:96:ae:17:bb:25:eb:35:a4:27:e3:48: 6b:5a:89:ab:7f:4d:0c:b9:98:92:9a:cc:ec:65:f8: 73:84:02:86:09:38:fb:46:f8:d2:30:ed:f0:bd:87: 29:c9:b4:6d:3d:ed:23:16:ef:b6:07:e5:48:de:38: 05:9e:97:92:c8:d9:47:e8:e3:5b:47:aa:5a:42:f2: 18:b4:c7:3a:28:af:91:db:55:b2:d8:ac:5b:c9:ac: 47:fd:88:cf:15:cd:fd:a8:0b:38:23:ea:25:5d:d0: b3:2e:af:be:52:68:04:57:78:20:72:36:40:97:aa: e5:40:24:24:74:fe:41:1d:b5:2a:2c:d9:6b:38:6a: 2b:a3:04:d5:ce:d7:99:f8:1a:d1:65:e9:ee:33:db: 77:fc:44:85:22:57:47:22:ee:97:80:94:94:c3:24: 65:75:38:bd:91:48:87:41:36:a1:8b:60:f4:9b:0a: fd:9e:df:27:80:ca:05:76:50:44:af:48:4c:27:2b: 1a:d2:75:8e:6c:6b:bb:d7:77:35:84:f8:0e:16:4d: db:44:6d:fa:92:7e:30:e6:04:1b:4d:6c:77:d9:c9: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:AB:DA:91:2B:90:46:9D:F0:93:74:57:E3:74:AD:F9:2E:9B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e39501d6-583b-3984-9d61-5019296d2d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ce:6d:f1:99:84:86:57:0f:de:90:85:4b:ee:80:f6:34:36: 28:cc:66:27:49:15:5f:f8:4c:81:f3:07:3b:e7:db:89:fb:c2: 3c:dc:fb:9d:4b:49:75:2e:e3:15:19:81:b4:7d:93:3e:45:d4: 3c:67:b2:10:64:a0:f7:17:57:f5:36:68:03:1b:da:60:85:83: 18:94:89:55:46:61:27:05:1b:e4:7c:8c:bd:ed:cb:21:2b:5b: 46:f3:18:3b:bd:32:3d:45:fa:fa:70:d3:52:72:cd:c1:34:95: 57:ea:38:b8:de:7c:28:8e:3a:e7:2a:34:cb:70:55:24:0a:2a: d9:1b:0f:bc:3e:a4:43:22:68:96:c3:5d:d9:57:a1:0d:f0:ed: ca:98:20:df:99:df:d6:55:23:cb:7e:d4:6c:31:61:70:c5:e0: ed:84:50:21:9d:20:e8:7b:ac:6e:0e:9c:98:a2:f4:49:21:74: 26:9e:bc:e1:ad:8a:0c:ed:a8:e0:d8:89:b0:41:4f:2d:c4:c5: 13:94:08:e8:e5:a6:31:da:65:de:e0:c6:fb:a6:83:95:85:b0: ae:c0:32:3a:d9:07:9c:6e:7f:e9:2d:b9:59:b8:e3:bc:cc:53: e8:ae:73:4a:49:f1:76:66:d6:f7:78:6a:5f:10:6b:d6:2f:6f: e1:35:83:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gYp9urygnKqmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YWZjYjBmNDUtNTNhMC00ODFhLTkzOGMtYWVlNjEyMDZlMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVs3zbQSTUoCKmR4EC3DkWPfLhju8TlErn/m B4WInLuAlq4XuyXrNaQn40hrWomrf00MuZiSmszsZfhzhAKGCTj7RvjSMO3wvYcp ybRtPe0jFu+2B+VI3jgFnpeSyNlH6ONbR6paQvIYtMc6KK+R21Wy2KxbyaxH/YjP Fc39qAs4I+olXdCzLq++UmgEV3ggcjZAl6rlQCQkdP5BHbUqLNlrOGorowTVzteZ +BrRZenuM9t3/ESFIldHIu6XgJSUwyRldTi9kUiHQTahi2D0mwr9nt8ngMoFdlBE r0hMJysa0nWObGu713c1hPgOFk3bRG36kn4w5gQbTWx32ckahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiOq9qRK5BGnfCTdFfjdK35LpshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTM5NTAxZDYtNTgzYi0z OTg0LTlkNjEtNTAxOTI5NmQyZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTObfGZhIZXD96QhUvugPY0NijMZidJFV/4TIHzBzvn24n7wjzc+51L SXUu4xUZgbR9kz5F1DxnshBkoPcXV/U2aAMb2mCFgxiUiVVGYScFG+R8jL3tyyEr W0bzGDu9Mj1F+vpw01JyzcE0lVfqOLjefCiOOucqNMtwVSQKKtkbD7w+pEMiaJbD XdlXoQ3w7cqYIN+Z39ZVI8t+1GwxYXDF4O2EUCGdIOh7rG4OnJii9EkhdCaevOGt igztqODYibBBTy3ExROUCOjlpjHaZd7gxvumg5WFsK7AMjrZB5xuf+ktuVm447zM U+iuc0pJ8XZm1vd4al8Qa9Yvb+E1g+4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:38:16 2025 by rpki-client