$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50ae0c4-1f15-33a8-8263-6db070abede6.roa File: e50ae0c4-1f15-33a8-8263-6db070abede6.roa (raw, json) Hash identifier: rQzWvMV+neRRkCKuzGCuah/hafkTbYcPMeozkZ2Hc+o= Subject key identifier: 60:19:AF:32:F9:D2:2B:7F:25:DA:5E:A8:FD:80:18:26:30:5C:1C:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C1FFC7C01D12ECB71D820 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50ae0c4-1f15-33a8-8263-6db070abede6.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:1f:fc:7c:01:d1:2e:cb:71:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=75b56b6c-fb95-4d31-bce1-2adc4f57168b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:51:ae:c2:cd:1d:21:3b:6a:bb:f9:ca:c1: 7f:7b:b9:20:7c:89:3d:aa:bb:67:b8:0e:fb:16:46: 07:c4:19:cb:26:42:e6:06:a6:5b:aa:64:e8:2c:ab: 4c:ef:dc:0e:2f:9a:92:22:a2:7c:13:ea:80:a0:77: 39:be:7c:a7:1b:49:e6:9d:cc:18:38:34:85:07:59: 05:5a:4e:26:50:bc:0d:89:d9:c6:36:49:3a:85:29: b8:ab:6c:a3:b6:86:3f:43:1a:7a:53:0c:83:fd:7c: 5a:66:cb:eb:b3:ec:62:2c:7e:67:e9:05:62:4f:73: 47:aa:8b:53:7b:9f:db:40:4d:20:4c:d2:a8:18:d1: 55:fd:0a:97:d5:8b:94:76:8f:a9:5e:25:2a:be:23: bf:68:c7:55:80:64:8e:96:f9:5d:2c:50:1a:de:ae: 9d:36:ec:39:f9:67:53:14:e4:19:11:07:50:5c:9a: db:bd:bd:31:0e:ab:e9:9c:c7:7f:bb:98:d7:e1:63: 62:62:bb:7c:7d:ce:06:8d:67:0b:2e:df:ce:98:33: b7:ca:38:e3:92:39:49:ac:22:07:0f:76:4d:04:ac: 65:2a:ed:03:2b:ee:c7:5a:8f:14:96:03:08:39:78: 7c:ec:20:03:c5:b3:fc:ea:e5:36:e3:00:ed:b1:ef: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:AF:32:F9:D2:2B:7F:25:DA:5E:A8:FD:80:18:26:30:5C:1C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50ae0c4-1f15-33a8-8263-6db070abede6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e3:59:60:0e:e1:ae:7d:0d:be:fc:2f:48:6b:7d:a9:77:b6: 17:6f:6f:f6:7b:ad:63:79:a8:35:d3:a0:8b:5b:69:d1:da:53: 54:ff:70:04:49:c3:f7:68:87:1b:07:5b:e5:92:99:fe:01:d7: ee:01:79:58:db:ae:5b:a7:a9:6d:ce:14:0c:24:9b:5e:aa:af: 5d:9d:85:7c:2c:1a:7b:41:14:d0:d1:0c:bb:73:b9:a6:fd:29: 95:51:ec:e5:04:b9:1f:56:cc:36:58:fd:5d:37:41:fb:78:bc: 9a:8e:4e:8b:63:07:a0:f9:5d:0a:a4:5f:6c:66:4b:0b:72:07: f4:68:7a:33:23:b0:bb:46:71:f5:80:60:d9:0e:f4:d9:48:c3: 4f:51:5b:6b:9a:2d:5c:bb:16:7a:95:cc:49:f6:03:90:7b:df: 2e:02:24:a1:13:12:83:f6:ab:3d:41:ec:8a:22:9c:3b:94:1e: 11:e2:87:ed:bb:08:e2:26:49:cf:61:81:3d:fe:03:73:f6:0b: bb:d9:65:4f:fc:37:4e:37:d6:17:26:15:20:96:25:a3:0b:db: 8f:09:fa:6d:e9:64:4b:31:d9:b3:f5:61:ad:c7:2a:47:1a:83: bc:67:4f:49:09:96:b1:47:9f:2d:f7:bb:30:60:ec:79:06:8f: 3d:e3:29:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbB/8fAHRLstx2CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzViNTZiNmMtZmI5NS00ZDMxLWJjZTEtMmFkYzRmNTcxNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk9RrsLNHSE7arv5ysF/e7kgfIk9qrtnuA77 FkYHxBnLJkLmBqZbqmToLKtM79wOL5qSIqJ8E+qAoHc5vnynG0nmncwYODSFB1kF Wk4mULwNidnGNkk6hSm4q2yjtoY/Qxp6UwyD/XxaZsvrs+xiLH5n6QViT3NHqotT e5/bQE0gTNKoGNFV/QqX1YuUdo+pXiUqviO/aMdVgGSOlvldLFAa3q6dNuw5+WdT FOQZEQdQXJrbvb0xDqvpnMd/u5jX4WNiYrt8fc4GjWcLLt/OmDO3yjjjkjlJrCIH D3ZNBKxlKu0DK+7HWo8UlgMIOXh87CADxbP86uU24wDtse9BgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAZrzL50it/JdpeqP2AGCYwXBx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTUwYWUwYzQtMWYxNS0z M2E4LTgyNjMtNmRiMDcwYWJlZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDjWWAO4a59Db78L0hrfal3thdvb/Z7rWN5qDXToItbadHaU1T/cARJ w/dohxsHW+WSmf4B1+4BeVjbrlunqW3OFAwkm16qr12dhXwsGntBFNDRDLtzuab9 KZVR7OUEuR9WzDZY/V03Qft4vJqOTotjB6D5XQqkX2xmSwtyB/RoejMjsLtGcfWA YNkO9NlIw09RW2uaLVy7FnqVzEn2A5B73y4CJKETEoP2qz1B7IoinDuUHhHih+27 COImSc9hgT3+A3P2C7vZZU/8N0431hcmFSCWJaML248J+m3pZEsx2bP1Ya3HKkca g7xnT0kJlrFHny33uzBg7HkGjz3jKc8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:31 2025 by rpki-client