$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa File: 1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa (raw, json) Hash identifier: Bry0QlV+impBSieVSP2peRipBarHVuYb2+OOc2b3Mu4= Subject key identifier: EA:EE:C8:F1:1A:0C:CE:D2:B0:8F:B7:89:D9:BC:A1:F2:80:AF:FD:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C58CD275C9BCF97631280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:58:cd:27:5c:9b:cf:97:63:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=fa4d9197-62a5-40d4-ba16-5a8cef43837a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:cc:b7:4e:b4:1b:d1:75:c1:76:44:ff:50: d2:53:e8:c4:be:0c:3f:cf:fa:74:d2:00:a7:0b:22: 64:a7:2d:f8:bc:3e:b1:5f:01:65:97:d9:8b:11:41: 2d:a1:ac:22:92:8b:8a:48:8d:c5:fa:b5:1e:d2:27: e8:a0:25:66:f4:32:a5:f6:eb:b6:97:71:ae:c4:59: a0:f7:ab:5d:8c:23:9b:de:b1:5c:20:fc:00:c6:0b: 63:5f:ca:55:a4:e1:d2:c4:f0:47:15:43:0b:6d:47: a3:a3:97:c4:5c:67:d4:c1:37:cb:30:d1:ac:4c:5c: 7b:0e:ad:56:cc:c0:d5:a3:6b:45:00:3d:cb:34:42: 65:21:d3:dc:86:8e:2b:d0:8a:60:9d:0f:5f:b4:17: 84:06:e7:96:38:c2:cf:c1:86:11:20:e1:8d:ab:6f: a9:0e:e3:e1:ab:97:31:7c:98:77:8c:30:ab:1a:76: 20:34:6c:9d:2a:6e:d1:09:80:20:19:d2:2c:ae:13: 92:dc:1c:d4:71:06:52:e4:8c:b3:e1:ce:85:fe:50: b8:96:3f:89:2b:c2:47:0d:c3:6f:4b:9d:01:29:31: 57:04:d3:bd:f0:7e:b2:2d:d7:2a:2d:6b:0f:89:49: 9d:56:4f:45:f7:97:11:17:f7:37:9c:dc:7b:06:c8: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EE:C8:F1:1A:0C:CE:D2:B0:8F:B7:89:D9:BC:A1:F2:80:AF:FD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7d:01:89:4e:59:02:5a:66:0e:b0:7c:df:75:8c:22:36:87: 28:a1:12:e5:6e:86:be:11:a4:ce:c7:53:07:db:20:ed:f6:7c: 2d:01:dc:04:3d:57:9a:47:97:92:b7:48:9e:f4:db:2a:b7:4f: 19:14:0e:b4:fe:24:a6:49:14:69:b7:00:9d:16:24:07:f2:ed: 83:e2:84:23:fd:48:4a:cc:28:07:17:42:3b:9f:12:e1:7d:71: 32:85:04:28:65:75:73:d0:f6:b3:d2:f1:f0:c4:4a:9b:8b:ad: 90:7d:90:a0:e2:fe:4c:94:81:65:34:21:77:28:83:6f:c0:d2: 40:50:55:d7:19:18:90:8f:04:23:1b:ae:75:3a:13:a2:4c:67: 78:97:21:01:65:c1:88:6f:6f:24:d6:85:cb:94:e3:d9:4e:73: 59:7b:76:f9:ee:e6:dd:8a:90:4d:be:77:d6:e2:23:a0:7f:dd: 9f:d7:cc:a7:c1:66:87:b2:bf:ac:d8:54:85:77:73:56:eb:5c: 06:e8:99:93:f1:e7:48:53:24:f2:ae:5b:be:75:4f:0f:c4:84: 89:8c:92:a1:da:90:14:12:84:79:4a:45:31:3e:75:78:b9:bd: 61:3a:f7:18:19:4a:e3:09:4d:ea:3e:45:39:bd:0a:c2:e9:6a: 15:54:1f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFjNJ1ybz5djEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmE0ZDkxOTctNjJhNS00MGQ0LWJhMTYtNWE4Y2VmNDM4MzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmjMt060G9F1wXZE/1DSU+jEvgw/z/p00gCn CyJkpy34vD6xXwFll9mLEUEtoawikouKSI3F+rUe0ifooCVm9DKl9uu2l3GuxFmg 96tdjCOb3rFcIPwAxgtjX8pVpOHSxPBHFUMLbUejo5fEXGfUwTfLMNGsTFx7Dq1W zMDVo2tFAD3LNEJlIdPcho4r0IpgnQ9ftBeEBueWOMLPwYYRIOGNq2+pDuPhq5cx fJh3jDCrGnYgNGydKm7RCYAgGdIsrhOS3BzUcQZS5Iyz4c6F/lC4lj+JK8JHDcNv S50BKTFXBNO98H6yLdcqLWsPiUmdVk9F95cRF/c3nNx7Bsgw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOruyPEaDM7SsI+3idm8ofKAr/2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWJmYTFkNWQtOGQ2Ni0z OWI5LWE4MGMtMjA3OTBlZTczOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp9AYlOWQJaZg6wfN91jCI2hyihEuVuhr4RpM7HUwfbIO32fC0B3AQ9 V5pHl5K3SJ702yq3TxkUDrT+JKZJFGm3AJ0WJAfy7YPihCP9SErMKAcXQjufEuF9 cTKFBChldXPQ9rPS8fDESpuLrZB9kKDi/kyUgWU0IXcog2/A0kBQVdcZGJCPBCMb rnU6E6JMZ3iXIQFlwYhvbyTWhcuU49lOc1l7dvnu5t2KkE2+d9biI6B/3Z/XzKfB Zoeyv6zYVIV3c1brXAbomZPx50hTJPKuW751Tw/EhImMkqHakBQShHlKRTE+dXi5 vWE69xgZSuMJTeo+RTm9CsLpahVUHx8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:06 2025 by rpki-client