$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa File: 2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa (raw, json) Hash identifier: 9fEvwue64eQDLTGYDOKa8jVl2sWlgpyPC31MWrJJ7i4= Subject key identifier: C7:72:11:D0:08:9F:13:62:E4:58:F9:6F:C5:22:20:49:63:D0:45:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625BC9B325DBE8B8948300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.225.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5b:c9:b3:25:db:e8:b8:94:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=3053708c-7c37-4e29-bc42-5d94e1e7c566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:71:3a:a4:fc:1d:ba:c9:31:19:bf:45:8b: 7d:3a:b5:e4:07:73:0f:84:62:4e:de:5c:f9:89:26: c6:a5:86:a0:b3:1f:e6:5a:7f:1f:36:73:aa:16:db: 6d:0b:f2:d8:f4:95:22:eb:07:15:f3:b4:4c:f8:2f: 91:d3:ee:df:4a:61:e9:4c:a6:36:56:d9:a9:aa:b5: 7b:f1:91:a4:6a:03:a8:10:ee:c4:c6:bc:1f:0a:2c: 0b:d4:df:d8:2c:64:1b:6b:f5:29:4f:fb:c9:df:fd: 3d:52:e4:e7:c4:33:08:f4:8a:9d:31:fb:96:f8:f0: 00:64:bb:73:fb:7b:a2:9f:ba:05:05:46:fa:54:5c: 4a:24:3c:2d:d0:5b:10:1a:d7:39:48:dc:c1:fd:ad: 0f:2f:70:11:ea:bb:33:cd:9f:31:ae:bf:fd:5a:2a: 1b:b8:eb:78:44:46:91:0a:47:36:b3:bb:6d:41:e2: 28:a1:be:3a:13:ad:f3:ed:1f:2f:07:81:97:bd:d6: 91:50:0e:6a:5b:19:c2:76:8c:dd:e8:26:fe:f0:aa: bc:62:4e:0c:4f:43:67:57:aa:66:79:49:6b:5f:6f: c6:fe:f2:44:73:6b:34:6b:55:d5:4b:37:e8:dc:f8: e1:75:01:2e:6b:a6:e3:3b:8c:c4:17:46:de:06:9d: 9d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:72:11:D0:08:9F:13:62:E4:58:F9:6F:C5:22:20:49:63:D0:45:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3f:94:31:0e:ae:88:71:82:eb:71:5d:ae:6f:09:3d:df:b9: ef:9e:05:0e:53:7c:95:e0:30:9a:cc:e4:7f:19:c1:47:16:73: 0f:d6:c8:83:7f:b4:fc:06:6c:9f:7e:c3:ef:e2:ae:a2:31:95: 1a:1c:e5:29:7c:d3:60:cb:a3:ec:99:50:f6:82:29:9f:8b:ea: 93:4f:0e:86:26:1b:90:95:8a:59:53:34:bb:2c:94:a5:5e:c0: e4:44:eb:ae:21:b0:c3:3c:df:26:9b:c5:1b:d2:5a:60:f4:1d: 98:84:ee:d3:76:9f:1d:66:a8:d4:01:06:1d:25:ed:ab:82:ba: 1e:f9:b5:8a:f4:2f:a0:bb:e8:b8:d7:da:75:9f:55:ba:46:78: 21:6a:19:a4:df:2a:11:e8:0f:60:9c:c2:55:48:1d:08:77:6e: 6c:a9:d7:f9:9a:17:cd:55:c5:02:38:89:b1:15:8c:2d:a5:6f: 32:a2:09:a1:8b:10:21:05:13:79:2f:41:1f:fc:d2:12:32:60: 52:ae:35:36:df:13:24:5d:d3:51:11:ee:1a:98:47:4a:9e:e8: 4d:d3:bf:78:fe:90:b3:e4:05:ed:33:20:93:13:bb:59:03:d7: 53:06:c0:ba:27:33:28:d4:b6:12:4a:0c:db:6f:b3:f8:44:7c: 01:fc:91:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlvJsyXb6LiUgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MzA1MzcwOGMtN2MzNy00ZTI5LWJjNDItNWQ5NGUxZTdjNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp5xOqT8HbrJMRm/RYt9OrXkB3MPhGJO3lz5 iSbGpYagsx/mWn8fNnOqFtttC/LY9JUi6wcV87RM+C+R0+7fSmHpTKY2VtmpqrV7 8ZGkagOoEO7ExrwfCiwL1N/YLGQba/UpT/vJ3/09UuTnxDMI9IqdMfuW+PAAZLtz +3uin7oFBUb6VFxKJDwt0FsQGtc5SNzB/a0PL3AR6rszzZ8xrr/9WiobuOt4REaR Ckc2s7ttQeIoob46E63z7R8vB4GXvdaRUA5qWxnCdozd6Cb+8Kq8Yk4MT0NnV6pm eUlrX2/G/vJEc2s0a1XVSzfo3PjhdQEua6bjO4zEF0beBp2dPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdyEdAInxNi5Fj5b8UiIElj0EUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmUxNTlhYTgtYjZmNy0z NzBhLThiOWYtOTZhMzdhNGQyZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ/lDEOrohxgutxXa5vCT3fue+eBQ5TfJXgMJrM5H8ZwUcWcw/WyIN/ tPwGbJ9+w+/irqIxlRoc5Sl802DLo+yZUPaCKZ+L6pNPDoYmG5CVillTNLsslKVe wORE664hsMM83yabxRvSWmD0HZiE7tN2nx1mqNQBBh0l7auCuh75tYr0L6C76LjX 2nWfVbpGeCFqGaTfKhHoD2CcwlVIHQh3bmyp1/maF81VxQI4ibEVjC2lbzKiCaGL ECEFE3kvQR/80hIyYFKuNTbfEyRd01ER7hqYR0qe6E3Tv3j+kLPkBe0zIJMTu1kD 11MGwLonMyjUthJKDNtvs/hEfAH8kfs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:12 2025 by rpki-client