$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/315d5d34-1cef-3ecb-aaff-3a5cd7faf9ab.roa File: 315d5d34-1cef-3ecb-aaff-3a5cd7faf9ab.roa (raw, json) Hash identifier: Ye8klMsFifP/jl7P072rk6/SrtY+qMfYZIFqFvHO8dw= Subject key identifier: 2F:EA:D4:8B:89:C4:E9:70:F7:0E:00:EB:41:7D:6A:8E:11:B4:F9:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2849A3E2077866A279BA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/315d5d34-1cef-3ecb-aaff-3a5cd7faf9ab.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:84:9a:3e:20:77:86:6a:27:9b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3b08ad45-ffe3-4213-9a16-370ab80aee3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:9c:8e:ef:5c:9e:d9:65:3c:22:94:3c:25: 29:9e:46:24:8c:5b:a6:44:3b:81:34:b0:8c:33:9a: 16:e6:e1:e2:ac:59:80:4a:a1:23:8c:ac:f4:1a:53: 4a:ee:d8:88:5e:1a:53:73:4a:85:a1:b6:c2:51:85: 76:a3:40:80:e4:26:1a:7b:87:b0:50:1b:a2:fa:f2: e7:44:a9:86:f9:3d:f3:91:e8:84:6f:93:91:48:59: 2b:55:9c:72:3e:c9:8d:48:a0:1e:25:97:a2:11:c6: 08:51:b0:5e:4d:b0:4a:75:3c:56:b2:3b:a0:aa:c4: 26:b4:89:f4:f2:c0:56:88:24:40:b1:8d:8e:61:87: 57:51:b4:7e:02:7c:e4:98:7c:a8:b6:96:56:fc:12: e3:b1:3b:73:1b:0d:77:8c:27:e7:12:7c:ad:37:d0: ae:3f:4f:9c:cf:38:37:61:a1:d4:86:e7:ce:d6:6e: 2d:fd:5c:24:95:a6:f9:b0:39:f2:64:ff:c6:ac:1d: 99:9c:f9:27:e2:be:ad:e2:3e:d5:d4:22:ee:4a:2c: f2:65:18:5f:ea:c3:13:17:34:cb:e7:af:f2:96:35: be:00:ec:fd:30:1f:45:cd:f4:b5:2e:56:ab:c1:a1: d6:00:b2:91:ca:93:33:6d:75:4f:bf:6f:0b:e8:db: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EA:D4:8B:89:C4:E9:70:F7:0E:00:EB:41:7D:6A:8E:11:B4:F9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/315d5d34-1cef-3ecb-aaff-3a5cd7faf9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e3:7e:fc:f0:46:1e:06:9f:2b:c7:19:8c:47:ab:50:eb:b4: 96:43:9a:b7:0e:0f:e9:61:91:b7:81:8f:a1:13:e9:9c:51:66: 8d:ef:9f:2f:a7:9f:3f:ec:23:96:24:64:5d:de:50:99:50:42: 12:11:84:55:db:fc:b6:f1:09:22:6b:30:ad:2a:d6:d9:08:10: fe:06:04:89:70:e0:8d:f9:3a:b8:15:e1:f3:95:cc:f7:13:84: 77:5a:e5:e2:b3:25:cf:05:5d:1a:bd:1d:2e:0e:c9:01:af:a9: 8f:4d:f6:85:52:12:03:1b:f7:9e:fe:aa:10:02:4d:69:78:0c: e7:89:e6:5b:21:31:a4:f7:25:7b:77:3c:d1:3d:d2:89:54:ca: 7c:9f:77:47:a4:08:e8:c7:ac:59:ad:c7:75:49:e4:a4:07:98: 1e:80:7d:b3:c5:83:04:63:5a:11:65:35:e3:fc:63:1d:31:15: 8f:ba:36:8a:60:d4:74:7b:15:df:2b:c1:8a:4d:2b:2a:47:1c: 8f:d1:c3:69:fa:94:d4:39:e0:d8:9a:7a:7e:e3:3c:c7:c3:b6: 65:f3:69:7f:64:7c:19:1b:9b:c8:8e:2a:b3:3b:ec:30:c4:83: b7:2c:23:36:71:7c:89:a6:7c:10:88:6e:30:cf:aa:92:b1:cc: 4f:d7:90:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oSaPiB3hmonm6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2IwOGFkNDUtZmZlMy00MjEzLTlhMTYtMzcwYWI4MGFlZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8qcju9cntllPCKUPCUpnkYkjFumRDuBNLCM M5oW5uHirFmASqEjjKz0GlNK7tiIXhpTc0qFobbCUYV2o0CA5CYae4ewUBui+vLn RKmG+T3zkeiEb5ORSFkrVZxyPsmNSKAeJZeiEcYIUbBeTbBKdTxWsjugqsQmtIn0 8sBWiCRAsY2OYYdXUbR+AnzkmHyotpZW/BLjsTtzGw13jCfnEnytN9CuP0+czzg3 YaHUhufO1m4t/Vwklab5sDnyZP/GrB2ZnPkn4r6t4j7V1CLuSizyZRhf6sMTFzTL 56/yljW+AOz9MB9FzfS1LlarwaHWALKRypMzbXVPv28L6NusRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/q1IuJxOlw9w4A60F9ao4RtPngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzE1ZDVkMzQtMWNlZi0z ZWNiLWFhZmYtM2E1Y2Q3ZmFmOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7jfvzwRh4GnyvHGYxHq1DrtJZDmrcOD+lhkbeBj6ET6ZxRZo3vny+n nz/sI5YkZF3eUJlQQhIRhFXb/LbxCSJrMK0q1tkIEP4GBIlw4I35OrgV4fOVzPcT hHda5eKzJc8FXRq9HS4OyQGvqY9N9oVSEgMb957+qhACTWl4DOeJ5lshMaT3JXt3 PNE90olUynyfd0ekCOjHrFmtx3VJ5KQHmB6AfbPFgwRjWhFlNeP8Yx0xFY+6Nopg 1HR7Fd8rwYpNKypHHI/Rw2n6lNQ54Niaen7jPMfDtmXzaX9kfBkbm8iOKrM77DDE g7csIzZxfImmfBCIbjDPqpKxzE/XkFM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:08:38 2025 by rpki-client