$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa File: 7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa (raw, json) Hash identifier: UZj1VxjeEcR8PW/MB4WLTt6QJuRS0yIOiD6T/ZjwAUo= Subject key identifier: 78:7B:0C:5C:5F:D8:12:17:C0:D7:E7:F7:C0:CE:1B:09:8B:F8:96:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29C4BD8AD56F866475300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9c:4b:d8:ad:56:f8:66:47:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=73c39611-f98d-491b-aa90-1b6591838457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:d1:68:e4:9a:f1:68:82:e1:38:5b:93:71: 2b:6b:9c:74:0f:db:cb:12:a8:b2:80:4f:3c:65:ab: e9:8b:7f:32:5e:91:9f:60:30:d7:06:a2:92:c9:48: 90:05:01:15:31:7c:7f:e2:e9:88:da:bd:64:5c:7b: ef:7e:c5:4c:70:71:8d:6b:0d:2d:b4:a3:1b:f6:22: 91:a1:d0:06:9c:37:eb:ce:f2:20:b1:da:ad:7d:5d: 76:3c:e2:09:82:a8:90:de:d3:4d:c2:4a:58:9b:ed: 30:c5:88:c5:13:ee:48:57:87:96:55:16:a9:78:97: 32:8c:de:85:1a:d4:59:9f:62:cb:6b:a2:98:36:cb: 60:e3:b9:42:7c:ce:1c:59:6a:05:b0:a7:60:df:58: 24:ba:a3:fb:09:be:60:d6:2a:a6:a5:fc:aa:3f:86: 0d:e7:cf:77:a7:46:2c:0d:64:95:4c:43:13:c7:8c: 23:5f:4e:4d:3d:47:35:4e:18:b1:98:bf:c4:56:67: a9:cb:27:90:dd:47:e7:f1:4d:5d:a1:bb:77:a0:cf: 79:47:05:71:c2:fc:9f:38:26:e5:a1:9b:99:00:9c: 0d:b7:71:8b:40:f8:1d:4a:69:c1:54:13:91:7a:de: 99:43:a9:d8:bb:2a:b6:44:7a:1f:10:50:96:fe:f9: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7B:0C:5C:5F:D8:12:17:C0:D7:E7:F7:C0:CE:1B:09:8B:F8:96:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0e:55:83:d9:66:13:50:8f:e6:20:86:28:a3:65:d5:17:69: 93:2b:4b:5b:d8:b9:7c:ec:22:b6:96:84:2e:f9:44:c6:5f:ec: c9:08:3b:4a:d5:c3:e3:30:57:8a:2d:94:bb:e1:f5:e6:9d:87: be:04:e9:d3:7c:1a:87:1c:70:02:92:a8:f3:c5:7f:49:c1:d5: 4b:4a:c1:6b:c0:3e:9c:bc:07:49:ad:c0:9f:e6:28:bc:04:3a: 2c:b4:6c:25:42:91:db:81:47:8d:8f:dc:96:4b:0b:04:85:ea: 97:8b:dd:e8:26:b7:c6:b1:88:f1:07:e0:dd:1c:08:de:e3:0a: 3f:15:b5:84:d0:4c:19:92:41:9c:15:12:3a:f3:ca:35:94:82: 02:75:9d:c7:02:9c:8d:67:73:d9:14:02:5a:c3:fc:41:59:69: 29:41:a5:8b:89:b7:c1:d7:be:7d:5d:41:7a:b0:5c:da:51:14: 87:05:67:18:cd:c8:0d:f7:15:7a:ed:1e:a9:c4:77:68:2a:4f: 58:25:a8:9d:47:ff:a5:e9:73:ba:77:c7:7b:73:27:e4:b6:32: 47:c5:71:79:f4:2d:70:7d:2c:d2:a0:aa:97:42:05:a0:e0:b9: a7:18:9a:82:3f:ef:06:50:6e:7e:78:ab:68:f4:d5:84:47:8f: 7c:b8:e0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pxL2K1W+GZHUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzNjMzk2MTEtZjk4ZC00OTFiLWFhOTAtMWI2NTkxODM4NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjRaOSa8WiC4Thbk3Era5x0D9vLEqiygE88 Zavpi38yXpGfYDDXBqKSyUiQBQEVMXx/4umI2r1kXHvvfsVMcHGNaw0ttKMb9iKR odAGnDfrzvIgsdqtfV12POIJgqiQ3tNNwkpYm+0wxYjFE+5IV4eWVRapeJcyjN6F GtRZn2LLa6KYNstg47lCfM4cWWoFsKdg31gkuqP7Cb5g1iqmpfyqP4YN5893p0Ys DWSVTEMTx4wjX05NPUc1ThixmL/EVmepyyeQ3Ufn8U1dobt3oM95RwVxwvyfOCbl oZuZAJwNt3GLQPgdSmnBVBORet6ZQ6nYuyq2RHofEFCW/vnG/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh7DFxf2BIXwNfn98DOGwmL+JYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2M2NGYwNTItMWMyNi0z ZGU1LTliYjUtYWI4YzRhNmIxZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAOVYPZZhNQj+YghiijZdUXaZMrS1vYuXzsIraWhC75RMZf7MkIO0rV w+MwV4otlLvh9eadh74E6dN8GocccAKSqPPFf0nB1UtKwWvAPpy8B0mtwJ/mKLwE Oiy0bCVCkduBR42P3JZLCwSF6peL3egmt8axiPEH4N0cCN7jCj8VtYTQTBmSQZwV EjrzyjWUggJ1nccCnI1nc9kUAlrD/EFZaSlBpYuJt8HXvn1dQXqwXNpRFIcFZxjN yA33FXrtHqnEd2gqT1glqJ1H/6Xpc7p3x3tzJ+S2MkfFcXn0LXB9LNKgqpdCBaDg uacYmoI/7wZQbn54q2j01YRHj3y44A4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:04 2025 by rpki-client