$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa File: 8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa (raw, json) Hash identifier: MO6cobTNdHkoLVCZDZ09T+NRECdkNGYG/oi+8B0cXlc= Subject key identifier: 85:D3:89:61:C1:51:2A:18:92:B7:D1:4E:DE:3F:29:A4:D3:FA:C6:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2428D123C939E68AD6C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:42:8d:12:3c:93:9e:68:ad:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=395b8bbe-9be4-4ead-9a3c-5c246eceedf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:a4:ba:99:80:91:47:86:42:5b:a2:82:2b: dd:e5:48:30:0a:74:65:2f:c0:b3:f4:56:a7:92:04: ea:f4:c6:b1:f6:73:1b:69:bf:93:4e:f8:1d:2a:b5: e2:8c:da:d0:04:63:47:48:7c:ce:53:1e:bc:a9:51: 67:10:a9:f0:9d:67:00:b4:aa:99:4c:76:d9:50:2c: 2a:13:0a:72:ae:60:e8:8b:a6:e0:cd:9f:d5:27:12: c3:4f:20:ff:22:b4:16:55:ad:69:57:94:03:ee:d9: 6d:99:0c:a1:93:c4:25:19:b1:90:a6:5d:75:1d:6c: 2a:4f:f4:af:42:25:79:a5:fd:0e:e3:1a:d4:7e:23: 2d:c7:e6:ad:e3:3b:a5:6b:55:ca:60:d1:b0:90:a1: 92:a3:f0:58:ed:9d:59:f6:97:ce:54:a6:00:26:cf: 48:10:d8:e2:1f:ca:3e:d0:ab:c9:20:93:32:8d:81: da:76:06:94:42:5f:bc:e8:35:25:c5:9f:1f:8c:dc: 40:ef:24:6e:f4:f2:d4:71:7f:99:79:1d:3b:ff:2e: 26:7f:9e:c0:0d:ff:f6:c3:76:69:7e:fb:5c:34:8d: 0c:b1:e3:78:29:29:57:95:13:a0:fc:de:33:55:2e: 73:19:3f:a8:a0:7e:1d:ca:bc:26:91:98:e3:90:1a: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:89:61:C1:51:2A:18:92:B7:D1:4E:DE:3F:29:A4:D3:FA:C6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f2:77:53:84:2c:b7:84:3a:87:42:77:e1:dc:30:76:09:f4: 54:97:f8:2b:ed:c4:d4:fa:6a:f5:38:2e:bc:be:77:e9:6e:5c: 3a:c8:ef:ca:55:ef:44:8c:c4:de:ab:13:af:bc:d6:ff:fd:b2: 6b:6f:88:dd:aa:d9:eb:e4:70:25:ae:7b:1a:e8:b8:4a:f4:67: 96:10:64:11:8b:1b:f6:72:96:a5:c3:c6:94:07:35:1f:00:17: 0e:b9:b1:43:62:e4:d1:86:41:00:6f:b5:7f:18:f5:4f:95:db: 47:5f:b5:f7:a3:78:1e:5f:61:b8:57:5f:70:d4:44:cb:ea:aa: 8a:82:88:5c:b7:56:a4:6e:25:ed:9c:a2:cd:de:c9:3c:8e:74: 9c:2e:25:5e:64:a5:36:18:ff:76:b5:21:a3:7d:9d:52:1f:1d: 87:f0:98:0e:e6:45:8e:3f:2c:4c:76:58:7c:81:53:81:79:dd: 8e:e4:41:a8:31:cd:c3:71:47:63:9b:13:03:53:67:64:cc:d8: a6:e0:80:bc:b3:69:03:4e:cb:42:5d:58:bb:e7:cb:73:73:f7: 82:b5:3c:82:a9:3d:52:1a:8f:8f:88:f7:8e:f2:2a:2c:3e:6d: da:d5:ad:71:76:f1:6c:40:f6:ab:73:92:41:b7:11:a4:94:d4: 24:58:92:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kKNEjyTnmitbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Mzk1YjhiYmUtOWJlNC00ZWFkLTlhM2MtNWMyNDZlY2VlZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6KkupmAkUeGQluigivd5UgwCnRlL8Cz9Fan kgTq9Max9nMbab+TTvgdKrXijNrQBGNHSHzOUx68qVFnEKnwnWcAtKqZTHbZUCwq EwpyrmDoi6bgzZ/VJxLDTyD/IrQWVa1pV5QD7tltmQyhk8QlGbGQpl11HWwqT/Sv QiV5pf0O4xrUfiMtx+at4zula1XKYNGwkKGSo/BY7Z1Z9pfOVKYAJs9IENjiH8o+ 0KvJIJMyjYHadgaUQl+86DUlxZ8fjNxA7yRu9PLUcX+ZeR07/y4mf57ADf/2w3Zp fvtcNI0MseN4KSlXlROg/N4zVS5zGT+ooH4dyrwmkZjjkBq4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXTiWHBUSoYkrfRTt4/KaTT+sbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODM1M2VjZDMtNGNlNC0z OGMwLWIyNTMtNTQ2ZjlmY2ZiNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbyd1OELLeEOodCd+HcMHYJ9FSX+CvtxNT6avU4Lry+d+luXDrI78pV 70SMxN6rE6+81v/9smtviN2q2evkcCWuexrouEr0Z5YQZBGLG/ZylqXDxpQHNR8A Fw65sUNi5NGGQQBvtX8Y9U+V20dftfejeB5fYbhXX3DURMvqqoqCiFy3VqRuJe2c os3eyTyOdJwuJV5kpTYY/3a1IaN9nVIfHYfwmA7mRY4/LEx2WHyBU4F53Y7kQagx zcNxR2ObEwNTZ2TM2KbggLyzaQNOy0JdWLvny3Nz94K1PIKpPVIaj4+I947yKiw+ bdrVrXF28WxA9qtzkkG3EaSU1CRYkoU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:33 2025 by rpki-client