$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbe33ab6-946b-3673-be6b-8aa5225b5080.roa File: bbe33ab6-946b-3673-be6b-8aa5225b5080.roa (raw, json) Hash identifier: a61CqH0XiF9RMndkmy5D2rxr9FYtrYS9pCbEfz99HQ0= Subject key identifier: 80:DD:8F:3E:5F:81:77:09:24:3F:00:AD:E4:19:A0:53:E3:95:58:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F1FF49B962C02F50A45920 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbe33ab6-946b-3673-be6b-8aa5225b5080.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f1:ff:49:b9:62:c0:2f:50:a4:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4c9e77f8-7610-4ce3-ab5a-0e1076a5b2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:e6:6d:6b:b6:d0:e4:78:bb:f3:cc:d5:02: d2:e8:69:18:e1:95:69:e3:5b:ff:b0:7f:bb:44:cd: 86:99:9a:de:93:47:56:4f:c8:ee:77:ad:32:67:f8: 72:57:46:0e:d9:02:97:e7:14:66:a4:13:47:39:38: ad:7c:fb:5b:79:97:fb:4c:83:61:da:94:84:bb:b7: 92:f6:74:1a:19:b2:0d:19:1c:e8:86:3b:85:f8:96: 4e:3c:6e:60:1f:29:9a:68:83:25:15:f0:7f:0b:ec: 9f:86:60:8c:1e:6e:5b:45:63:33:d0:c5:ff:b3:8b: d5:2d:2c:49:e2:39:ba:4c:d0:36:70:60:f8:c5:4e: a9:d6:06:96:a7:78:0e:ff:a6:0b:59:88:cb:b4:67: 08:db:d1:49:52:c1:6e:fa:ea:42:43:3f:69:7e:d7: 42:dc:32:09:49:a0:c3:3a:6b:80:63:30:c8:d4:4f: 27:e1:47:e6:c9:42:03:05:2e:b3:fe:d7:b9:c4:80: 19:9e:8d:4b:99:c4:9b:c0:06:cb:32:02:c5:42:45: b4:c5:6a:ca:1d:64:ca:63:09:3e:26:10:c1:47:49: ab:df:4b:35:8b:13:d2:be:c0:7e:e1:b8:0a:77:cb: 67:d7:fd:b2:98:0e:04:5a:ec:a4:0d:c3:94:64:8b: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DD:8F:3E:5F:81:77:09:24:3F:00:AD:E4:19:A0:53:E3:95:58:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbe33ab6-946b-3673-be6b-8aa5225b5080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e8:18:e7:7d:64:20:0f:d8:39:d3:b4:e6:1d:b7:b7:1f:30: a9:0b:d7:93:dd:e8:19:3c:1a:2b:92:ba:ea:50:82:4a:07:c4: d0:81:c0:82:95:4b:6f:64:fb:8d:b6:9d:d5:ee:88:d7:9f:91: 3c:1b:70:e9:da:33:80:07:6e:b4:9e:a3:f4:e0:a5:a5:21:77: 9f:0f:f0:50:a2:50:8d:c4:3e:18:5e:e3:f8:0b:7b:39:68:99: 0b:54:df:bb:b2:81:4e:83:f1:35:c0:29:70:30:39:d5:fa:4d: c5:66:21:39:42:41:7e:3f:fc:42:9b:bb:ff:87:9b:ec:51:0f: 1a:bc:53:9e:4d:6f:5f:58:21:d5:64:b3:95:28:a3:99:aa:e7: c2:04:43:de:c5:66:4a:90:ad:65:79:2c:3b:c9:3c:0d:0c:68: 5b:b0:fb:a1:e6:ac:f8:ac:23:76:6a:1b:66:b1:10:be:67:eb: 2e:4d:71:4d:3c:33:53:29:a5:af:28:d4:bd:e0:86:c1:22:4d: af:e4:a5:6d:70:c8:9d:93:e8:bf:80:0e:8a:f7:83:0e:42:25: fb:2a:44:c2:1e:29:d5:bf:40:b8:83:6c:44:2c:7c:3d:66:58: 9e:e6:8d:9b:17:f2:9b:84:93:0f:d5:ff:4a:ce:5e:22:4b:ad: f9:5e:a9:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28f9JuWLAL1CkWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGM5ZTc3ZjgtNzYxMC00Y2UzLWFiNWEtMGUxMDc2YTViMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE7mbWu20OR4u/PM1QLS6GkY4ZVp41v/sH+7 RM2GmZrek0dWT8jud60yZ/hyV0YO2QKX5xRmpBNHOTitfPtbeZf7TINh2pSEu7eS 9nQaGbINGRzohjuF+JZOPG5gHymaaIMlFfB/C+yfhmCMHm5bRWMz0MX/s4vVLSxJ 4jm6TNA2cGD4xU6p1gaWp3gO/6YLWYjLtGcI29FJUsFu+upCQz9pftdC3DIJSaDD OmuAYzDI1E8n4UfmyUIDBS6z/te5xIAZno1LmcSbwAbLMgLFQkW0xWrKHWTKYwk+ JhDBR0mr30s1ixPSvsB+4bgKd8tn1/2ymA4EWuykDcOUZIujYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDdjz5fgXcJJD8AreQZoFPjlVgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmJlMzNhYjYtOTQ2Yi0z NjczLWJlNmItOGFhNTIyNWI1MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDoGOd9ZCAP2DnTtOYdt7cfMKkL15Pd6Bk8GiuSuupQgkoHxNCBwIKV S29k+422ndXuiNefkTwbcOnaM4AHbrSeo/TgpaUhd58P8FCiUI3EPhhe4/gLezlo mQtU37uygU6D8TXAKXAwOdX6TcVmITlCQX4//EKbu/+Hm+xRDxq8U55Nb19YIdVk s5Uoo5mq58IEQ97FZkqQrWV5LDvJPA0MaFuw+6HmrPisI3ZqG2axEL5n6y5NcU08 M1Mppa8o1L3ghsEiTa/kpW1wyJ2T6L+ADor3gw5CJfsqRMIeKdW/QLiDbEQsfD1m WJ7mjZsX8puEkw/V/0rOXiJLrfleqTc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:26 2025 by rpki-client