$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2bfe897-b5d7-3321-8c46-ced3f975265f.roa File: e2bfe897-b5d7-3321-8c46-ced3f975265f.roa (raw, json) Hash identifier: 2YC3EvLX1C2OqkY3Cw+N5UmWEgLwhPm0xYHQju8vKn0= Subject key identifier: 38:0D:95:B3:BE:30:37:DE:F6:96:62:6B:D7:06:6E:0B:A7:0C:35:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BA667A47AEBA9D4F9EB6FEBC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2bfe897-b5d7-3321-8c46-ced3f975265f.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.225.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a4:7a:eb:a9:d4:f9:eb:6f:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=f263fdf5-43b4-4b25-ad31-dc001a9d81ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:7a:9e:74:18:04:14:ca:c5:7e:c5:69:c1: aa:0d:c7:8e:84:7a:13:0b:ac:58:a8:9c:13:ce:5a: 28:da:be:4b:2a:35:e0:fa:8f:d1:a0:9a:2b:d0:e2: 42:99:38:ef:f8:ce:7a:7a:87:1f:5e:8d:30:33:13: c1:06:c0:c4:26:1d:c8:76:a3:21:8d:65:09:08:99: 1f:5b:ae:92:99:d1:78:dd:8f:16:f2:09:97:98:7d: c1:6b:7d:bd:14:15:36:6f:4c:65:89:bd:c7:b7:32: 5e:f7:a8:97:0e:70:10:f5:41:fc:59:69:56:c1:6d: 9f:45:5d:fb:31:be:58:21:31:83:e0:ae:bf:4e:93: 31:9e:5c:69:16:2b:e9:eb:21:54:c7:7e:08:ea:f1: 73:ed:1a:bb:1c:05:1c:1a:e5:86:68:c0:df:29:11: 02:79:7c:63:3b:ad:26:16:8b:1e:41:83:05:f0:ba: a6:5f:d8:b5:14:6d:c9:d3:65:93:ef:43:bd:9f:2a: 90:d6:f8:1f:19:3f:53:c7:75:ec:ae:3a:ad:43:6b: 22:53:82:9a:20:4f:f6:b8:db:6a:2f:0b:6f:8a:06: e8:77:56:f8:4a:e0:e4:2d:8d:4c:16:3f:d8:4d:b7: df:fb:ed:30:6a:07:0f:74:e7:f5:01:5d:fa:c1:13: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:95:B3:BE:30:37:DE:F6:96:62:6B:D7:06:6E:0B:A7:0C:35:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2bfe897-b5d7-3321-8c46-ced3f975265f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7a:13:a0:f6:ca:67:f4:b6:1e:06:26:29:23:0f:e2:9b:a7: 4f:2f:07:a1:c1:b8:0a:59:c2:3c:58:78:ee:fc:16:b1:a6:97: 00:cd:95:43:7b:f3:b8:3c:46:cf:0d:8f:f9:20:38:94:2d:5b: f8:ad:4a:1c:2e:32:c0:76:cb:7d:2c:67:69:fc:da:62:c8:2e: 9f:b8:f6:8b:c9:25:89:59:69:14:b2:08:87:37:6d:ce:38:05: 39:35:c5:37:59:c8:25:46:ee:14:90:24:24:6b:6c:f4:e2:e8: e5:0d:09:e2:60:88:c2:55:94:0d:49:36:10:24:b0:b5:06:2c: 34:63:79:c0:4e:a7:79:b6:75:31:a8:e1:04:14:54:68:8a:47: 41:9d:c2:3c:10:f1:cd:73:11:8b:1d:8c:97:7f:db:08:f0:e1: 64:21:5b:a8:24:28:c6:51:30:b2:e8:c0:5e:6b:6e:3d:92:20: fe:0b:d5:69:f8:a1:05:76:4e:22:6e:a7:ba:05:0d:54:84:91: f4:6a:7d:76:9a:a9:ed:69:dd:05:75:6b:ba:6f:74:65:55:de: 6c:bf:b6:22:2e:7d:14:cc:ca:57:a9:33:14:e7:e7:18:5f:ef: af:3d:cb:49:31:db:3e:2a:fa:1a:b1:64:d8:ff:95:4c:3f:65: da:b6:85:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6R666nU+etv68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjI2M2ZkZjUtNDNiNC00YjI1LWFkMzEtZGMwMDFhOWQ4MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyup6nnQYBBTKxX7FacGqDceOhHoTC6xYqJwT zloo2r5LKjXg+o/RoJor0OJCmTjv+M56eocfXo0wMxPBBsDEJh3IdqMhjWUJCJkf W66SmdF43Y8W8gmXmH3Ba329FBU2b0xlib3HtzJe96iXDnAQ9UH8WWlWwW2fRV37 Mb5YITGD4K6/TpMxnlxpFivp6yFUx34I6vFz7Rq7HAUcGuWGaMDfKRECeXxjO60m FoseQYMF8LqmX9i1FG3J02WT70O9nyqQ1vgfGT9Tx3XsrjqtQ2siU4KaIE/2uNtq Lwtvigbod1b4SuDkLY1MFj/YTbff++0wagcPdOf1AV36wRNoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgNlbO+MDfe9pZia9cGbgunDDWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTJiZmU4OTctYjVkNy0z MzIxLThjNDYtY2VkM2Y5NzUyNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC16E6D2ymf0th4GJikjD+Kbp08vB6HBuApZwjxYeO78FrGmlwDNlUN7 87g8Rs8Nj/kgOJQtW/itShwuMsB2y30sZ2n82mLILp+49ovJJYlZaRSyCIc3bc44 BTk1xTdZyCVG7hSQJCRrbPTi6OUNCeJgiMJVlA1JNhAksLUGLDRjecBOp3m2dTGo 4QQUVGiKR0GdwjwQ8c1zEYsdjJd/2wjw4WQhW6gkKMZRMLLowF5rbj2SIP4L1Wn4 oQV2TiJup7oFDVSEkfRqfXaaqe1p3QV1a7pvdGVV3my/tiIufRTMylepMxTn5xhf 7689y0kx2z4q+hqxZNj/lUw/Zdq2hT0= -----END CERTIFICATE-----Generated at Tue Nov 4 15:56:26 2025 by rpki-client