$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/000deda8-1316-379d-bd48-086a7b6fcab1.roa File: 000deda8-1316-379d-bd48-086a7b6fcab1.roa (raw, json) Hash identifier: MzVFTeg9W/Dlqm2gELXU6aNdzfN1JI8dc0wsTLoX0jY= Subject key identifier: EC:88:25:4D:ED:EA:AA:EF:B1:86:DE:C5:7A:F3:EE:37:9B:17:C1:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2825C8B0BDC415FB9380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/000deda8-1316-379d-bd48-086a7b6fcab1.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:28:25:c8:b0:bd:c4:15:fb:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=48ebcc67-6946-4805-8c6d-138d4a0d3bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:55:a1:ff:10:65:2b:12:54:55:16:7d:53: ab:f2:4c:4c:7c:7b:81:27:ea:26:39:dc:96:cc:26: a7:ac:3f:46:01:61:0f:d6:8b:44:71:76:40:51:b4: c4:03:85:57:c6:0e:c5:1f:f8:21:da:d9:ca:9b:8a: 25:4f:e0:b9:56:9f:1c:d1:eb:bd:90:5a:f6:99:e0: 9f:d9:47:a7:9a:83:07:06:bb:7d:4d:0d:d4:86:5e: 8a:ca:6b:b3:1b:3b:9e:88:ec:07:fb:ed:52:54:85: 3c:89:4e:98:10:0c:6f:80:ad:6b:30:bf:32:bc:b4: fa:04:44:85:86:b2:e9:88:64:d2:7c:f4:18:72:b6: 0a:24:f2:49:83:a3:aa:14:76:02:17:a6:e3:d5:9b: 91:68:de:82:3b:39:1a:89:55:9d:18:cb:d3:8d:f0: 2d:3d:e6:e8:eb:99:e9:04:66:ea:71:58:54:00:f5: 6b:6c:66:38:c9:a5:a1:57:d7:a4:cc:e3:82:ea:70: 6f:8c:e2:ee:28:22:c0:1d:56:fa:2f:dc:0a:a0:31: 11:86:52:f7:5e:4b:29:ee:f0:42:48:47:ce:ff:30: 13:bf:9b:24:4b:da:ac:8e:c3:61:3d:cb:5c:68:04: a2:ff:b1:48:12:9d:04:11:e0:75:58:bc:aa:a6:2d: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:88:25:4D:ED:EA:AA:EF:B1:86:DE:C5:7A:F3:EE:37:9B:17:C1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/000deda8-1316-379d-bd48-086a7b6fcab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f1:a1:aa:94:d6:cf:4c:e2:56:61:de:3f:5a:bd:bc:61:d5: 2c:4a:c7:04:6f:b2:91:69:b7:ac:45:d8:a5:56:68:03:2b:a0: 71:4f:de:b9:10:13:7e:b3:bb:e4:ee:6d:95:38:95:d2:15:ea: 30:22:af:fe:6e:cd:a7:93:ed:1d:2f:45:3c:0d:83:b6:7a:9d: 99:ef:9e:aa:70:2f:31:45:5a:72:6e:48:c4:75:09:b3:9e:30: 4d:92:a7:f9:8b:27:cb:27:11:d5:85:45:39:e0:6e:b3:e4:8d: 22:9b:60:fb:60:3f:58:28:f0:53:4a:73:ad:1d:f3:74:52:05: c1:19:49:19:93:64:b9:70:3d:82:83:16:85:b8:ed:9e:b3:72: 53:ed:65:38:e4:08:de:e1:16:f8:a0:67:72:03:bd:3d:83:8c: 18:8b:bf:75:fc:cf:6c:e2:03:3c:ac:f7:92:f8:65:25:44:d3: 61:d2:eb:76:c4:a9:0a:88:67:2d:d9:dc:58:6c:3a:bb:eb:cc: 94:d0:ec:0d:21:c6:86:a1:a3:e8:0c:17:11:51:34:ad:6e:62: 9f:6f:f5:69:6f:88:d4:63:1f:9e:b2:42:f6:01:3e:c0:b2:c7: 00:75:89:50:f2:6f:68:b1:6b:78:04:48:9e:16:71:11:7b:d8: 9e:46:47:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCglyLC9xBX7k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NDhlYmNjNjctNjk0Ni00ODA1LThjNmQtMTM4ZDRhMGQzYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWNVof8QZSsSVFUWfVOr8kxMfHuBJ+omOdyW zCanrD9GAWEP1otEcXZAUbTEA4VXxg7FH/gh2tnKm4olT+C5Vp8c0eu9kFr2meCf 2UenmoMHBrt9TQ3Uhl6KymuzGzueiOwH++1SVIU8iU6YEAxvgK1rML8yvLT6BESF hrLpiGTSfPQYcrYKJPJJg6OqFHYCF6bj1ZuRaN6COzkaiVWdGMvTjfAtPebo65np BGbqcVhUAPVrbGY4yaWhV9ekzOOC6nBvjOLuKCLAHVb6L9wKoDERhlL3Xksp7vBC SEfO/zATv5skS9qsjsNhPctcaASi/7FIEp0EEeB1WLyqpi2qtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyIJU3t6qrvsYbexXrz7jebF8FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDAwZGVkYTgtMTMxNi0z NzlkLWJkNDgtMDg2YTdiNmZjYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvxoaqU1s9M4lZh3j9avbxh1SxKxwRvspFpt6xF2KVWaAMroHFP3rkQ E36zu+TubZU4ldIV6jAir/5uzaeT7R0vRTwNg7Z6nZnvnqpwLzFFWnJuSMR1CbOe ME2Sp/mLJ8snEdWFRTngbrPkjSKbYPtgP1go8FNKc60d83RSBcEZSRmTZLlwPYKD FoW47Z6zclPtZTjkCN7hFvigZ3IDvT2DjBiLv3X8z2ziAzys95L4ZSVE02HS63bE qQqIZy3Z3FhsOrvrzJTQ7A0hxoaho+gMFxFRNK1uYp9v9WlviNRjH56yQvYBPsCy xwB1iVDyb2ixa3gESJ4WcRF72J5GR88= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:58 2025 by rpki-client