$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa File: 020c3c8f-8831-3fe1-88b6-126bf2096e89.roa (raw, json) Hash identifier: Lizt0PjUJNCewaQYQo0+dFmI5t4eIwGQO1xNJgUHvS8= Subject key identifier: C4:E1:3B:DF:0D:0C:DA:7A:65:24:3B:77:10:B8:14:BE:5D:1F:85:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C263BAF1C5B3798F97540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:26:3b:af:1c:5b:37:98:f9:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=703d6b5a-c5a5-459b-ab04-66b01c0f1232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:b2:af:9a:79:53:8c:86:1b:f3:5c:69:ed: 3e:87:18:2c:fc:8c:2a:d5:a1:f3:dc:d5:53:ec:6c: 57:5b:99:d6:10:06:93:f1:f0:16:56:f5:3e:2b:d1: f5:82:0e:cb:cb:bb:35:c0:f5:1f:8d:ac:6c:08:7a: 1b:a8:2c:ad:8b:d9:81:fc:42:d6:e3:d5:95:0d:6a: 99:9e:f8:d0:72:22:41:24:a0:bf:67:14:76:6d:8f: 2a:92:3e:7d:73:6b:fc:df:fe:22:bd:68:bd:97:93: 32:a5:cb:97:61:4f:a2:56:83:d8:2e:25:74:5e:c7: f3:4d:78:1e:f5:57:59:25:98:45:07:99:db:50:97: 51:39:2c:92:74:f9:76:94:3e:ef:9b:3c:da:19:3d: 0d:3a:ac:82:ed:d1:ce:a1:0b:73:8f:de:9e:50:40: a8:bc:8e:24:73:3a:e6:91:86:1e:9e:a0:9e:77:2d: 92:7e:8c:e2:c6:d0:34:7d:49:77:ed:02:46:f6:1e: b6:23:c0:c6:b7:cb:81:c9:3a:da:5f:ab:ac:03:e8: 31:18:13:30:61:3c:cc:a9:b8:5f:e5:b7:85:69:b4: ab:70:fe:36:20:44:4c:09:d6:24:41:2a:2e:b3:c7: 4f:b5:5b:b1:3f:65:8a:81:f5:3c:5f:75:0a:1e:19: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:3B:DF:0D:0C:DA:7A:65:24:3B:77:10:B8:14:BE:5D:1F:85:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:da:fe:47:d4:71:23:68:49:79:97:19:d2:1b:3b:db:6b:b3: 4f:fd:ea:93:2e:b7:2b:9b:98:1c:08:bf:d8:8b:75:3e:50:61: 59:8f:20:cb:20:7d:cb:26:22:9d:58:6f:c4:64:27:21:f2:76: 05:7b:f8:d2:dd:94:57:e9:86:5c:6d:b5:23:18:b7:42:2c:9f: be:7c:dc:56:75:5d:90:b8:08:5b:6e:48:28:37:c9:0e:e2:3c: b5:d1:2f:48:15:94:d0:ee:4f:86:11:bb:07:fa:62:0a:a8:7f: 5f:f5:74:df:f8:9b:8d:31:c8:42:39:8d:f2:8d:84:be:7c:1a: 59:80:43:ca:ff:bf:0c:35:4c:32:9b:5a:76:68:83:e4:70:ad: 9d:a3:ce:7e:96:39:6c:b7:89:72:5d:32:c4:96:ea:9a:98:6c: bf:76:0b:45:50:15:57:47:d7:f9:89:e3:a7:ab:19:9c:24:e5: 54:9f:c3:08:c5:72:c2:98:fb:e2:32:0e:d5:9c:d0:f0:5b:06: f2:0e:4c:9a:91:b2:54:3c:90:76:15:83:6b:60:13:2d:b6:89: 63:99:19:2b:ef:2f:53:36:61:3a:1d:31:1f:f1:bb:89:5a:74: bc:3a:6e:a7:4f:b7:b6:bc:10:c8:8c:20:a5:f1:bb:ef:de:bb: 81:ec:58:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCY7rxxbN5j5dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzAzZDZiNWEtYzVhNS00NTliLWFiMDQtNjZiMDFjMGYxMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Cyr5p5U4yGG/Ncae0+hxgs/Iwq1aHz3NVT 7GxXW5nWEAaT8fAWVvU+K9H1gg7Ly7s1wPUfjaxsCHobqCyti9mB/ELW49WVDWqZ nvjQciJBJKC/ZxR2bY8qkj59c2v83/4ivWi9l5MypcuXYU+iVoPYLiV0XsfzTXge 9VdZJZhFB5nbUJdROSySdPl2lD7vmzzaGT0NOqyC7dHOoQtzj96eUECovI4kczrm kYYenqCedy2SfozixtA0fUl37QJG9h62I8DGt8uByTraX6usA+gxGBMwYTzMqbhf 5beFabSrcP42IERMCdYkQSous8dPtVuxP2WKgfU8X3UKHhkHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMThO98NDNp6ZSQ7dxC4FL5dH4V2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDIwYzNjOGYtODgzMS0z ZmUxLTg4YjYtMTI2YmYyMDk2ZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHa/kfUcSNoSXmXGdIbO9trs0/96pMutyubmBwIv9iLdT5QYVmPIMsg fcsmIp1Yb8RkJyHydgV7+NLdlFfphlxttSMYt0Isn7583FZ1XZC4CFtuSCg3yQ7i PLXRL0gVlNDuT4YRuwf6Ygqof1/1dN/4m40xyEI5jfKNhL58GlmAQ8r/vww1TDKb WnZog+RwrZ2jzn6WOWy3iXJdMsSW6pqYbL92C0VQFVdH1/mJ46erGZwk5VSfwwjF csKY++IyDtWc0PBbBvIOTJqRslQ8kHYVg2tgEy22iWOZGSvvL1M2YTodMR/xu4la dLw6bqdPt7a8EMiMIKXxu+/eu4HsWJA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:45 2025 by rpki-client