$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043b9134-dece-3458-a4ce-c2581a19c198.roa File: 043b9134-dece-3458-a4ce-c2581a19c198.roa (raw, json) Hash identifier: 0gG3HXoueg6rmAQ9KxdnUtbgbcDjtbcg9jMefd5WP4I= Subject key identifier: B9:9F:3D:73:15:BB:8A:3D:2A:DE:6B:29:D3:74:F3:F7:97:97:51:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C479BDAD50D0735570000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043b9134-dece-3458-a4ce-c2581a19c198.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.225.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:47:9b:da:d5:0d:07:35:57:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=6b6ca3c3-d3b1-430d-809a-274ab5192b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:52:a1:b0:56:8e:a0:1f:42:97:26:b4:f4: 5d:85:cc:39:c4:64:d5:c1:a5:8a:3c:4b:e4:c4:b5: af:39:db:b6:a9:ff:cb:97:9f:21:da:46:6d:da:69: a8:15:e1:72:e3:a0:91:7b:d2:3f:ac:9d:6a:36:e1: b5:13:6f:e8:66:46:fc:2e:c5:a0:5e:dd:e7:98:65: b8:1c:22:fd:d4:1d:87:c7:41:18:93:e3:6b:23:7a: 9e:05:0a:7f:a0:95:4a:a4:d1:90:67:97:6f:62:d3: f7:f8:2f:88:1f:63:16:d4:14:5a:6a:2b:3e:1e:fd: d3:23:36:e2:b4:2f:78:aa:50:ba:72:97:9c:19:63: ee:15:18:7a:f8:57:a8:3b:64:2b:e5:2a:f1:28:25: 67:c9:a7:37:1c:28:e8:68:9a:07:4e:c8:cf:9b:fa: ac:1c:30:7a:47:ba:b9:9c:68:a6:26:ec:75:c7:13: 41:f8:6d:e7:5f:47:c6:0e:04:03:84:b4:ca:d7:03: dc:07:d2:54:48:2c:09:d4:01:6c:b4:80:80:85:f2: e0:42:c5:6d:a8:e5:7d:dd:d4:aa:48:95:b0:3f:5b: 4d:d4:db:1e:ef:65:2f:d1:9e:51:02:cd:75:e6:3c: 96:18:31:44:fd:5d:23:20:b7:e7:63:66:5f:d7:84: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:3D:73:15:BB:8A:3D:2A:DE:6B:29:D3:74:F3:F7:97:97:51:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043b9134-dece-3458-a4ce-c2581a19c198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3d:37:89:0b:fd:32:bc:48:66:d5:a4:d4:ac:ae:6e:11:58: 76:6f:96:d3:53:e1:37:56:c4:4e:dd:14:e4:cc:c3:72:d8:f7: 97:b9:ce:eb:86:58:36:22:f7:d0:0b:45:31:b2:e6:29:22:b3: 7b:3d:f0:08:6a:a9:5a:ab:e2:30:81:f7:06:35:1e:12:4c:b3: 4e:26:26:50:35:1a:f6:ff:4d:2a:4a:5f:3f:4e:b7:ca:d1:c7: cc:ba:0e:d1:9f:8e:02:48:19:ac:5a:ff:ff:b3:27:1d:90:c6: 21:20:c1:9c:af:8b:26:e5:a4:61:c5:58:fd:50:34:30:fa:d8: dd:98:a8:49:99:b2:24:e7:8d:cf:cd:9d:82:b1:b1:da:32:68: bd:de:b3:59:21:f3:a3:8e:e0:0d:bb:4d:62:c4:99:36:b1:b1: 16:d5:25:70:ac:5c:28:66:4c:5e:ab:ae:1e:e0:98:ab:c7:42: ea:2a:39:51:5b:6f:57:8c:e4:d7:58:bc:3d:5f:8f:9a:97:4d: 00:49:31:a6:0f:4a:e2:54:f2:66:df:e7:03:0f:85:ae:ce:ef: b2:2b:a1:d5:73:dd:b6:38:02:51:f7:88:2d:bb:a8:a1:7b:37: ca:78:9e:9f:67:66:87:86:9b:ce:a0:ad:85:ef:4d:38:cf:fa: 7a:a7:fe:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEeb2tUNBzVXAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NmI2Y2EzYzMtZDNiMS00MzBkLTgwOWEtMjc0YWI1MTkyYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA1SobBWjqAfQpcmtPRdhcw5xGTVwaWKPEvk xLWvOdu2qf/Ll58h2kZt2mmoFeFy46CRe9I/rJ1qNuG1E2/oZkb8LsWgXt3nmGW4 HCL91B2Hx0EYk+NrI3qeBQp/oJVKpNGQZ5dvYtP3+C+IH2MW1BRaais+Hv3TIzbi tC94qlC6cpecGWPuFRh6+FeoO2Qr5SrxKCVnyac3HCjoaJoHTsjPm/qsHDB6R7q5 nGimJux1xxNB+G3nX0fGDgQDhLTK1wPcB9JUSCwJ1AFstICAhfLgQsVtqOV93dSq SJWwP1tN1Nse72Uv0Z5RAs115jyWGDFE/V0jILfnY2Zf14QZ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmfPXMVu4o9Kt5rKdN08/eXl1HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDQzYjkxMzQtZGVjZS0z NDU4LWE0Y2UtYzI1ODFhMTljMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg9N4kL/TK8SGbVpNSsrm4RWHZvltNT4TdWxE7dFOTMw3LY95e5zuuG WDYi99ALRTGy5ikis3s98AhqqVqr4jCB9wY1HhJMs04mJlA1Gvb/TSpKXz9Ot8rR x8y6DtGfjgJIGaxa//+zJx2QxiEgwZyviyblpGHFWP1QNDD62N2YqEmZsiTnjc/N nYKxsdoyaL3es1kh86OO4A27TWLEmTaxsRbVJXCsXChmTF6rrh7gmKvHQuoqOVFb b1eM5NdYvD1fj5qXTQBJMaYPSuJU8mbf5wMPha7O77IrodVz3bY4AlH3iC27qKF7 N8p4np9nZoeGm86grYXvTTjP+nqn/jI= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:23 2025 by rpki-client