$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa File: 05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa (raw, json) Hash identifier: ryjjr+zdA2Sju/naWgyJ4HM/HNr+CFsxkZSXROLr/PQ= Subject key identifier: 0F:44:01:E6:AC:2A:3C:F0:24:F8:FA:13:59:2E:1A:0D:3D:37:5D:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206700E10A7C4CA49488C520 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:00:e1:0a:7c:4c:a4:94:88:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=dfe23acb-4ac1-445e-b563-ef23d8648e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:33:02:5f:e2:8f:00:35:e0:53:83:cf:14: df:1f:4c:21:1b:ec:32:c9:1c:57:84:e6:5c:cc:12: 2d:43:49:e3:97:6d:94:19:fd:91:74:80:2b:c6:d6: 68:42:a8:ed:3b:7f:98:63:1e:2a:24:8d:fc:56:41: 6e:24:43:f4:f6:b9:51:52:2b:79:04:25:07:dc:3a: 32:76:1d:c5:b9:15:e2:09:62:f1:f0:0d:f0:45:2d: 30:d3:d1:1b:e8:e7:ea:92:8d:81:f1:ba:7a:bc:95: ba:2e:c7:94:9f:b1:4c:dc:e1:6f:b9:45:d9:57:26: c0:98:df:91:a5:cf:b7:25:5c:9a:9c:23:6b:25:3c: 61:56:10:19:33:d9:1d:ed:b9:55:93:ea:92:10:e1: 7c:a4:14:56:79:f0:48:6b:02:d4:af:2e:b9:c1:f0: 39:e6:6f:8a:59:b4:7f:f3:53:98:2d:e6:f7:f3:6c: 4f:09:ca:b1:91:7c:bd:a7:53:e5:28:7f:5c:84:e9: 47:47:cb:57:26:8f:7d:3f:db:ce:c0:2f:67:6d:f2: 29:09:8d:8a:a3:68:cd:90:44:76:68:54:57:91:89: ed:8c:61:3e:d1:96:1d:92:8d:37:17:e4:5f:4e:5f: 7b:a7:0f:98:be:2d:ff:bf:45:93:9d:86:5b:ad:9d: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:44:01:E6:AC:2A:3C:F0:24:F8:FA:13:59:2E:1A:0D:3D:37:5D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:95:4a:0e:42:c8:cc:54:5d:75:6f:c7:80:5b:1d:0b:f2:67: 6f:8a:b8:b0:6c:0f:e3:3e:5a:41:98:73:93:9d:32:1d:16:28: 85:48:f2:4c:d1:be:5d:bd:a9:03:a2:71:d2:ff:90:ce:a0:3f: 9c:eb:3b:d4:2e:ed:04:55:4b:54:ed:30:02:9f:b0:8c:9f:c2: 7b:9f:e7:2d:56:e9:88:8e:07:31:dd:10:ad:b1:3b:0d:fc:ed: 85:12:e3:57:a9:20:10:8a:58:a4:fe:57:c1:55:8b:e9:1f:b1: d6:0d:56:ff:c2:ef:26:0b:97:d9:fd:02:71:5a:e9:fc:5a:12: 68:06:5d:b6:c4:8e:d6:b7:6b:76:5a:41:49:66:72:47:94:08: b8:96:06:a2:9e:72:9c:13:4d:7a:de:89:34:d0:a9:cd:40:0a: d5:b6:98:d8:26:b2:dd:16:d8:db:82:32:09:0f:4c:c9:27:89: 33:7b:5a:d0:be:f6:db:27:b9:5f:29:7b:20:f2:2b:12:d1:44: 65:c2:9e:f0:5e:3e:ce:8a:c2:7d:e2:83:85:37:8b:61:5d:fd: 62:78:04:84:64:7f:7a:cf:78:eb:92:68:e9:98:f3:d3:f7:51: 3c:2f:50:14:d0:65:1f:e6:6a:6b:d3:04:ee:c8:04:d0:65:a3: d4:0c:d3:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwDhCnxMpJSIxSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGZlMjNhY2ItNGFjMS00NDVlLWI1NjMtZWYyM2Q4NjQ4ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ozAl/ijwA14FODzxTfH0whG+wyyRxXhOZc zBItQ0njl22UGf2RdIArxtZoQqjtO3+YYx4qJI38VkFuJEP09rlRUit5BCUH3Doy dh3FuRXiCWLx8A3wRS0w09Eb6Ofqko2B8bp6vJW6LseUn7FM3OFvuUXZVybAmN+R pc+3JVyanCNrJTxhVhAZM9kd7blVk+qSEOF8pBRWefBIawLUry65wfA55m+KWbR/ 81OYLeb382xPCcqxkXy9p1PlKH9chOlHR8tXJo99P9vOwC9nbfIpCY2Ko2jNkER2 aFRXkYntjGE+0ZYdko03F+RfTl97pw+Yvi3/v0WTnYZbrZ2QRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9EAeasKjzwJPj6E1kuGg09N13iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDViMDllOGQtNWE5OC0z MGQ0LWI5ZWItMDAxM2Q3OTkxM2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROD9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiVSg5CyMxUXXVvx4BbHQvyZ2+KuLBsD+M+WkGYc5OdMh0WKIVI8kzR vl29qQOicdL/kM6gP5zrO9Qu7QRVS1TtMAKfsIyfwnuf5y1W6YiOBzHdEK2xOw38 7YUS41epIBCKWKT+V8FVi+kfsdYNVv/C7yYLl9n9AnFa6fxaEmgGXbbEjta3a3Za QUlmckeUCLiWBqKecpwTTXreiTTQqc1ACtW2mNgmst0W2NuCMgkPTMkniTN7WtC+ 9tsnuV8peyDyKxLRRGXCnvBePs6Kwn3ig4U3i2Fd/WJ4BIRkf3rPeOuSaOmY89P3 UTwvUBTQZR/mamvTBO7IBNBlo9QM00U= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:17 2025 by rpki-client