$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0849ac2c-0e82-3335-9b4e-d1fd05538884.roa File: 0849ac2c-0e82-3335-9b4e-d1fd05538884.roa (raw, json) Hash identifier: S1pVKHgh1TF7SZ5ygtzJuPyuV8XZCOWbM8Le6PnET0s= Subject key identifier: C7:86:56:14:A4:BB:D1:8D:1D:1C:83:10:04:96:C5:04:D0:75:EE:5E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FDFB7B29387D02092C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0849ac2c-0e82-3335-9b4e-d1fd05538884.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fd:fb:7b:29:38:7d:02:09:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b48db701-2319-4e7e-8be3-5d194b6a3cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:fa:8c:57:2c:d0:e9:bb:ae:00:be:ca:9e: 16:ce:88:d4:86:65:0f:39:13:bc:de:ba:0f:12:ad: b9:98:c0:ac:a0:df:f0:af:f2:6c:c7:3b:36:cc:14: 9f:90:3e:a7:48:09:3e:6d:7d:85:1b:dc:a0:a4:c8: 7e:49:af:e8:b3:85:ae:8b:0f:c0:6f:ae:ac:3e:f9: 6e:93:32:a2:5a:40:d4:36:86:89:e8:47:f6:67:09: 2c:6e:11:b5:60:77:e3:a3:79:d2:c7:55:39:dd:62: 16:99:3f:83:14:8c:2c:fc:e4:b7:a3:f0:48:72:60: 10:4a:7b:c4:99:0f:70:9b:0e:4b:60:6d:c1:55:54: d7:55:62:4c:c8:40:ea:45:e7:04:6f:ab:0e:98:15: 9e:a9:d2:5f:2e:6f:74:5b:4f:61:87:b1:fb:a6:9a: c7:08:8b:99:7b:21:c6:3f:2d:bd:56:58:d5:c4:b2: 60:f3:9f:74:8d:82:e1:60:78:20:40:a3:80:61:d1: 5d:bf:7d:90:d7:3c:df:38:14:f6:01:ce:8f:24:c1: 4b:8f:a8:af:a1:e7:cf:98:44:1a:21:79:0f:8b:02: 89:37:ba:73:b4:d7:ef:8e:79:1c:79:8d:3f:2c:62: 58:4c:92:3c:b6:b3:2b:69:ed:30:21:cf:9f:2f:e8: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:86:56:14:A4:BB:D1:8D:1D:1C:83:10:04:96:C5:04:D0:75:EE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0849ac2c-0e82-3335-9b4e-d1fd05538884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4c:df:d0:72:70:e5:1a:63:df:d8:4c:6a:13:9d:a4:35:95: 8e:d4:f6:86:78:ca:d6:47:5a:d8:f1:ac:74:c6:9b:0a:1c:0d: 2a:e3:a7:4d:aa:98:fe:e4:0e:58:9f:05:a8:d3:34:ff:ec:c9: f6:f8:76:3d:6b:1b:c4:6d:cc:91:66:0a:e2:79:93:f2:4f:86: db:9c:0b:53:b4:66:68:17:61:41:39:0a:87:34:73:53:2e:41: b3:33:8b:8c:a5:c2:2f:bd:98:b7:63:a3:ca:62:cc:1f:2b:7a: 87:a9:a2:e1:c2:6f:30:71:46:30:c1:04:92:b5:34:47:19:fb: 42:56:ec:1a:5c:1a:9e:2b:79:0a:87:ef:46:42:f2:ad:6f:82: 22:ba:37:0e:8b:47:44:03:7c:47:f4:77:e0:bf:ec:e1:40:9a: 33:28:12:ce:f8:40:83:cc:d5:7f:0c:c9:00:1f:ff:d2:58:92: 04:03:fe:f9:0a:10:62:a9:6b:8b:09:da:81:04:db:52:62:66: c2:f8:55:50:e5:8c:2a:94:8f:ce:2a:45:33:2d:3e:a1:a7:40: 3f:94:8f:51:dd:cb:17:ae:5d:47:34:17:d7:81:33:a6:a3:73: 96:7c:dc:c0:0a:3c:44:3c:77:6a:1a:78:9c:8f:99:1c:65:44: 91:2f:19:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZv37eyk4fQIJLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjQ4ZGI3MDEtMjMxOS00ZTdlLThiZTMtNWQxOTRiNmEzY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCr6jFcs0Om7rgC+yp4WzojUhmUPORO83roP Eq25mMCsoN/wr/Jsxzs2zBSfkD6nSAk+bX2FG9ygpMh+Sa/os4Wuiw/Ab66sPvlu kzKiWkDUNoaJ6Ef2ZwksbhG1YHfjo3nSx1U53WIWmT+DFIws/OS3o/BIcmAQSnvE mQ9wmw5LYG3BVVTXVWJMyEDqRecEb6sOmBWeqdJfLm90W09hh7H7pprHCIuZeyHG Py29VljVxLJg8590jYLhYHggQKOAYdFdv32Q1zzfOBT2Ac6PJMFLj6ivoefPmEQa IXkPiwKJN7pztNfvjnkceY0/LGJYTJI8trMrae0wIc+fL+iDIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeGVhSku9GNHRyDEASWxQTQde5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDg0OWFjMmMtMGU4Mi0z MzM1LTliNGUtZDFmZDA1NTM4ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROB2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1M39BycOUaY9/YTGoTnaQ1lY7U9oZ4ytZHWtjxrHTGmwocDSrjp02q mP7kDlifBajTNP/syfb4dj1rG8RtzJFmCuJ5k/JPhtucC1O0ZmgXYUE5Coc0c1Mu QbMzi4ylwi+9mLdjo8pizB8reoepouHCbzBxRjDBBJK1NEcZ+0JW7BpcGp4reQqH 70ZC8q1vgiK6Nw6LR0QDfEf0d+C/7OFAmjMoEs74QIPM1X8MyQAf/9JYkgQD/vkK EGKpa4sJ2oEE21JiZsL4VVDljCqUj84qRTMtPqGnQD+Uj1HdyxeuXUc0F9eBM6aj c5Z83MAKPEQ8d2oaeJyPmRxlRJEvGX4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:51 2025 by rpki-client