$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa File: 0957c138-5bc7-3c17-84d3-447836d2928a.roa (raw, json) Hash identifier: 9YaOxzSbDGCAS0hzeq3oD8oBX52tWuoe3zWoV0mD0Ds= Subject key identifier: C3:55:53:39:DE:B9:E6:7C:ED:DA:5C:90:D0:D9:2B:74:48:2A:67:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066ECB58FB476617A4A6100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ec:b5:8f:b4:76:61:7a:4a:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=20b16ea5-e07d-478e-8237-e24ea8ee456d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:2b:4c:d6:50:ad:f7:38:96:82:ad:65:08: e2:db:60:5e:9e:48:82:df:4b:e0:f2:25:b6:9e:41: 44:7c:f9:07:8d:c3:b0:fc:b3:eb:11:ec:c5:62:ef: 04:fc:91:59:4d:a1:61:f3:e4:2f:7a:3c:c1:5a:44: 7b:c0:7b:bd:5e:b8:1f:ec:98:ad:db:db:c0:a4:65: 04:4f:41:ed:73:99:72:31:49:bf:1f:3a:46:b6:5e: f7:37:01:b2:16:1f:a4:18:b1:00:df:6c:cb:a4:9f: 59:14:32:f9:a1:d7:11:28:9c:6c:b4:04:4e:a8:15: ae:ab:00:5b:3f:f2:0c:ea:98:ee:3c:cf:75:c8:11: 5f:fd:77:c5:b7:37:d7:34:e8:ea:6f:8e:1f:97:77: 08:74:86:fd:24:62:61:ad:c0:bd:a0:2b:cf:78:9b: 43:a9:05:e7:e8:3b:02:32:92:c8:67:a1:80:da:2b: 8e:90:19:15:62:c2:99:99:11:b4:77:15:6b:2c:b5: 47:b3:8e:30:20:b3:01:62:9d:7e:3f:cc:9e:88:87: 7f:b8:42:9a:70:1a:52:d9:82:b1:7a:b5:60:01:3c: 2a:96:29:3e:55:df:e6:88:e2:f3:6f:6b:1c:6c:0f: 96:b3:fa:27:42:6e:8a:8e:fe:f6:7b:21:0f:80:cf: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:55:53:39:DE:B9:E6:7C:ED:DA:5C:90:D0:D9:2B:74:48:2A:67:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:65:a3:c6:5b:57:9f:00:a0:a5:fb:e1:23:02:95:03:a3:74: 41:99:5c:38:2d:19:ba:01:38:a0:30:e9:80:8c:fe:f7:7d:88: 89:ea:b9:c6:21:d6:96:94:20:48:d7:ff:e3:d8:cc:52:b8:f5: 97:50:12:c0:fd:4d:24:a7:72:a0:b9:82:29:cd:ef:62:74:9f: 6e:7c:d3:05:33:1d:db:a9:fb:f2:24:74:63:48:06:d1:ef:ad: ea:57:5c:76:d8:67:27:2a:cf:2b:f1:f8:bf:90:19:72:3e:b7: 32:a5:3c:52:ea:3b:58:81:57:2f:ff:76:52:7d:88:65:01:87: 10:ea:7a:fa:06:bb:06:31:d6:31:ec:ea:12:f6:31:85:94:be: bc:bb:f9:57:da:92:5d:ee:f6:d0:2a:b0:d9:2f:07:1d:ee:bd: 20:f9:3d:c5:9d:cc:0f:14:21:8f:3e:bc:c4:6b:2d:c8:33:10: ed:a4:cd:fe:84:58:cd:be:53:ea:4b:ff:ed:e9:c3:74:f8:d1: ec:f0:6a:23:ec:fb:ae:5e:f6:b1:d0:46:24:27:62:3a:42:56: d7:f5:b5:a8:43:5a:ee:13:e4:49:f9:b1:07:d7:b8:df:e1:7c: b9:66:71:e3:23:41:ae:74:15:1b:1b:aa:8e:e3:26:f4:15:30: 36:91:db:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuy1j7R2YXpKYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjBiMTZlYTUtZTA3ZC00NzhlLTgyMzctZTI0ZWE4ZWU0NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAUrTNZQrfc4loKtZQji22BenkiC30vg8iW2 nkFEfPkHjcOw/LPrEezFYu8E/JFZTaFh8+QvejzBWkR7wHu9Xrgf7Jit29vApGUE T0Htc5lyMUm/HzpGtl73NwGyFh+kGLEA32zLpJ9ZFDL5odcRKJxstAROqBWuqwBb P/IM6pjuPM91yBFf/XfFtzfXNOjqb44fl3cIdIb9JGJhrcC9oCvPeJtDqQXn6DsC MpLIZ6GA2iuOkBkVYsKZmRG0dxVrLLVHs44wILMBYp1+P8yeiId/uEKacBpS2YKx erVgATwqlik+Vd/miOLzb2scbA+Ws/onQm6Kjv72eyEPgM8nxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNVUzneueZ87dpckNDZK3RIKmddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk1N2MxMzgtNWJjNy0z YzE3LTg0ZDMtNDQ3ODM2ZDI5MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExlo8ZbV58AoKX74SMClQOjdEGZXDgtGboBOKAw6YCM/vd9iInqucYh 1paUIEjX/+PYzFK49ZdQEsD9TSSncqC5ginN72J0n2580wUzHdup+/IkdGNIBtHv repXXHbYZycqzyvx+L+QGXI+tzKlPFLqO1iBVy//dlJ9iGUBhxDqevoGuwYx1jHs 6hL2MYWUvry7+Vfakl3u9tAqsNkvBx3uvSD5PcWdzA8UIY8+vMRrLcgzEO2kzf6E WM2+U+pL/+3pw3T40ezwaiPs+65e9rHQRiQnYjpCVtf1tahDWu4T5En5sQfXuN/h fLlmceMjQa50FRsbqo7jJvQVMDaR2+c= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:28 2025 by rpki-client