$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a845140-af85-3d2c-a7a7-83dee8bab06a.roa File: 0a845140-af85-3d2c-a7a7-83dee8bab06a.roa (raw, json) Hash identifier: lfJelseIneX/atoC91CN5qOIbiUS2VuvNnV29yl2yTE= Subject key identifier: 8C:5D:98:C6:0F:B3:49:36:AF:D7:87:89:AC:6B:4F:AE:9D:46:54:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C553DDD6F1BBE19544B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a845140-af85-3d2c-a7a7-83dee8bab06a.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:55:3d:dd:6f:1b:be:19:54:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3f161e05-a407-4a78-9cf5-a3823086687b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:60:08:77:48:c6:b0:6e:b5:eb:33:a0:1c: 5f:d3:da:e6:41:33:69:65:c6:e3:2e:7f:4e:82:49: e2:c3:24:25:22:ff:72:5e:af:8c:cf:d1:89:f5:d8: d4:8f:1b:04:15:7a:e4:25:42:d8:ee:2c:f0:eb:54: 92:fd:4d:42:92:76:98:a6:fb:84:a1:71:0a:bd:69: 0c:6c:f3:87:c6:87:ff:08:9c:1b:52:3e:ba:a1:10: d6:25:db:b1:d8:ab:73:74:47:d0:24:45:e9:be:ca: 1f:49:58:64:c8:5f:dd:7f:96:90:e9:81:f8:88:94: c5:99:c5:e9:aa:d7:78:49:be:8d:1c:b2:fe:ad:46: 4f:4b:29:18:4f:c2:27:24:d8:87:a3:9c:cc:96:65: e1:6a:03:2f:55:0b:64:2f:f7:34:8f:6d:d9:b1:51: f6:1d:b9:6e:9c:30:e2:30:97:5d:dc:d0:80:95:53: 42:da:48:27:32:5a:19:9b:6f:4e:49:8f:f8:27:6d: 9d:ae:bf:a3:45:6d:4f:df:0a:85:73:f5:f3:57:db: c8:b1:93:49:25:0f:ed:47:02:11:c5:1f:00:cd:d6: 6e:32:05:8d:48:75:32:fc:a8:4e:2e:24:ad:3d:42: ba:0c:4b:e0:9f:e9:c5:f0:2c:e6:f3:ae:5a:46:39: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:98:C6:0F:B3:49:36:AF:D7:87:89:AC:6B:4F:AE:9D:46:54:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a845140-af85-3d2c-a7a7-83dee8bab06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:70:e7:9b:2f:2b:38:43:37:50:42:1a:a2:31:03:a1:0d:8e: a6:2f:55:d9:a6:f9:5a:39:90:4b:e3:72:41:37:a3:df:18:ec: 34:9a:73:9e:dd:18:a6:84:cc:fe:f4:af:a4:7d:05:3b:53:d1: 68:8d:36:17:47:3c:62:54:5f:c8:ea:04:71:08:02:86:7e:69: 41:c7:b2:ff:cc:0f:b0:7f:3d:b5:14:07:19:9c:da:2a:5b:34: 1e:e5:1b:01:9e:10:22:e8:8e:05:7f:c5:9f:4c:12:c8:7d:e4: 1f:66:d6:d5:3b:bf:fd:74:4f:46:4d:58:6e:36:3c:cc:80:80: 19:e5:51:bc:29:02:0e:ac:d2:f4:cf:f6:ed:db:6e:dc:2f:4f: 11:89:1c:cf:29:2a:d9:60:cd:52:11:7c:9b:54:4c:9f:89:ae: 96:4e:4a:ef:44:51:fe:0f:ea:84:8e:ed:ec:74:fa:58:e8:4e: 13:b4:b1:d8:99:2e:d8:57:0b:8f:e0:98:ab:e8:2b:96:33:da: 18:64:fd:13:57:b7:33:65:66:e1:aa:7d:76:42:2a:9e:40:c6: e6:d1:be:20:ae:9f:c4:27:13:f7:1e:46:51:be:f4:1d:52:f0: 78:c6:4a:a7:13:2f:e9:d7:d4:36:0c:67:5d:bb:ee:ea:8e:e0: 85:15:cc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFU93W8bvhlUSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk M2YxNjFlMDUtYTQwNy00YTc4LTljZjUtYTM4MjMwODY2ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUdgCHdIxrButeszoBxf09rmQTNpZcbjLn9O gkniwyQlIv9yXq+Mz9GJ9djUjxsEFXrkJULY7izw61SS/U1CknaYpvuEoXEKvWkM bPOHxof/CJwbUj66oRDWJdux2KtzdEfQJEXpvsofSVhkyF/df5aQ6YH4iJTFmcXp qtd4Sb6NHLL+rUZPSykYT8InJNiHo5zMlmXhagMvVQtkL/c0j23ZsVH2HblunDDi MJdd3NCAlVNC2kgnMloZm29OSY/4J22drr+jRW1P3wqFc/XzV9vIsZNJJQ/tRwIR xR8AzdZuMgWNSHUy/KhOLiStPUK6DEvgn+nF8Czm865aRjn2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxdmMYPs0k2r9eHiaxrT66dRlS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE4NDUxNDAtYWY4NS0z ZDJjLWE3YTctODNkZWU4YmFiMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROctMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJw55svKzhDN1BCGqIxA6ENjqYvVdmm+Vo5kEvjckE3o98Y7DSac57d GKaEzP70r6R9BTtT0WiNNhdHPGJUX8jqBHEIAoZ+aUHHsv/MD7B/PbUUBxmc2ipb NB7lGwGeECLojgV/xZ9MEsh95B9m1tU7v/10T0ZNWG42PMyAgBnlUbwpAg6s0vTP 9u3bbtwvTxGJHM8pKtlgzVIRfJtUTJ+JrpZOSu9EUf4P6oSO7ex0+ljoThO0sdiZ LthXC4/gmKvoK5Yz2hhk/RNXtzNlZuGqfXZCKp5AxubRviCun8QnE/ceRlG+9B1S 8HjGSqcTL+nX1DYMZ1277uqO4IUVzAQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:46 2025 by rpki-client