$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1175fa30-54e3-3be1-86ed-d14bfef6d420.roa File: 1175fa30-54e3-3be1-86ed-d14bfef6d420.roa (raw, json) Hash identifier: 3FRWnCqJecEGWVEvLe+ZrSSj5UkbqLs/+u2gQop/PHE= Subject key identifier: 68:B7:2B:69:BA:3E:A9:71:CD:63:6D:2E:5A:1F:64:9E:F7:78:1F:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066EEAB80D71B7678B84B44 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1175fa30-54e3-3be1-86ed-d14bfef6d420.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ee:ab:80:d7:1b:76:78:b8:4b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=d7a9b58d-0030-4067-a59e-040dc29ec0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:0f:2d:cb:69:84:a7:26:01:16:43:30:a0: 8c:1a:e5:1f:68:9e:66:23:4c:da:8d:a6:b6:26:22: 79:b5:f1:32:f1:75:41:bd:09:8e:32:51:e7:2d:1e: a1:77:3c:02:6c:e9:d6:c7:a8:42:4e:17:5a:39:e1: f8:fe:44:83:84:53:48:3f:37:b7:bb:96:6e:8f:4f: 48:d3:1a:8b:a0:a2:ac:81:2e:a9:19:1d:74:37:6c: 8d:b4:43:7a:27:9b:4f:5f:a6:d3:ee:03:bb:70:99: 9e:17:2f:5c:48:9e:ec:29:08:77:e8:aa:22:a6:80: d9:c9:f7:ac:32:5c:c2:4b:01:bc:bf:3f:a8:de:ba: f5:65:46:4c:29:38:1f:d1:ac:91:48:c4:d5:68:d1: 7f:8a:c0:cf:cf:41:75:5b:f3:98:13:19:12:ff:15: 8d:c8:85:d8:bf:6b:41:dc:a1:31:d1:46:74:b3:cb: ed:06:6c:c4:cb:dc:5b:97:4d:62:80:0e:18:ba:b5: 34:ab:20:0d:f8:01:f7:41:a7:aa:a0:a1:de:84:76: 5e:33:6b:a6:1a:d8:62:98:58:82:d8:b9:ff:cc:de: 35:27:e4:3b:fd:af:ca:ac:af:7a:39:9f:a0:f5:2e: 90:aa:2c:03:dd:b8:e4:3a:98:e1:37:51:42:dd:7f: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:2B:69:BA:3E:A9:71:CD:63:6D:2E:5A:1F:64:9E:F7:78:1F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1175fa30-54e3-3be1-86ed-d14bfef6d420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:18:64:f8:fe:2f:5e:fa:97:c3:6e:e6:7d:59:2f:c0:4f:54: 1f:ee:d8:aa:d4:75:68:2e:38:7a:42:8a:99:25:c1:ce:a8:04: da:c9:76:40:eb:a6:1e:21:de:48:1f:5e:6c:d5:b3:85:b6:70: 2f:cb:ff:02:99:59:ca:89:5e:1e:b5:24:aa:cb:9a:05:77:f8: c4:4c:34:4d:cc:15:9b:a9:96:a3:3b:b5:d1:47:04:00:65:90: 5e:38:6b:16:98:75:c8:14:bf:d0:27:0c:29:11:8c:cd:6c:c4: a0:53:1e:0f:89:cf:a0:02:cb:6e:db:5d:07:f8:2d:4f:f2:f8: 0c:18:f2:bb:6a:29:76:58:42:51:c9:89:72:4b:27:bc:83:ba: fe:51:5e:a8:27:1b:e0:ec:a6:43:95:0d:5a:11:b4:93:9e:01: 20:ae:59:19:1f:ab:1f:d7:53:bf:52:29:6a:36:10:e8:5e:9c: da:79:d6:1d:b3:14:73:77:f4:6e:6d:08:22:6c:90:94:d8:98: 92:a6:ec:b0:a0:24:26:cc:0c:a3:60:45:eb:83:90:23:8e:6d: 0b:03:59:74:02:44:4b:87:b2:18:be:20:51:e9:26:db:c2:cf: 33:04:bf:ad:5e:f9:5b:13:86:1c:3e:da:70:35:ae:0f:c2:d6: d7:e0:65:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZu6rgNcbdni4S0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDdhOWI1OGQtMDAzMC00MDY3LWE1OWUtMDQwZGMyOWVjMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiacPLctphKcmARZDMKCMGuUfaJ5mI0zajaa2 JiJ5tfEy8XVBvQmOMlHnLR6hdzwCbOnWx6hCThdaOeH4/kSDhFNIPze3u5Zuj09I 0xqLoKKsgS6pGR10N2yNtEN6J5tPX6bT7gO7cJmeFy9cSJ7sKQh36KoipoDZyfes MlzCSwG8vz+o3rr1ZUZMKTgf0ayRSMTVaNF/isDPz0F1W/OYExkS/xWNyIXYv2tB 3KEx0UZ0s8vtBmzEy9xbl01igA4YurU0qyAN+AH3QaeqoKHehHZeM2umGthimFiC 2Ln/zN41J+Q7/a/KrK96OZ+g9S6QqiwD3bjkOpjhN1FC3X+MtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi3K2m6PqlxzWNtLlofZJ73eB8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTE3NWZhMzAtNTRlMy0z YmUxLTg2ZWQtZDE0YmZlZjZkNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGg+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwYZPj+L176l8Nu5n1ZL8BPVB/u2KrUdWguOHpCipklwc6oBNrJdkDr ph4h3kgfXmzVs4W2cC/L/wKZWcqJXh61JKrLmgV3+MRMNE3MFZuplqM7tdFHBABl kF44axaYdcgUv9AnDCkRjM1sxKBTHg+Jz6ACy27bXQf4LU/y+AwY8rtqKXZYQlHJ iXJLJ7yDuv5RXqgnG+DspkOVDVoRtJOeASCuWRkfqx/XU79SKWo2EOhenNp51h2z FHN39G5tCCJskJTYmJKm7LCgJCbMDKNgReuDkCOObQsDWXQCREuHshi+IFHpJtvC zzMEv61e+VsThhw+2nA1rg/C1tfgZXk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:56 2025 by rpki-client