$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1347c24b-f30f-321d-a2bb-140bcac48306.roa File: 1347c24b-f30f-321d-a2bb-140bcac48306.roa (raw, json) Hash identifier: IyI8PM3h4ipIm7kP9+0f6+DL/5DswncjmmuEmFEqtDk= Subject key identifier: CB:C4:FD:6C:FA:8F:C9:25:68:CE:68:49:69:26:7F:3B:4A:5F:93:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C53DBE39F1FF4A9E799C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1347c24b-f30f-321d-a2bb-140bcac48306.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:53:db:e3:9f:1f:f4:a9:e7:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=190a14db-b765-41d5-864c-3435487a3eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:d5:75:ea:a1:cc:44:e3:de:cf:f3:4a:93: a4:cd:ad:7b:5e:52:ac:e7:6f:9b:2b:c8:e6:b3:8c: c5:c8:27:c6:50:d4:b5:b0:b2:eb:e1:f1:14:cf:f5: db:be:e0:88:9e:4c:85:4d:d0:1f:84:9a:42:51:8d: e9:67:5d:c3:79:f5:4f:1a:75:2d:b8:e4:a4:ac:fc: ce:a7:dd:65:16:95:1a:b2:6b:45:43:e2:35:49:07: e0:75:b6:29:ee:a2:b6:51:8c:e6:62:ef:dc:b4:3d: d2:23:8b:12:cc:ca:61:a3:79:64:3e:cc:f8:99:99: fd:18:af:eb:0a:f5:4e:b0:09:bc:e1:30:0d:64:fe: 8f:c4:6b:7c:8a:42:11:f6:13:99:ce:d6:38:0c:3c: 33:94:b2:e0:26:7b:d9:6a:56:6d:93:d5:6b:db:e9: 5c:e9:4c:39:68:f3:95:93:64:10:96:64:fc:f3:43: 00:35:cb:07:77:bf:da:57:ac:27:0c:7d:7f:75:c6: 14:34:c4:fb:f6:15:9d:89:a6:85:16:f7:8b:d0:b7: 9a:84:73:c0:b1:17:1c:f5:2f:c6:4f:6e:84:eb:7f: 55:99:8a:6c:4e:4a:c9:43:c9:cf:78:bf:0d:ed:ea: ee:67:45:fd:57:e6:83:b7:88:1e:86:cd:68:13:47: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C4:FD:6C:FA:8F:C9:25:68:CE:68:49:69:26:7F:3B:4A:5F:93:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1347c24b-f30f-321d-a2bb-140bcac48306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:de:37:be:5c:af:9d:6b:88:20:dd:20:b9:92:56:a7:e0:76: 28:46:c6:d7:01:3d:97:78:14:a8:78:0b:16:ff:1a:03:5a:9c: 81:49:3d:5a:5a:5a:75:f0:ae:a0:f7:7e:46:68:36:e0:e4:72: 3f:ae:6a:3e:14:91:0b:d9:c1:23:bd:62:d3:68:be:3a:d8:fb: 04:31:50:ae:47:7a:ba:43:ec:fa:71:db:79:99:ff:ce:44:97: 01:6f:3f:99:e4:fc:c4:43:70:86:72:de:94:89:90:42:51:aa: fa:bd:38:75:d5:f7:4f:ad:8a:03:81:8d:3a:be:c2:9b:0a:9a: 6a:c4:2d:b5:fc:c5:e1:06:4f:9d:b8:7e:38:d9:3e:6a:64:f4: 83:b5:8f:22:90:a9:cf:be:76:32:25:2f:ff:3d:08:aa:2a:ba: 60:60:99:42:4a:49:6b:91:f5:24:82:3f:82:ea:5e:84:01:4c: 6c:bf:ee:f6:9e:55:34:60:17:ce:d3:50:b5:9c:ed:5f:e2:41: a0:4d:b1:f8:d0:98:92:a1:64:52:8b:40:63:a4:bf:d8:38:d1: 8f:05:1c:cb:31:b1:1a:90:d4:61:c2:1c:69:54:1f:7e:20:ea: 4a:d8:3a:68:5d:26:81:9a:77:ab:6e:93:79:f2:14:f9:19:d6: 81:16:7f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFPb458f9KnnmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MTkwYTE0ZGItYjc2NS00MWQ1LTg2NGMtMzQzNTQ4N2EzZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9PVdeqhzETj3s/zSpOkza17XlKs52+bK8jm s4zFyCfGUNS1sLLr4fEUz/XbvuCInkyFTdAfhJpCUY3pZ13DefVPGnUtuOSkrPzO p91lFpUasmtFQ+I1SQfgdbYp7qK2UYzmYu/ctD3SI4sSzMpho3lkPsz4mZn9GK/r CvVOsAm84TANZP6PxGt8ikIR9hOZztY4DDwzlLLgJnvZalZtk9Vr2+lc6Uw5aPOV k2QQlmT880MANcsHd7/aV6wnDH1/dcYUNMT79hWdiaaFFveL0LeahHPAsRcc9S/G T26E639VmYpsTkrJQ8nPeL8N7eruZ0X9V+aDt4gehs1oE0eflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvE/Wz6j8klaM5oSWkmfztKX5PnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTM0N2MyNGItZjMwZi0z MjFkLWEyYmItMTQwYmNhYzQ4MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzeN75cr51riCDdILmSVqfgdihGxtcBPZd4FKh4Cxb/GgNanIFJPVpa WnXwrqD3fkZoNuDkcj+uaj4UkQvZwSO9YtNovjrY+wQxUK5HerpD7Ppx23mZ/85E lwFvP5nk/MRDcIZy3pSJkEJRqvq9OHXV90+tigOBjTq+wpsKmmrELbX8xeEGT524 fjjZPmpk9IO1jyKQqc++djIlL/89CKoqumBgmUJKSWuR9SSCP4LqXoQBTGy/7vae VTRgF87TULWc7V/iQaBNsfjQmJKhZFKLQGOkv9g40Y8FHMsxsRqQ1GHCHGlUH34g 6krYOmhdJoGad6tuk3nyFPkZ1oEWf2E= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:32 2025 by rpki-client