$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa File: 1452b328-d831-367d-a65e-e7aa9eb71a7f.roa (raw, json) Hash identifier: vSMf4vg37RohSsH9lXPV+tEMQX6Y0mwSJvZ+wNpu4Mo= Subject key identifier: BF:A4:AB:C2:EC:C0:22:AC:C1:C3:E1:33:9B:05:1B:B7:44:B5:75:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F2C620A54C8A0B337200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f2:c6:20:a5:4c:8a:0b:33:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=b72bc6d1-ff11-4156-a9c9-fd2fd6f0f378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:75:28:7a:a7:44:8f:9f:81:83:d0:fb:38: c8:2e:bb:2e:91:a6:c7:08:18:f0:1e:e6:4a:2c:e9: 32:e7:f7:f7:55:5b:67:f6:ec:4b:eb:42:f7:6c:78: 22:54:f8:33:42:6e:3d:36:0a:d1:63:ce:7f:47:11: bf:d8:61:b5:bc:90:8a:ac:74:3f:dd:74:69:c5:c3: 10:1c:b0:0a:72:c8:1a:48:81:f7:02:25:be:08:e7: 5a:5d:a3:5a:41:41:13:37:94:aa:16:22:dc:e3:74: 47:cb:c9:3a:b0:63:97:29:78:0a:9f:56:8e:b5:6f: 95:f3:d3:32:f3:c3:7b:4e:be:bd:97:2b:4f:ae:b8: 4b:9e:b9:1a:94:1f:f7:ef:63:98:33:da:65:d3:8f: aa:82:c0:39:74:96:3f:ea:fb:07:8b:9c:3b:e7:28: 19:9f:2c:72:92:9a:c0:5b:6f:57:72:81:c6:e4:03: d6:6d:fd:0d:c1:f4:54:ea:4c:7e:fb:48:f6:d6:1e: e0:68:65:9c:c7:8f:80:aa:e8:8e:aa:18:2e:f6:85: 3f:24:89:b1:6f:d9:a6:ca:20:0f:a1:55:df:51:b0: 77:9e:0d:4f:dd:f7:20:0e:4a:46:76:f4:63:b6:f0: 6a:fa:67:65:30:3a:1e:77:c9:d4:ac:ba:1e:bf:6e: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:AB:C2:EC:C0:22:AC:C1:C3:E1:33:9B:05:1B:B7:44:B5:75:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:86:3c:7f:19:10:ae:03:5b:5c:02:17:5f:01:c2:2c:8b:cd: 66:d2:18:8a:b5:03:11:7a:80:be:44:d4:17:87:29:c5:11:f2: 59:c6:40:63:d5:d2:8c:01:01:03:15:00:07:39:39:35:bb:9f: b1:4f:9f:f5:36:c3:0b:50:42:c3:26:dd:80:5d:7f:bc:f2:ff: da:50:78:54:24:8e:51:8d:e9:b2:93:ef:57:eb:02:a5:a6:2c: 4b:6e:bc:96:e6:96:e9:f7:19:dd:1d:4d:05:03:3d:cc:d2:d1: 8d:48:6b:0e:f8:d3:a9:ab:cb:73:b8:f2:99:e5:47:2a:4e:90: df:88:5b:60:be:af:f4:02:5b:0d:c1:32:fc:7a:36:3a:14:e4: 27:ae:89:14:d9:8b:d0:a5:2d:da:f1:85:f4:6d:49:c2:e5:54: 93:c1:95:c4:5e:d5:37:50:0f:6e:7e:e2:3d:33:80:fa:1a:8e: 39:af:66:72:89:67:c2:6c:15:97:e0:33:44:bc:6d:e1:ac:db: 7e:42:13:d9:36:a3:93:f5:93:77:81:8e:53:19:31:ae:8b:00: 7f:55:8d:10:ff:54:37:41:bd:e3:27:c9:ea:01:1d:1f:9e:e9: 7e:bf:c0:6f:77:3c:c6:a1:00:70:57:64:5c:d4:b2:dc:cf:64: 55:c0:b5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvLGIKVMigszcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjcyYmM2ZDEtZmYxMS00MTU2LWE5YzktZmQyZmQ2ZjBmMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjt1KHqnRI+fgYPQ+zjILrsukabHCBjwHuZK LOky5/f3VVtn9uxL60L3bHgiVPgzQm49NgrRY85/RxG/2GG1vJCKrHQ/3XRpxcMQ HLAKcsgaSIH3AiW+COdaXaNaQUETN5SqFiLc43RHy8k6sGOXKXgKn1aOtW+V89My 88N7Tr69lytPrrhLnrkalB/372OYM9pl04+qgsA5dJY/6vsHi5w75ygZnyxykprA W29XcoHG5APWbf0NwfRU6kx++0j21h7gaGWcx4+AquiOqhgu9oU/JImxb9mmyiAP oVXfUbB3ng1P3fcgDkpGdvRjtvBq+mdlMDoed8nUrLoev26K5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+kq8LswCKswcPhM5sFG7dEtXUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQ1MmIzMjgtZDgzMS0z NjdkLWE2NWUtZTdhYTllYjcxYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOGPH8ZEK4DW1wCF18BwiyLzWbSGIq1AxF6gL5E1BeHKcUR8lnGQGPV 0owBAQMVAAc5OTW7n7FPn/U2wwtQQsMm3YBdf7zy/9pQeFQkjlGN6bKT71frAqWm LEtuvJbmlun3Gd0dTQUDPczS0Y1Iaw7406mry3O48pnlRypOkN+IW2C+r/QCWw3B Mvx6NjoU5CeuiRTZi9ClLdrxhfRtScLlVJPBlcRe1TdQD25+4j0zgPoajjmvZnKJ Z8JsFZfgM0S8beGs235CE9k2o5P1k3eBjlMZMa6LAH9VjRD/VDdBveMnyeoBHR+e 6X6/wG93PMahAHBXZFzUstzPZFXAta4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:47 2025 by rpki-client