$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14fbfbea-4a8e-31ca-9e3f-b39e4e46c5bb.roa File: 14fbfbea-4a8e-31ca-9e3f-b39e4e46c5bb.roa (raw, json) Hash identifier: MzJW4tn8QxhUzcRIg9aN6EyOx9el7bJ5Oj1PI+UGy+E= Subject key identifier: 84:2E:0C:38:A3:AD:25:C8:34:3C:5A:36:A5:EF:57:5B:BF:56:88:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374AD4C5DD2D1BF1ABA540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14fbfbea-4a8e-31ca-9e3f-b39e4e46c5bb.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4a:d4:c5:dd:2d:1b:f1:ab:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0dc9c23d-cca3-4f42-a482-397a75f9593c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:90:ed:58:8b:0c:de:5f:7b:79:50:3e:e0: 67:4c:c9:44:33:c7:62:e8:ae:34:68:a0:86:5a:5f: 8e:dc:cb:2b:02:1b:31:b7:b1:c4:6e:53:b7:32:ec: c4:57:cc:f6:4f:d0:dc:d9:e9:68:59:63:39:18:b5: 18:ad:8a:2b:88:2b:81:2a:01:57:08:4c:ab:6b:5e: 8b:36:8c:f6:ed:19:f6:21:03:89:c8:74:8b:0b:c4: 58:f2:bd:10:e4:bd:d7:98:a2:8e:85:6e:b5:8e:3e: f9:f0:12:58:04:4e:d2:58:83:78:38:0e:06:5f:db: 9f:94:b0:11:99:42:da:71:02:f7:55:b0:54:77:b7: f6:0d:6b:c1:4c:58:8f:d9:dc:2c:e2:6b:04:85:63: 2c:fd:e0:21:c9:1a:4c:46:c0:56:bb:88:52:e9:a2: a8:aa:e5:f1:c0:83:4b:a5:9a:4f:2c:b3:bf:e1:b5: 01:1c:aa:c2:3c:91:76:ca:43:4d:15:6c:98:11:d5: cb:18:8c:47:96:21:54:fa:ec:eb:f6:f3:86:19:3a: c1:14:18:81:bf:dc:d4:40:97:97:14:bf:d9:b5:a8: 43:59:5a:3e:d9:07:7f:c8:dc:fd:f8:8a:3f:23:41: 6e:19:fe:4b:21:3f:17:c4:43:1a:c3:5e:c3:78:00: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:0C:38:A3:AD:25:C8:34:3C:5A:36:A5:EF:57:5B:BF:56:88:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14fbfbea-4a8e-31ca-9e3f-b39e4e46c5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a4:f5:c4:fb:94:96:21:f4:f3:b2:01:83:99:7b:72:94:f2: cf:3d:d9:f2:99:22:c1:08:6e:0d:3c:b5:9e:a1:9f:33:cf:ad: 48:4f:70:d9:51:5a:3c:b6:2d:a6:91:e4:4f:a1:f2:c6:16:d7: 33:ff:e9:7b:d6:eb:01:68:fb:da:2d:b2:58:64:63:d0:05:f5: a7:11:90:ca:8f:81:2c:a5:28:81:9e:8c:9d:00:d0:d4:84:56: 80:4a:3e:7f:96:a2:e8:d2:62:a7:f0:ff:da:da:5e:72:c0:26: 3a:51:ae:57:69:cf:71:24:f3:17:8b:00:7a:96:13:04:34:6b: 7a:7e:ec:50:fa:cb:27:33:78:18:b1:20:19:52:62:0e:07:8f: c0:73:6f:8a:13:8f:eb:3d:c1:39:33:2c:a6:ac:6e:b6:0b:b3: 6e:83:1d:7c:5a:71:a1:ec:09:50:55:e5:31:f4:60:bd:ef:13: 3d:40:18:a3:8a:3f:4d:39:ac:91:d0:d1:a1:d4:5c:25:cd:32: 9f:1c:af:af:1c:e8:3b:28:c9:d3:16:ab:9c:86:03:a6:a0:86: f5:77:7b:07:38:5c:c5:01:04:a2:a9:cd:25:ba:f3:33:17:c6: ff:78:43:6c:83:32:7a:27:8b:b1:e6:51:0e:83:a0:47:22:a1: 1a:2d:b9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0rUxd0tG/GrpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGRjOWMyM2QtY2NhMy00ZjQyLWE0ODItMzk3YTc1Zjk1OTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmGQ7ViLDN5fe3lQPuBnTMlEM8di6K40aKCG Wl+O3MsrAhsxt7HEblO3MuzEV8z2T9Dc2eloWWM5GLUYrYoriCuBKgFXCEyra16L Noz27Rn2IQOJyHSLC8RY8r0Q5L3XmKKOhW61jj758BJYBE7SWIN4OA4GX9uflLAR mULacQL3VbBUd7f2DWvBTFiP2dws4msEhWMs/eAhyRpMRsBWu4hS6aKoquXxwINL pZpPLLO/4bUBHKrCPJF2ykNNFWyYEdXLGIxHliFU+uzr9vOGGTrBFBiBv9zUQJeX FL/ZtahDWVo+2Qd/yNz9+Io/I0FuGf5LIT8XxEMaw17DeAC+/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQuDDijrSXINDxaNqXvV1u/VoipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTRmYmZiZWEtNGE4ZS0z MWNhLTllM2YtYjM5ZTRlNDZjNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKk9cT7lJYh9POyAYOZe3KU8s892fKZIsEIbg08tZ6hnzPPrUhPcNlR Wjy2LaaR5E+h8sYW1zP/6XvW6wFo+9otslhkY9AF9acRkMqPgSylKIGejJ0A0NSE VoBKPn+WoujSYqfw/9raXnLAJjpRrldpz3Ek8xeLAHqWEwQ0a3p+7FD6yyczeBix IBlSYg4Hj8Bzb4oTj+s9wTkzLKasbrYLs26DHXxacaHsCVBV5TH0YL3vEz1AGKOK P005rJHQ0aHUXCXNMp8cr68c6DsoydMWq5yGA6aghvV3ewc4XMUBBKKpzSW68zMX xv94Q2yDMnoni7HmUQ6DoEcioRotuSA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:35 2025 by rpki-client