$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1624b10d-c282-361d-adce-31af35631854.roa File: 1624b10d-c282-361d-adce-31af35631854.roa (raw, json) Hash identifier: Xv40DtJyYWRuiSJEv0JExdObeOGAVmGf7OdIF+Kmh0o= Subject key identifier: 88:39:E3:67:8F:EF:B8:D3:C0:F4:E1:94:C3:62:54:17:A0:6E:D2:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374CFA74B8550DC8027380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1624b10d-c282-361d-adce-31af35631854.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4c:fa:74:b8:55:0d:c8:02:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0e1d17a0-caee-410d-b868-3da127eed5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:56:79:1d:88:26:9a:a5:bf:96:5a:cb:67: 38:e5:23:f3:2d:84:32:0d:24:37:0f:1a:f3:a6:90: a0:09:9b:9e:7f:5f:b9:47:01:4d:e8:c3:ea:a0:5f: 32:49:c3:9d:1c:3b:38:ee:0c:b8:a3:8a:f2:6d:76: 54:4d:7e:64:56:73:55:e1:2d:8b:05:ab:64:5d:de: 14:29:c1:62:d9:b4:a8:b8:c1:50:f7:ac:44:97:3e: ba:1e:e1:c8:83:5c:d3:33:69:fa:1d:41:eb:c3:c0: 07:d9:ce:2c:ba:31:d3:21:ac:5a:70:b4:92:aa:85: 3a:26:61:35:05:b8:2b:de:31:2c:53:ab:46:5c:57: e7:b4:07:7f:2b:f9:98:48:31:7b:f5:75:3c:3e:f7: e9:d3:3b:5d:9a:1c:25:2d:9e:48:dc:66:1d:c4:5d: 5b:26:ea:71:d1:0b:bb:84:95:71:fa:92:97:7b:8f: 14:bf:95:c5:9b:23:fd:84:2e:9f:03:12:28:8a:bd: 06:8c:a5:32:be:b8:15:a4:ed:81:f1:73:f1:47:58: 14:46:81:93:a4:f5:41:aa:5e:b3:53:02:51:58:2b: 41:b5:36:32:08:24:2e:cc:6c:27:01:70:c3:ba:ed: 97:ac:a8:fe:54:04:9a:22:72:80:f2:31:63:83:c2: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:E3:67:8F:EF:B8:D3:C0:F4:E1:94:C3:62:54:17:A0:6E:D2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1624b10d-c282-361d-adce-31af35631854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f0:6c:f2:d8:91:19:8c:57:fc:30:5d:7a:a6:f5:35:56:7d: cd:6f:a4:7f:fd:84:8e:58:3b:d6:1d:55:75:65:9d:45:fc:42: 5b:82:5c:6a:97:4b:f9:0d:62:83:2a:14:24:a1:5d:4d:50:b1: ae:06:8c:e6:b6:af:a1:57:22:cd:02:51:10:77:90:d4:0b:49: ed:bb:d2:fb:21:08:96:0b:aa:30:66:cd:52:1d:7d:47:cb:dc: 6b:59:09:f0:28:b7:ca:53:65:17:f4:82:ef:39:43:a3:d0:fc: 0a:7e:75:c5:1a:87:be:96:d2:44:d0:8a:39:b1:65:18:48:9e: 15:8e:ad:7b:8d:72:5f:a6:f0:b3:ab:c2:64:d9:df:52:76:5b: b9:ac:2b:f0:4b:e8:07:3d:a2:61:77:aa:75:5a:a8:fe:70:cc: 4e:6d:47:16:f6:99:16:f6:0f:d5:e6:21:d8:b6:22:b4:2a:b3: 14:92:90:d3:25:de:10:07:80:b4:a5:5c:d2:aa:a7:8a:a3:90: 33:83:6b:6b:b6:7c:1d:c8:e9:4b:e6:fb:7e:bc:60:0c:56:8a: 77:d3:c6:88:06:ed:81:ed:4c:74:ea:f9:d7:a2:3a:a3:3f:5e: 34:a3:bb:1a:1d:74:35:56:b3:06:b5:b0:50:9d:bb:1b:40:7d: 27:7c:bc:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0z6dLhVDcgCc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGUxZDE3YTAtY2FlZS00MTBkLWI4NjgtM2RhMTI3ZWVkNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNdWeR2IJpqlv5Zay2c45SPzLYQyDSQ3Dxrz ppCgCZuef1+5RwFN6MPqoF8yScOdHDs47gy4o4rybXZUTX5kVnNV4S2LBatkXd4U KcFi2bSouMFQ96xElz66HuHIg1zTM2n6HUHrw8AH2c4sujHTIaxacLSSqoU6JmE1 Bbgr3jEsU6tGXFfntAd/K/mYSDF79XU8Pvfp0ztdmhwlLZ5I3GYdxF1bJupx0Qu7 hJVx+pKXe48Uv5XFmyP9hC6fAxIoir0GjKUyvrgVpO2B8XPxR1gURoGTpPVBql6z UwJRWCtBtTYyCCQuzGwnAXDDuu2XrKj+VASaInKA8jFjg8JLiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg542eP77jTwPThlMNiVBegbtKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTYyNGIxMGQtYzI4Mi0z NjFkLWFkY2UtMzFhZjM1NjMxODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3wbPLYkRmMV/wwXXqm9TVWfc1vpH/9hI5YO9YdVXVlnUX8QluCXGqX S/kNYoMqFCShXU1Qsa4GjOa2r6FXIs0CURB3kNQLSe270vshCJYLqjBmzVIdfUfL 3GtZCfAot8pTZRf0gu85Q6PQ/Ap+dcUah76W0kTQijmxZRhInhWOrXuNcl+m8LOr wmTZ31J2W7msK/BL6Ac9omF3qnVaqP5wzE5tRxb2mRb2D9XmIdi2IrQqsxSSkNMl 3hAHgLSlXNKqp4qjkDODa2u2fB3I6Uvm+368YAxWinfTxogG7YHtTHTq+deiOqM/ XjSjuxoddDVWswa1sFCduxtAfSd8vAk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:30 2025 by rpki-client