$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1806eee1-bb77-3bc2-a2fa-95a6be138ace.roa File: 1806eee1-bb77-3bc2-a2fa-95a6be138ace.roa (raw, json) Hash identifier: plUL+RmOMHAM3wzs9KaTBzf4KiiUWeUWau0UDORBUKg= Subject key identifier: 4B:58:6C:99:06:45:07:31:A8:FF:01:D5:95:98:20:26:E6:1F:00:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C23029C3DB93496FCCFA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1806eee1-bb77-3bc2-a2fa-95a6be138ace.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:23:02:9c:3d:b9:34:96:fc:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=9f5b9a0a-d6b1-404e-a59a-125212623728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:78:99:6b:e3:15:fa:7a:76:fa:80:4d:0b: 07:99:7f:07:d2:bb:e6:b5:6c:40:4d:84:0f:b4:41: 67:cc:a9:55:d6:51:20:79:d9:42:8f:a4:0b:98:b6: eb:65:70:3b:6d:43:e4:e2:d8:01:15:a1:c5:71:b3: 62:a6:d6:17:8e:11:4d:b0:f9:76:f9:0d:ae:e6:70: 8f:a8:66:6b:4f:e0:6b:76:7f:3f:96:7b:cc:0e:36: 73:f9:5b:5f:9b:11:36:67:8c:a1:f5:09:7a:d5:2c: 33:66:03:53:29:84:d9:cf:79:a2:ce:e3:35:2c:f2: 4e:1a:c7:3a:78:c5:b3:0a:93:4d:fb:a0:9e:b4:33: 86:e2:23:88:36:10:1d:17:e3:55:a1:ba:81:06:a8: 36:0c:01:99:2c:30:a7:ee:06:13:49:e2:a6:c6:a2: 8d:35:f6:ee:a7:64:c1:26:00:78:80:7a:18:c2:84: af:a6:3d:30:46:62:f4:91:3d:ce:dd:84:dd:06:64: 79:42:05:0f:63:62:1e:4a:2c:c5:cc:20:74:9a:91: 4d:68:4d:ef:73:ec:6f:33:4e:94:99:a1:f0:dd:d8: c0:15:d1:37:5f:b4:55:3f:4b:d1:92:8d:c1:73:e9: c5:2a:d1:59:c6:c6:9e:d8:ac:f0:fc:75:97:de:97: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:6C:99:06:45:07:31:A8:FF:01:D5:95:98:20:26:E6:1F:00:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1806eee1-bb77-3bc2-a2fa-95a6be138ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:94:cb:af:5d:28:36:1c:d1:78:75:2f:e1:25:9e:d0:57:87: e7:c7:25:14:1c:fd:2f:f1:62:e9:af:28:85:cd:c3:a0:bf:1d: 42:dc:8c:b7:0b:34:39:e0:47:3e:fb:cd:f4:da:6f:a2:89:ee: 84:3a:05:b0:54:68:48:38:f7:f8:02:24:56:a7:02:2a:ed:e5: e6:49:57:48:f3:42:c7:6c:da:db:cc:67:41:0c:e7:77:64:36: cb:69:47:4f:b0:bb:92:e1:f3:ad:1e:2b:26:16:2a:9b:aa:0b: 21:13:2c:5d:2d:db:ed:85:c1:f4:ce:3a:88:71:59:81:5a:43: dd:71:c9:2e:fd:ed:17:78:be:c9:06:21:9e:5b:52:41:c1:e2: 77:d7:ff:d1:9a:91:72:90:f2:c7:b5:cc:86:01:7b:cd:ea:03: b0:c2:9e:3d:73:61:05:40:fb:69:5d:2f:5b:3d:ea:33:cc:b0: 05:d7:83:6d:13:10:64:af:f3:a2:50:08:d2:84:2f:d8:49:b3: 7e:c8:61:c4:49:a6:e4:87:66:bd:71:e5:39:46:fb:1d:f2:af: 62:83:9e:0b:8d:cc:de:b6:6e:42:eb:98:ae:08:ee:2a:dc:9e: f6:94:d6:8c:72:71:29:f2:dd:29:a2:54:12:79:0a:68:aa:ca: 9b:9c:50:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCMCnD25NJb8z6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWY1YjlhMGEtZDZiMS00MDRlLWE1OWEtMTI1MjEyNjIzNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz14mWvjFfp6dvqATQsHmX8H0rvmtWxATYQP tEFnzKlV1lEgedlCj6QLmLbrZXA7bUPk4tgBFaHFcbNiptYXjhFNsPl2+Q2u5nCP qGZrT+Brdn8/lnvMDjZz+VtfmxE2Z4yh9Ql61SwzZgNTKYTZz3mizuM1LPJOGsc6 eMWzCpNN+6CetDOG4iOINhAdF+NVobqBBqg2DAGZLDCn7gYTSeKmxqKNNfbup2TB JgB4gHoYwoSvpj0wRmL0kT3O3YTdBmR5QgUPY2IeSizFzCB0mpFNaE3vc+xvM06U maHw3djAFdE3X7RVP0vRko3Bc+nFKtFZxsae2Kzw/HWX3pfwNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtYbJkGRQcxqP8B1ZWYICbmHwBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTgwNmVlZTEtYmI3Ny0z YmMyLWEyZmEtOTVhNmJlMTM4YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuUy69dKDYc0Xh1L+ElntBXh+fHJRQc/S/xYumvKIXNw6C/HULcjLcL NDngRz77zfTab6KJ7oQ6BbBUaEg49/gCJFanAirt5eZJV0jzQsds2tvMZ0EM53dk NstpR0+wu5Lh860eKyYWKpuqCyETLF0t2+2FwfTOOohxWYFaQ91xyS797Rd4vskG IZ5bUkHB4nfX/9GakXKQ8se1zIYBe83qA7DCnj1zYQVA+2ldL1s96jPMsAXXg20T EGSv86JQCNKEL9hJs37IYcRJpuSHZr1x5TlG+x3yr2KDnguNzN62bkLrmK4I7irc nvaU1oxycSny3SmiVBJ5CmiqypucUFk= -----END CERTIFICATE-----Generated at Thu Oct 16 02:04:06 2025 by rpki-client