$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a6c248b-f87d-3453-b7dc-c6b80c3ad5fb.roa File: 1a6c248b-f87d-3453-b7dc-c6b80c3ad5fb.roa (raw, json) Hash identifier: 0i+QNIvSIVLD6Viup9wNDix8wNqwP+9tFkTGWqNf05Y= Subject key identifier: E8:61:AD:F4:0C:64:2A:27:E4:98:C7:2A:66:39:4E:B3:C9:97:9D:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C37453E25C583D2A64C3693 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a6c248b-f87d-3453-b7dc-c6b80c3ad5fb.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.96.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:45:3e:25:c5:83:d2:a6:4c:36:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=28bc07e9-48be-4bc6-a389-fe5d7eebab63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:82:66:ab:14:2b:5c:4f:46:94:43:2c:13: 34:bf:29:2b:44:bc:8b:86:3c:2d:3c:7c:b3:1a:54: 0c:02:07:5f:d7:fe:3e:99:8f:73:6c:b7:33:f7:cc: 47:3a:d7:25:b0:19:3f:36:71:95:8c:68:c3:a9:c3: 14:4a:8a:16:cc:e9:7b:ec:34:b9:7e:bb:90:cf:43: 60:e5:5a:12:29:3f:dd:c5:18:ec:ca:4b:9b:71:80: e9:f8:77:27:2d:a9:b5:35:a9:1f:d1:e7:fb:ac:7a: 67:44:db:9a:b9:c8:f0:a9:89:01:66:54:53:4c:55: 76:c9:58:73:b8:c4:23:ba:f7:50:b7:b8:48:69:e8: 39:42:0b:ad:71:20:54:b6:e9:20:8c:03:d1:db:cd: 97:d7:af:b6:60:d1:b0:b5:d4:ea:54:66:1f:f7:fe: bf:cd:4a:40:8c:69:14:f2:93:86:20:b7:77:17:65: a0:ff:6e:d9:20:e3:82:40:54:d8:fb:72:f1:93:62: 0b:63:81:24:a5:bd:71:36:6c:51:dc:5b:93:7b:4e: 9b:9e:2e:6d:00:2f:71:f5:d2:2c:0d:3a:a8:6b:35: 2d:f1:06:d5:bb:99:a2:28:22:c6:7a:2a:5e:49:4b: 7b:29:85:07:0c:82:70:f9:be:cf:e3:54:6d:68:21: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:61:AD:F4:0C:64:2A:27:E4:98:C7:2A:66:39:4E:B3:C9:97:9D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a6c248b-f87d-3453-b7dc-c6b80c3ad5fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6a:6d:60:6d:a9:0e:0d:4a:bf:34:65:26:78:02:d0:1e:dd: ea:21:0f:7e:2e:76:c2:f5:3b:f8:42:f2:03:02:8f:e4:6a:fd: ee:23:81:ed:83:94:c3:c9:2c:00:7d:bb:4d:3c:7a:c1:65:6c: a1:d7:10:78:81:17:a2:69:90:5b:28:81:8e:f5:dd:a2:29:dc: ca:3d:33:24:00:20:f4:67:0c:71:70:97:c1:01:93:39:31:dd: 14:b6:be:2c:2c:7e:6a:38:3e:13:78:22:f6:7c:57:04:e3:e1: 3b:19:c4:4e:f1:14:68:ad:f0:e5:4a:c6:4f:40:b1:05:f6:64: dd:c4:31:c9:bc:c7:4e:11:b8:12:68:3b:9e:1c:f0:a3:bc:1a: c0:e8:61:99:fb:7b:e4:5b:13:a4:2b:65:f1:9b:f4:79:2d:96: c2:c3:d0:34:a8:ef:1e:56:67:fc:42:36:54:2e:ba:be:85:c3: c2:f0:e0:9d:00:aa:ba:64:a6:26:3e:67:d6:c8:1a:55:4a:b4: 3e:de:7d:89:ae:00:b3:45:2b:20:88:74:3f:8b:7f:17:ae:b6: d6:24:17:12:de:19:90:1d:c9:53:33:dd:cd:ed:51:ad:d1:1b: 0e:ec:b4:3a:22:df:0e:60:77:30:1a:ce:ff:e3:d8:6d:e6:3f: 21:42:dd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0U+JcWD0qZMNpMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjhiYzA3ZTktNDhiZS00YmM2LWEzODktZmU1ZDdlZWJhYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOOCZqsUK1xPRpRDLBM0vykrRLyLhjwtPHyz GlQMAgdf1/4+mY9zbLcz98xHOtclsBk/NnGVjGjDqcMUSooWzOl77DS5fruQz0Ng 5VoSKT/dxRjsykubcYDp+HcnLam1Nakf0ef7rHpnRNuaucjwqYkBZlRTTFV2yVhz uMQjuvdQt7hIaeg5QgutcSBUtukgjAPR282X16+2YNGwtdTqVGYf9/6/zUpAjGkU 8pOGILd3F2Wg/27ZIOOCQFTY+3Lxk2ILY4Ekpb1xNmxR3FuTe06bni5tAC9x9dIs DTqoazUt8QbVu5miKCLGeipeSUt7KYUHDIJw+b7P41RtaCGTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhhrfQMZCon5JjHKmY5TrPJl50vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWE2YzI0OGItZjg3ZC0z NDUzLWI3ZGMtYzZiODBjM2FkNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlqbWBtqQ4NSr80ZSZ4AtAe3eohD34udsL1O/hC8gMCj+Rq/e4jge2D lMPJLAB9u008esFlbKHXEHiBF6JpkFsogY713aIp3Mo9MyQAIPRnDHFwl8EBkzkx 3RS2viwsfmo4PhN4IvZ8VwTj4TsZxE7xFGit8OVKxk9AsQX2ZN3EMcm8x04RuBJo O54c8KO8GsDoYZn7e+RbE6QrZfGb9HktlsLD0DSo7x5WZ/xCNlQuur6Fw8Lw4J0A qrpkpiY+Z9bIGlVKtD7efYmuALNFKyCIdD+LfxeuttYkFxLeGZAdyVMz3c3tUa3R Gw7stDoi3w5gdzAazv/j2G3mPyFC3Qo= -----END CERTIFICATE-----Generated at Thu Oct 16 01:28:44 2025 by rpki-client