$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa File: 1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa (raw, json) Hash identifier: VAS4KlIi7uXUkEa3UX552LGKIDQmdt19radnVPte9GQ= Subject key identifier: 3E:1C:43:C9:0C:DB:FE:C2:02:E8:8E:AB:6C:5C:37:54:19:AE:65:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FF966402FE3180D82080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ff:96:64:02:fe:31:80:d8:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=30632c54-513e-4b7b-864b-30fe194f1742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:23:e8:d7:1b:b6:8b:6b:04:9a:7d:72:eb: 53:10:0c:d5:9c:73:b4:af:00:f8:8e:4e:27:96:6b: c8:a0:99:42:bf:d7:e4:17:f7:ed:ab:38:f9:6d:07: b0:52:5e:ef:d1:9d:25:0f:05:b1:00:bb:0c:81:2e: 68:5e:e5:4d:20:55:fd:77:49:6b:7f:b8:92:d8:f0: 09:12:25:21:94:07:7e:81:ca:91:16:e8:e9:25:e0: 4b:08:f5:67:04:e5:5a:f7:c3:2b:95:fc:9d:10:76: b3:a4:28:b1:a3:05:ea:f2:62:30:6d:94:b3:e5:27: 42:21:31:d7:2e:0c:c5:ee:73:18:89:80:2a:e4:0e: 89:c6:e0:cc:fb:36:72:55:ac:61:3c:f9:41:af:51: c9:f0:15:37:12:8c:bb:53:01:7e:a0:eb:aa:e9:fc: 4f:3b:10:c0:4a:ab:8c:33:28:06:5d:f8:14:46:80: e0:22:2a:59:99:de:96:9e:40:78:d3:fa:75:cd:f5: 46:06:02:cb:57:83:d7:dd:47:47:74:cf:bc:2c:92: 2a:12:30:ea:68:bf:9c:e2:6e:44:cd:e7:7b:dc:c1: a3:88:2c:aa:2f:3f:72:a2:f7:f2:1c:22:75:34:dd: ca:27:36:04:1f:16:a6:e8:ad:69:35:aa:06:19:da: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1C:43:C9:0C:DB:FE:C2:02:E8:8E:AB:6C:5C:37:54:19:AE:65:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa85377-3e7e-392f-bfaa-cad67c2e2ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:9a:24:34:65:41:f5:5c:9a:1f:2b:6d:22:2e:3d:cd:29:00: 20:e7:bf:9a:1b:d3:1c:08:d4:57:26:6b:f7:cb:10:b6:af:a2: d5:d7:7f:13:4d:57:bf:2c:15:30:fd:84:5a:21:74:eb:48:46: a9:f1:9d:9f:3e:e3:b1:f4:a9:a6:2f:7b:54:4a:78:3c:79:f7: e5:a1:76:53:74:b6:8b:9f:a7:45:4d:16:1e:44:93:91:18:bb: 7a:9d:c8:29:43:cc:e7:61:39:d9:3e:1f:d0:a4:f4:1d:aa:3c: dc:7d:f6:86:52:2e:87:02:e5:aa:ba:eb:69:65:f2:b4:e9:9f: 7c:c3:e0:80:3d:8a:6b:3f:ab:72:9c:dd:fb:df:06:78:cd:5f: 94:10:60:27:0d:e4:94:e3:20:a6:41:1f:55:48:a6:6d:b6:a2: e0:01:99:65:f2:ef:13:fb:17:ac:86:d6:c3:05:cc:3a:8d:e3: 2b:9d:82:26:fd:e7:62:17:7b:9c:9f:a2:75:c7:d7:82:c1:e1: c5:7e:e6:21:69:aa:b0:c0:1b:57:09:b0:8b:94:6c:ff:27:0e: 1d:34:30:0f:93:68:ba:ab:5b:06:3b:9a:20:18:7c:0f:e8:85: 61:08:8c:44:0f:5d:07:f6:c0:52:24:d5:69:ce:ee:0d:76:26: f8:a3:18:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZv+WZAL+MYDYIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MzA2MzJjNTQtNTEzZS00YjdiLTg2NGItMzBmZTE5NGYxNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j4j6NcbtotrBJp9cutTEAzVnHO0rwD4jk4n lmvIoJlCv9fkF/ftqzj5bQewUl7v0Z0lDwWxALsMgS5oXuVNIFX9d0lrf7iS2PAJ EiUhlAd+gcqRFujpJeBLCPVnBOVa98MrlfydEHazpCixowXq8mIwbZSz5SdCITHX LgzF7nMYiYAq5A6JxuDM+zZyVaxhPPlBr1HJ8BU3Eoy7UwF+oOuq6fxPOxDASquM MygGXfgURoDgIipZmd6WnkB40/p1zfVGBgLLV4PX3UdHdM+8LJIqEjDqaL+c4m5E zed73MGjiCyqLz9yovfyHCJ1NN3KJzYEHxam6K1pNaoGGdpjEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4cQ8kM2/7CAuiOq2xcN1QZrmUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFhODUzNzctM2U3ZS0z OTJmLWJmYWEtY2FkNjdjMmUyYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiaJDRlQfVcmh8rbSIuPc0pACDnv5ob0xwI1Fcma/fLELavotXXfxNN V78sFTD9hFohdOtIRqnxnZ8+47H0qaYve1RKeDx59+WhdlN0toufp0VNFh5Ek5EY u3qdyClDzOdhOdk+H9Ck9B2qPNx99oZSLocC5aq662ll8rTpn3zD4IA9ims/q3Kc 3fvfBnjNX5QQYCcN5JTjIKZBH1VIpm22ouABmWXy7xP7F6yG1sMFzDqN4yudgib9 52IXe5yfonXH14LB4cV+5iFpqrDAG1cJsIuUbP8nDh00MA+TaLqrWwY7miAYfA/o hWEIjEQPXQf2wFIk1WnO7g12JvijGF8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:46 2025 by rpki-client