$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c3f51bb-7252-3af5-8005-aea3fc8673bf.roa File: 1c3f51bb-7252-3af5-8005-aea3fc8673bf.roa (raw, json) Hash identifier: 94JdIcCoUHQeKrGLm2Z4dcbSmdHNkabTo2HnjAZN9cI= Subject key identifier: FA:E4:04:37:4A:61:2D:59:B9:F0:9B:4E:C9:6C:57:A9:61:74:4C:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374AC36F9A0BBAC8E35AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c3f51bb-7252-3af5-8005-aea3fc8673bf.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4a:c3:6f:9a:0b:ba:c8:e3:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=69bffa55-4751-4c90-95c2-7e4a04c13f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:07:9f:6b:2d:b3:e8:f9:36:ad:f9:37:3f: 70:d3:af:2d:d1:da:c1:0a:b3:25:df:54:69:04:7d: 6d:b9:78:b5:05:c2:04:df:5c:5b:d7:51:7b:70:f4: ba:27:ae:63:a9:33:ef:ee:a6:26:36:89:be:4d:2a: 43:f3:c5:36:7b:5a:f4:89:f6:91:be:42:3c:bb:7e: d1:bd:b4:26:12:4b:1e:52:69:92:0b:b9:d0:fc:47: ff:b7:1f:5a:04:1a:83:ad:1c:f9:92:51:c8:76:1a: 1a:41:14:ef:7d:b3:86:b1:48:0e:c5:6d:6e:ac:41: ad:42:fa:8a:79:92:68:86:34:9b:0f:b7:da:65:51: ad:e7:4d:d2:92:bb:dc:f9:92:fe:91:eb:94:3a:8c: af:fc:98:b3:59:0c:5e:68:0f:44:94:7c:70:e4:ea: 9f:12:8f:e9:ab:9e:bd:a1:c5:1c:ee:be:85:68:56: 82:a7:e7:88:21:b2:64:08:89:d7:ad:8d:1b:08:1a: 5d:46:9e:f5:f7:8f:01:55:c4:cf:e2:27:aa:e7:2e: 65:fe:97:4a:06:d0:4f:91:3f:34:67:47:da:52:99: 50:32:77:25:97:06:c3:71:92:12:89:b7:a2:ca:32: 3b:48:59:f1:45:fd:98:c9:8d:3f:78:2f:0e:6d:e1: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:04:37:4A:61:2D:59:B9:F0:9B:4E:C9:6C:57:A9:61:74:4C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c3f51bb-7252-3af5-8005-aea3fc8673bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b7:b0:d2:a8:ed:0c:04:49:5f:a3:d1:4c:fe:0e:e7:af:3c: 6e:9b:32:e4:75:fd:12:2d:94:d7:b5:54:f7:33:0b:bf:41:f2: ae:4d:b7:f1:a0:26:b2:43:5f:30:0c:29:61:5a:8d:8f:d3:1b: 1e:62:65:38:b4:46:56:53:2c:a5:e7:dd:8f:a6:a6:28:ea:4a: 57:16:d4:a1:0b:b9:ca:d5:1a:d0:60:03:30:a2:37:bb:f4:d2: 72:b9:3b:48:6f:20:29:b4:3e:dc:2f:2d:4a:76:fc:06:31:cc: 92:a6:11:88:8b:41:55:d7:19:43:fc:00:ff:9b:c0:37:d1:fd: d4:d2:3a:36:ca:74:49:d7:42:e8:b3:69:19:86:04:36:ea:34: 8d:fc:e2:89:21:18:51:26:ab:22:ca:ba:f7:df:fb:76:12:10: 23:84:f6:e4:40:6a:08:6e:57:f9:0b:c8:27:70:98:5e:66:1e: 86:3d:b2:ee:c8:8b:46:55:e6:c2:42:6b:c6:2a:b2:6d:3e:22: 20:63:93:9e:ba:46:19:0a:c9:d5:19:c4:fe:38:9b:83:39:41: f4:14:5f:0b:90:b5:37:70:ad:0d:78:80:7b:36:87:16:1e:7c: 31:28:f6:89:f0:75:a0:0d:a1:b9:f6:9c:57:1e:1f:29:a9:c9: d4:2e:57:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0rDb5oLusjjWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjliZmZhNTUtNDc1MS00YzkwLTk1YzItN2U0YTA0YzEzZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm78Hn2sts+j5Nq35Nz9w068t0drBCrMl31Rp BH1tuXi1BcIE31xb11F7cPS6J65jqTPv7qYmNom+TSpD88U2e1r0ifaRvkI8u37R vbQmEkseUmmSC7nQ/Ef/tx9aBBqDrRz5klHIdhoaQRTvfbOGsUgOxW1urEGtQvqK eZJohjSbD7faZVGt503Skrvc+ZL+keuUOoyv/JizWQxeaA9ElHxw5OqfEo/pq569 ocUc7r6FaFaCp+eIIbJkCInXrY0bCBpdRp71948BVcTP4ieq5y5l/pdKBtBPkT80 Z0faUplQMncllwbDcZISibeiyjI7SFnxRf2YyY0/eC8ObeFDkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrkBDdKYS1ZufCbTslsV6lhdEyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWMzZjUxYmItNzI1Mi0z YWY1LTgwMDUtYWVhM2ZjODY3M2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+3sNKo7QwESV+j0Uz+DuevPG6bMuR1/RItlNe1VPczC79B8q5Nt/Gg JrJDXzAMKWFajY/TGx5iZTi0RlZTLKXn3Y+mpijqSlcW1KELucrVGtBgAzCiN7v0 0nK5O0hvICm0PtwvLUp2/AYxzJKmEYiLQVXXGUP8AP+bwDfR/dTSOjbKdEnXQuiz aRmGBDbqNI384okhGFEmqyLKuvff+3YSECOE9uRAaghuV/kLyCdwmF5mHoY9su7I i0ZV5sJCa8Yqsm0+IiBjk566RhkKydUZxP44m4M5QfQUXwuQtTdwrQ14gHs2hxYe fDEo9onwdaANobn2nFceHympydQuV1w= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:57 2025 by rpki-client