$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa File: 1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa (raw, json) Hash identifier: ThxineKDvizuJAwaZhRG/6nykZrUZ6eLMv8qDMf5q8I= Subject key identifier: 18:63:0C:4D:8B:CC:8B:4B:73:80:DE:05:FC:9F:3D:55:C8:3B:8C:EE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C49DFE3144DAE6138C900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.226.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:49:df:e3:14:4d:ae:61:38:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3fd61ca2-87a5-42e1-93a0-b83a96701721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:3e:57:af:6c:3b:70:fb:4d:f1:1c:c0:42: 8c:44:a3:53:84:38:d7:34:0a:8f:72:40:d1:84:01: be:5c:46:10:c7:ab:66:9f:85:88:74:1c:97:72:ea: 2b:83:c6:13:8d:4c:e2:cd:1f:96:d3:8a:06:71:53: 59:84:0f:ab:ea:db:ed:39:27:10:59:60:86:81:3f: 94:e0:83:ab:b2:43:18:f3:98:39:bc:7e:18:b5:87: 07:e1:ca:bb:3d:1b:ab:e6:37:c1:70:f7:4f:fa:79: dd:31:23:05:e7:5c:bf:3e:b5:b3:5c:3f:9a:68:73: a8:9a:b6:bc:00:dd:a8:1a:5b:18:6e:8b:9e:8a:25: 35:32:3c:d0:43:65:0d:a3:94:c6:f7:b0:39:91:5e: ff:94:08:84:f5:2b:2d:c9:6c:3e:05:89:37:cb:ea: 03:62:63:54:f0:cf:f0:14:a9:37:c6:1a:b5:47:93: cc:06:67:a8:6c:84:2c:ff:fb:44:ff:5f:9f:71:38: 5b:90:7e:ac:70:ae:7e:63:6e:9c:b5:bf:23:7f:4b: 4a:ba:19:59:3c:c5:b0:73:4c:34:2b:88:98:27:40: c1:94:93:31:50:ed:95:2d:4c:0a:3d:b2:09:e5:3f: 5a:63:c1:61:a2:0f:9c:f4:06:65:2f:ae:20:57:2a: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:0C:4D:8B:CC:8B:4B:73:80:DE:05:FC:9F:3D:55:C8:3B:8C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7d:7b:ca:c1:b1:c5:51:4d:0b:eb:af:7c:9e:b4:8c:9e:46: 9b:a0:9e:42:72:42:e6:f3:6f:c8:17:36:a6:2d:ea:2d:eb:26: 1d:a2:cb:b3:21:76:b7:17:50:80:34:6e:98:5a:99:ae:9e:a9: 1d:a6:63:53:78:1a:ad:4d:d6:eb:66:9c:40:46:3b:44:72:31: 7e:16:cb:65:dd:61:fa:80:14:e7:d6:84:40:96:72:82:8d:80: 68:1d:44:ef:0a:11:6a:d2:ee:45:51:8a:99:92:7f:b6:42:44: e1:e0:33:f8:bb:21:28:fb:da:4b:db:5c:85:dc:99:63:4e:b7: a2:ca:a1:b0:6c:e0:dd:32:7f:57:46:dd:7a:13:7f:cb:62:c3: ec:4e:4c:0e:51:70:97:42:27:bb:05:de:00:e9:65:bf:a2:28: 7d:68:73:7f:38:73:7f:e8:ab:f2:64:f3:a3:64:81:74:a8:80: f9:73:03:0f:6d:5b:a5:b9:3e:81:bd:3a:09:f8:68:18:1a:04: 60:3e:67:f6:d1:ab:b7:db:d6:72:bd:fc:26:4c:58:57:b0:b3: c7:8a:0d:f9:3f:66:69:c6:ba:47:75:92:2b:47:f3:73:28:c0: 9f:5f:e1:ba:30:14:9b:57:9d:df:d7:21:2a:1e:fe:1a:a8:22: ce:6b:90:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEnf4xRNrmE4yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk M2ZkNjFjYTItODdhNS00MmUxLTkzYTAtYjgzYTk2NzAxNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCo+V69sO3D7TfEcwEKMRKNThDjXNAqPckDR hAG+XEYQx6tmn4WIdByXcuorg8YTjUzizR+W04oGcVNZhA+r6tvtOScQWWCGgT+U 4IOrskMY85g5vH4YtYcH4cq7PRur5jfBcPdP+nndMSMF51y/PrWzXD+aaHOomra8 AN2oGlsYboueiiU1MjzQQ2UNo5TG97A5kV7/lAiE9SstyWw+BYk3y+oDYmNU8M/w FKk3xhq1R5PMBmeobIQs//tE/1+fcThbkH6scK5+Y26ctb8jf0tKuhlZPMWwc0w0 K4iYJ0DBlJMxUO2VLUwKPbIJ5T9aY8Fhog+c9AZlL64gVyqVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhjDE2LzItLc4DeBfyfPVXIO4zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWM0ZWNmMTAtYjIxMy0z Yjg5LTlmMmEtOTdhYTM0OTkxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx9e8rBscVRTQvrr3yetIyeRpugnkJyQubzb8gXNqYt6i3rJh2iy7Mh drcXUIA0bphama6eqR2mY1N4Gq1N1utmnEBGO0RyMX4Wy2XdYfqAFOfWhECWcoKN gGgdRO8KEWrS7kVRipmSf7ZCROHgM/i7ISj72kvbXIXcmWNOt6LKobBs4N0yf1dG 3XoTf8tiw+xOTA5RcJdCJ7sF3gDpZb+iKH1oc384c3/oq/Jk86NkgXSogPlzAw9t W6W5PoG9Ogn4aBgaBGA+Z/bRq7fb1nK9/CZMWFews8eKDfk/ZmnGukd1kitH83Mo wJ9f4bowFJtXnd/XISoe/hqoIs5rkOk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:47 2025 by rpki-client