$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d796d8c-1f95-3494-8875-1d36b77a7481.roa File: 1d796d8c-1f95-3494-8875-1d36b77a7481.roa (raw, json) Hash identifier: 2Y/rbwDkU1VQnAJ+MWkfinf4708jDuHOizEwWZfoTac= Subject key identifier: 88:12:0A:2D:96:90:40:38:1E:96:33:90:1A:A2:83:3C:C4:E8:CB:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C52FF44484A3AC9895F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d796d8c-1f95-3494-8875-1d36b77a7481.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:52:ff:44:48:4a:3a:c9:89:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=467e635b-f217-46dc-b5d9-02c052a79fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:64:dd:be:ee:29:21:93:08:a1:38:55:5c: 7b:1a:2d:91:f7:4a:7e:6a:34:66:e8:b0:e7:63:90: c6:01:e1:ed:8e:0b:47:86:c2:fe:0a:eb:7f:83:a0: 79:c5:50:9c:39:de:91:d0:73:dc:e4:a6:53:f8:a5: a5:ac:11:55:54:e5:24:e1:22:9a:8a:ab:7c:3a:5a: 6d:45:17:21:47:7b:2f:cf:8d:ae:91:fd:31:d8:70: 70:00:0f:e9:7b:17:3f:62:ac:25:16:f4:10:fa:3f: cb:55:97:88:fe:cc:11:f6:f8:d9:94:8a:97:75:24: 8d:83:f3:7c:63:93:e4:b1:f5:ff:55:11:4f:1d:2e: fd:46:07:2c:5a:a6:4d:11:e9:6a:8c:ae:6a:06:48: cb:00:30:83:d6:53:e6:1a:d5:d8:df:8c:3e:f4:89: 53:6f:c5:be:b7:b3:3a:71:db:78:75:95:7f:aa:a9: d2:ff:58:4a:41:e4:c8:90:fc:c3:6d:ae:2a:67:dc: 90:e3:85:94:dd:dc:29:b4:ba:61:d7:f7:c0:c9:c4: c2:c8:82:09:47:d1:15:8b:13:23:ce:26:26:64:85: 16:77:d8:9e:bc:fd:ab:59:0b:a7:e2:c1:e0:61:c2: e9:68:12:a1:2d:ee:d3:23:ab:9c:ac:72:2b:37:0b: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:12:0A:2D:96:90:40:38:1E:96:33:90:1A:A2:83:3C:C4:E8:CB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d796d8c-1f95-3494-8875-1d36b77a7481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:51:57:25:50:77:60:05:c4:ec:6f:23:85:ba:33:67:ee:13: be:a2:74:82:95:0b:27:b9:17:22:bc:ef:5d:3f:8d:bb:35:81: 34:78:be:43:4a:13:60:85:b6:f0:00:19:f3:bf:9d:89:96:95: 9f:fd:f6:88:25:a3:41:a8:b2:c7:1c:c4:d5:77:a0:db:32:70: 68:fe:e8:97:7a:b7:27:80:31:e3:e3:89:60:72:53:2b:d5:56: 9e:fe:e3:56:10:41:ba:f8:8d:4e:1b:0e:84:fc:6e:53:fe:13: bc:cf:33:8a:70:4f:2c:62:6d:a5:65:22:e2:6c:28:f1:c0:d8: b5:0a:ed:ff:bb:fd:e5:e7:49:ec:ee:af:c1:1f:e8:e6:30:5c: 6e:df:6b:16:12:53:2e:61:cc:39:8a:8c:29:da:96:c5:24:7e: ec:04:b8:c6:c2:ae:62:f2:b2:c0:c5:34:f3:66:5a:a8:9f:a8: 63:00:b9:7d:c8:41:bc:53:92:85:53:b4:7c:e8:16:3b:7a:f1: b3:f8:84:d8:da:22:20:cd:8f:be:d6:b6:81:40:71:ad:56:9d: 0a:0e:e2:68:8b:02:d4:7c:b2:60:07:fd:5f:17:5e:ce:e8:cb: 6a:7a:ba:a9:3d:29:61:e8:e8:0c:d3:31:12:d7:63:aa:34:0b: 5c:b9:b5:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFL/REhKOsmJX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NDY3ZTYzNWItZjIxNy00NmRjLWI1ZDktMDJjMDUyYTc5ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+Jk3b7uKSGTCKE4VVx7Gi2R90p+ajRm6LDn Y5DGAeHtjgtHhsL+Cut/g6B5xVCcOd6R0HPc5KZT+KWlrBFVVOUk4SKaiqt8Olpt RRchR3svz42ukf0x2HBwAA/pexc/YqwlFvQQ+j/LVZeI/swR9vjZlIqXdSSNg/N8 Y5PksfX/VRFPHS79RgcsWqZNEelqjK5qBkjLADCD1lPmGtXY34w+9IlTb8W+t7M6 cdt4dZV/qqnS/1hKQeTIkPzDba4qZ9yQ44WU3dwptLph1/fAycTCyIIJR9EVixMj ziYmZIUWd9ievP2rWQun4sHgYcLpaBKhLe7TI6ucrHIrNwuqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgSCi2WkEA4HpYzkBqigzzE6Mt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ3OTZkOGMtMWY5NS0z NDk0LTg4NzUtMWQzNmI3N2E3NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERRVyVQd2AFxOxvI4W6M2fuE76idIKVCye5FyK8710/jbs1gTR4vkNK E2CFtvAAGfO/nYmWlZ/99oglo0GossccxNV3oNsycGj+6Jd6tyeAMePjiWByUyvV Vp7+41YQQbr4jU4bDoT8blP+E7zPM4pwTyxibaVlIuJsKPHA2LUK7f+7/eXnSezu r8Ef6OYwXG7faxYSUy5hzDmKjCnalsUkfuwEuMbCrmLyssDFNPNmWqifqGMAuX3I QbxTkoVTtHzoFjt68bP4hNjaIiDNj77WtoFAca1WnQoO4miLAtR8smAH/V8XXs7o y2p6uqk9KWHo6AzTMRLXY6o0C1y5tbM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:42 2025 by rpki-client