$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e77c430-3ddd-3308-a2e4-32163144541b.roa File: 1e77c430-3ddd-3308-a2e4-32163144541b.roa (raw, json) Hash identifier: Bx0vrS4Hx4i60wQS+31jZg7ezJy8o3Z+/5bF3ddnmHU= Subject key identifier: ED:53:C4:47:8E:D2:C0:AA:CB:E9:EC:ED:85:19:88:42:AD:CD:FF:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206701A3A70607A48E9A1B70 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e77c430-3ddd-3308-a2e4-32163144541b.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.229.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:01:a3:a7:06:07:a4:8e:9a:1b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=1c50594d-4fb7-4de4-a958-ca82143f9c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:82:db:15:54:29:6a:e0:ba:bc:de:99:5c: f0:90:71:41:3c:76:c9:29:88:fa:4e:db:02:b8:9d: d5:3a:68:40:12:7f:19:c8:d0:36:fd:3a:56:cc:2a: da:69:2a:01:96:96:81:cd:95:3d:7b:62:b8:fd:2c: df:01:37:93:d9:f9:b1:c6:de:b0:62:80:87:c1:48: 0c:65:ae:14:93:b0:9e:8e:3f:ec:54:a0:0b:ae:02: 1b:bc:10:03:b3:96:6d:75:d7:45:1e:df:3a:90:de: 1b:f4:d3:d7:21:1b:23:3a:99:3a:ac:f0:3d:2b:4b: f5:8d:29:ce:29:ec:f8:5e:71:ed:28:49:1e:90:60: 35:ae:d9:de:69:fa:de:08:ad:35:b7:fe:8f:12:ec: 0e:8a:79:64:dd:d5:32:04:2a:72:e8:f6:ef:b2:d6: 99:5d:42:f4:f4:1b:5a:5f:ec:55:64:ea:42:74:c1: f6:f2:a2:e8:73:da:f5:dd:1d:f1:40:0c:1b:d5:47: f2:e3:d8:8b:ad:f2:51:71:02:e8:2e:8f:21:9e:82: e5:c6:3e:8e:56:4d:56:91:2a:fd:9f:4d:bf:c7:fc: 1e:39:6e:47:f4:cf:f4:5a:09:8d:0d:38:f3:c5:a8: af:3e:c8:41:a2:8d:d8:8d:f3:72:6e:ad:84:7e:bb: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:53:C4:47:8E:D2:C0:AA:CB:E9:EC:ED:85:19:88:42:AD:CD:FF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e77c430-3ddd-3308-a2e4-32163144541b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:86:84:43:4c:ea:34:07:9e:f7:e5:98:8b:57:d4:45:20:5e: 83:fa:cf:81:7b:c4:3b:9a:50:11:79:51:4d:3b:f7:9f:3a:14: 23:e6:83:13:a0:0f:75:41:98:04:c4:be:01:6a:9d:65:60:a3: 6a:56:92:99:51:ea:9b:19:48:ba:49:d0:99:3e:43:18:8b:87: d0:f3:e5:3b:72:57:12:e6:e7:14:a1:9c:30:6b:a1:1f:a3:ec: 1d:28:bf:cb:4d:20:8d:fb:98:9b:77:af:ab:65:05:ff:d3:98: 0a:b9:ea:5a:db:08:ce:2d:7d:52:a5:9b:2e:e5:0e:a5:30:16: 3d:68:78:b5:78:79:4f:23:a0:f4:62:b3:15:2e:ec:19:77:1d: de:a6:60:38:41:28:e9:bb:52:7c:87:bb:8c:45:c8:d9:63:b8: 85:57:ae:40:4a:11:1b:b0:31:03:28:3b:f3:a8:7b:76:e6:dd: 58:bd:3a:ca:4b:f2:8c:28:09:22:3e:f9:1b:68:24:87:ec:e5: 7e:c2:60:b3:33:74:68:24:39:67:e6:5c:e3:ed:a1:85:d0:e4: c6:35:2d:94:63:9a:80:c6:b9:ad:7f:b3:b0:09:64:45:fe:7c: 21:17:8f:cc:0a:49:8e:26:c0:66:3d:4d:90:38:e0:b1:1b:68: c6:8e:bb:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwGjpwYHpI6aG3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MWM1MDU5NGQtNGZiNy00ZGU0LWE5NTgtY2E4MjE0M2Y5YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbqC2xVUKWrgurzemVzwkHFBPHbJKYj6TtsC uJ3VOmhAEn8ZyNA2/TpWzCraaSoBlpaBzZU9e2K4/SzfATeT2fmxxt6wYoCHwUgM Za4Uk7Cejj/sVKALrgIbvBADs5ZtdddFHt86kN4b9NPXIRsjOpk6rPA9K0v1jSnO Kez4XnHtKEkekGA1rtneafreCK01t/6PEuwOinlk3dUyBCpy6PbvstaZXUL09Bta X+xVZOpCdMH28qLoc9r13R3xQAwb1Ufy49iLrfJRcQLoLo8hnoLlxj6OVk1WkSr9 n02/x/weOW5H9M/0WgmNDTjzxaivPshBoo3YjfNybq2EfrspgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1TxEeO0sCqy+ns7YUZiEKtzf+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWU3N2M0MzAtM2RkZC0z MzA4LWEyZTQtMzIxNjMxNDQ1NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqGhENM6jQHnvflmItX1EUgXoP6z4F7xDuaUBF5UU079586FCPmgxOg D3VBmATEvgFqnWVgo2pWkplR6psZSLpJ0Jk+QxiLh9Dz5TtyVxLm5xShnDBroR+j 7B0ov8tNII37mJt3r6tlBf/TmAq56lrbCM4tfVKlmy7lDqUwFj1oeLV4eU8joPRi sxUu7Bl3Hd6mYDhBKOm7UnyHu4xFyNljuIVXrkBKERuwMQMoO/Ooe3bm3Vi9OspL 8owoCSI++RtoJIfs5X7CYLMzdGgkOWfmXOPtoYXQ5MY1LZRjmoDGua1/s7AJZEX+ fCEXj8wKSY4mwGY9TZA44LEbaMaOu7E= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:58 2025 by rpki-client