$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f1aa709-720d-3599-9b4c-5462e3875f92.roa File: 1f1aa709-720d-3599-9b4c-5462e3875f92.roa (raw, json) Hash identifier: eZHhNnCBExGTsAq7PvxEtgK/QLQ5Rul7cwVF3smSPn8= Subject key identifier: 2F:5D:7C:0D:DA:30:CC:E1:19:D6:34:F7:D6:FE:9E:8A:13:49:FB:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C5236A5939096326761CC Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f1aa709-720d-3599-9b4c-5462e3875f92.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:52:36:a5:93:90:96:32:67:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=91a628bd-d90e-4149-9a11-70b0af670a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:17:c9:07:5d:76:cc:6d:ef:49:47:bb:13: d5:3e:b6:28:62:80:57:38:26:49:9d:93:f7:67:61: cd:20:2a:2f:80:50:d5:00:69:4b:cb:39:be:bf:5a: ab:45:71:9d:54:ee:1d:99:28:57:c4:3d:e1:f6:5a: ae:8d:9d:96:c1:e8:e5:d5:be:5d:d5:27:bd:79:b8: 84:29:b8:b1:ee:a3:16:96:82:4b:56:c6:d0:9f:5e: fb:04:af:7d:49:30:90:0f:14:86:56:72:1b:a1:5a: e8:3f:22:f6:7e:93:6c:c1:b3:a1:0f:56:44:c5:74: 88:68:5d:df:f6:04:c9:9c:a9:c7:87:19:42:fb:a6: 5a:3b:7a:9c:2b:41:c8:15:a8:c3:00:8d:03:68:2f: e0:2c:b5:32:1d:4c:3b:ad:72:74:52:03:7c:79:68: 8a:a2:8b:b8:8a:19:50:29:f0:62:ed:ef:24:ff:81: 00:16:59:b6:21:89:f9:58:7f:28:61:4b:01:2f:73: 9b:0b:95:9a:84:e6:c5:e9:70:3f:e2:59:46:20:a7: 8c:41:8d:ab:05:29:b0:ff:71:50:0c:f4:83:8c:bc: 68:0a:1e:d3:3a:ba:07:91:5a:99:6d:4a:96:13:dd: 74:62:db:24:9e:82:af:49:4f:ac:7f:ec:c7:33:f2: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5D:7C:0D:DA:30:CC:E1:19:D6:34:F7:D6:FE:9E:8A:13:49:FB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f1aa709-720d-3599-9b4c-5462e3875f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ba:5c:49:19:a9:a5:41:2b:83:72:6a:5a:e9:a5:a8:97:ac: ab:09:e1:97:07:08:14:cd:a9:c1:d4:eb:d0:e8:59:7a:23:98: 32:c1:3f:86:6f:4a:96:60:96:d3:85:3d:04:9b:f3:55:c3:db: 4c:9e:01:3b:38:f9:8c:8c:35:2a:ee:cf:e2:c2:44:04:8e:f9: 7b:56:09:aa:19:c2:70:46:f6:52:a9:1c:b4:41:b8:48:20:36: bd:35:7d:6c:ff:37:b3:64:04:4c:a0:01:87:4b:a4:13:7f:ea: ba:7b:f2:c6:71:35:c4:d9:3b:67:dc:ec:f6:55:2a:43:79:f5: 71:21:1c:35:f4:31:13:2d:3e:d3:07:25:e4:4b:5b:47:5d:fd: 9b:73:ea:c7:c4:c0:9e:e4:72:70:44:4f:65:a4:28:bc:52:fe: 8f:a0:59:ae:ed:dc:46:31:e4:56:f8:e9:6d:22:71:e7:1b:2a: 04:ca:d3:35:6f:8f:c0:08:1b:43:e8:8c:b4:74:12:68:4e:9d: ed:12:4d:a4:4b:55:cd:2e:84:15:73:44:aa:29:b8:f7:1a:bf: 46:2a:72:ab:c3:2b:64:bc:6f:89:14:e0:1e:9f:7d:aa:fb:7c: cd:2d:aa:14:78:5f:51:ae:b3:4e:12:79:3b:6c:e5:e3:37:d0: c2:b3:79:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFI2pZOQljJnYcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk OTFhNjI4YmQtZDkwZS00MTQ5LTlhMTEtNzBiMGFmNjcwYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpkXyQdddsxt70lHuxPVPrYoYoBXOCZJnZP3 Z2HNICovgFDVAGlLyzm+v1qrRXGdVO4dmShXxD3h9lqujZ2Wwejl1b5d1Se9ebiE Kbix7qMWloJLVsbQn177BK99STCQDxSGVnIboVroPyL2fpNswbOhD1ZExXSIaF3f 9gTJnKnHhxlC+6ZaO3qcK0HIFajDAI0DaC/gLLUyHUw7rXJ0UgN8eWiKoou4ihlQ KfBi7e8k/4EAFlm2IYn5WH8oYUsBL3ObC5WahObF6XA/4llGIKeMQY2rBSmw/3FQ DPSDjLxoCh7TOroHkVqZbUqWE910YtsknoKvSU+sf+zHM/K0bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9dfA3aMMzhGdY099b+nooTSftrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWYxYWE3MDktNzIwZC0z NTk5LTliNGMtNTQ2MmUzODc1ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq6XEkZqaVBK4NyalrppaiXrKsJ4ZcHCBTNqcHU69DoWXojmDLBP4Zv SpZgltOFPQSb81XD20yeATs4+YyMNSruz+LCRASO+XtWCaoZwnBG9lKpHLRBuEgg Nr01fWz/N7NkBEygAYdLpBN/6rp78sZxNcTZO2fc7PZVKkN59XEhHDX0MRMtPtMH JeRLW0dd/Ztz6sfEwJ7kcnBET2WkKLxS/o+gWa7t3EYx5Fb46W0icecbKgTK0zVv j8AIG0PojLR0EmhOne0STaRLVc0uhBVzRKopuPcav0YqcqvDK2S8b4kU4B6ffar7 fM0tqhR4X1Gus04SeTts5eM30MKzebo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:06 2025 by rpki-client