$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f765124-fd5d-3d25-9752-b390b66ac0a5.roa File: 1f765124-fd5d-3d25-9752-b390b66ac0a5.roa (raw, json) Hash identifier: 6yweD7SvICmY6XN7a0GzX6PyovVEgVXs9LzESmC7La4= Subject key identifier: 11:64:7A:8B:C9:69:67:F7:3A:00:4E:B5:DB:47:FD:47:26:71:7E:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C37462FF589DD9C8D90F600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f765124-fd5d-3d25-9752-b390b66ac0a5.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:46:2f:f5:89:dd:9c:8d:90:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=515c5ed4-237f-49a9-9ff4-5dfa4809d231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:3d:24:e6:b2:00:17:ad:c8:3b:d6:86:46: 9e:ae:d0:5f:96:31:62:c4:48:58:96:6a:f8:69:8e: bf:01:ed:6c:56:92:d9:b3:c4:d1:4a:a8:1d:19:d7: 04:f4:71:be:19:13:2b:6e:a9:79:a2:d8:1b:b5:11: 8a:ad:8f:a3:83:fe:0a:05:b7:07:53:7e:d1:19:82: 5b:a1:49:ef:ad:e8:d3:a3:06:12:f2:c4:ad:3d:1d: ce:8f:8f:a5:ab:62:c0:8e:c9:7c:29:c3:3d:f4:d2: 9d:87:a4:82:d0:4d:fa:87:c8:6a:5b:9d:ae:80:1e: 79:98:a6:09:36:3a:15:06:84:ed:ae:8b:42:00:ce: 99:27:11:b7:35:45:b5:87:22:b2:89:95:e8:29:a0: 18:72:af:5b:f4:3f:e7:91:c5:1c:c0:ff:b8:c8:17: 08:28:db:f2:43:72:4e:15:17:41:36:99:a0:8f:21: 60:23:e7:bb:16:ec:12:46:87:b2:99:9c:53:f3:64: 9e:32:f9:9a:9d:3d:09:28:70:ef:65:dc:a3:70:eb: 70:72:2a:5a:e4:23:ef:6a:cf:49:e8:af:f3:13:db: 28:02:3a:cb:1c:1a:cd:a0:aa:02:65:1f:62:5c:ff: 9b:ff:a2:d9:e2:7b:34:25:f9:dc:c8:ce:bd:fa:d8: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:7A:8B:C9:69:67:F7:3A:00:4E:B5:DB:47:FD:47:26:71:7E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f765124-fd5d-3d25-9752-b390b66ac0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:00:74:91:e7:0d:a5:aa:c5:dd:73:5e:c6:7d:3d:15:a3:9e: 1e:bf:aa:f7:39:66:ba:c6:6a:9b:2f:96:00:af:14:c6:9a:4b: 7b:5f:42:5a:66:32:b0:a2:5f:0f:2a:0b:dc:d4:8e:e0:18:fc: 02:c6:d3:bc:fd:3b:b3:31:8a:7d:8b:34:10:f1:19:f0:55:50: 08:1b:82:05:d8:43:54:a1:a6:92:17:2a:64:a1:e7:bd:a7:ea: 11:46:e0:e4:59:4e:5d:49:f7:92:f6:ad:5a:fa:0c:f7:e0:22: 2b:f0:09:82:ba:89:ed:f6:8c:76:a3:e7:5e:79:11:90:6f:eb: 8b:39:c1:fd:a9:d1:78:f5:e9:c0:c8:de:e8:d6:b1:87:b5:6c: 96:27:f6:3c:69:ed:7e:a7:8f:5f:95:76:1e:18:79:c3:83:f0: 1f:b1:80:c8:33:6b:57:a7:2c:19:53:92:ef:77:47:8c:c8:01: 3c:2b:d3:0b:99:b3:b5:b1:d5:fb:fa:af:3a:9b:87:71:63:9a: 96:21:79:9f:c2:6a:05:5c:0d:57:52:40:b1:e3:ab:64:c9:35: fc:15:2c:84:31:b5:93:41:d8:e4:71:de:67:a7:22:70:99:dc: 34:00:1f:55:22:65:bf:da:27:ce:2a:33:57:84:cf:b2:f1:e6: e6:bb:d1:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0Yv9YndnI2Q9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTE1YzVlZDQtMjM3Zi00OWE5LTlmZjQtNWRmYTQ4MDlkMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xQ9JOayABetyDvWhkaertBfljFixEhYlmr4 aY6/Ae1sVpLZs8TRSqgdGdcE9HG+GRMrbql5otgbtRGKrY+jg/4KBbcHU37RGYJb oUnvrejTowYS8sStPR3Oj4+lq2LAjsl8KcM99NKdh6SC0E36h8hqW52ugB55mKYJ NjoVBoTtrotCAM6ZJxG3NUW1hyKyiZXoKaAYcq9b9D/nkcUcwP+4yBcIKNvyQ3JO FRdBNpmgjyFgI+e7FuwSRoeymZxT82SeMvmanT0JKHDvZdyjcOtwcipa5CPvas9J 6K/zE9soAjrLHBrNoKoCZR9iXP+b/6LZ4ns0JfncyM69+tjHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFkeovJaWf3OgBOtdtH/UcmcX6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY3NjUxMjQtZmQ1ZC0z ZDI1LTk3NTItYjM5MGI2NmFjMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsAdJHnDaWqxd1zXsZ9PRWjnh6/qvc5ZrrGapsvlgCvFMaaS3tfQlpm MrCiXw8qC9zUjuAY/ALG07z9O7Mxin2LNBDxGfBVUAgbggXYQ1ShppIXKmSh572n 6hFG4ORZTl1J95L2rVr6DPfgIivwCYK6ie32jHaj5155EZBv64s5wf2p0Xj16cDI 3ujWsYe1bJYn9jxp7X6nj1+Vdh4YecOD8B+xgMgza1enLBlTku93R4zIATwr0wuZ s7Wx1fv6rzqbh3FjmpYheZ/CagVcDVdSQLHjq2TJNfwVLIQxtZNB2ORx3menInCZ 3DQAH1UiZb/aJ84qM1eEz7Lx5ua70QE= -----END CERTIFICATE-----Generated at Thu Oct 16 01:34:40 2025 by rpki-client