$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f9d6f67-37e4-308f-962f-a21366721872.roa File: 1f9d6f67-37e4-308f-962f-a21366721872.roa (raw, json) Hash identifier: Hei+IRQWHA7YoXSA4JjC4gb72HixPo4ioYQoUi0itbc= Subject key identifier: 05:7E:6D:5E:5E:94:67:A1:F6:40:8B:F5:62:22:81:9A:22:2E:59:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3745FC75ADD0BE2A884580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f9d6f67-37e4-308f-962f-a21366721872.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:45:fc:75:ad:d0:be:2a:88:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=37045b8f-54fe-47e1-83e6-367f5499d3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:03:6a:51:6d:1e:5f:3c:d6:06:f2:84:01: b2:70:1e:d2:a0:32:d2:c9:0d:be:4d:d8:bd:db:0d: 73:75:81:e4:17:f1:42:0e:6f:f3:a6:a7:2a:e5:ab: 99:13:5e:41:54:58:a4:85:71:88:7a:93:d4:c1:84: b2:1c:78:e3:7d:9f:f6:f0:c0:62:b6:81:ec:62:ea: de:02:3b:01:0a:10:5a:a6:73:eb:77:7b:3f:9d:b4: 1b:55:2f:38:13:2c:5d:cd:4b:5a:5f:ad:d2:cc:fd: d7:4f:ae:a2:b9:04:53:aa:67:55:bb:72:70:36:17: 71:11:f1:52:0e:c3:0f:75:5a:b2:a1:a3:65:e1:69: 97:c8:d8:23:92:01:a5:36:ae:cb:67:2a:aa:d5:cc: 42:ca:34:a3:67:d0:cb:0b:d9:98:b3:0f:ac:fe:87: a4:8c:e3:40:73:12:10:35:2e:f3:ae:e5:80:be:d9: 1c:23:07:00:ce:f8:9d:12:c6:4d:44:42:52:30:c3: 11:7c:ff:92:d6:3b:4f:f0:45:f2:ab:ab:91:5d:e9: 2a:5b:60:5d:df:e7:75:0c:e6:1a:90:cb:13:bb:15: 8b:82:99:24:14:a1:3b:f0:29:a1:ea:82:d6:05:13: 2c:97:ab:2e:3f:98:26:94:f4:12:e8:af:e1:02:32: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:6D:5E:5E:94:67:A1:F6:40:8B:F5:62:22:81:9A:22:2E:59:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f9d6f67-37e4-308f-962f-a21366721872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c9:48:d7:c6:96:e5:75:20:5e:f2:6a:fa:01:ae:cd:b1:7f: 22:9a:51:29:8a:d8:74:9c:61:ba:6f:ae:c0:cb:b1:7d:0b:00: bc:28:27:27:a7:1b:17:94:03:92:30:0b:58:f2:87:70:25:e5: e7:6c:cd:e4:70:81:33:42:0c:fc:ed:c4:bf:a5:01:64:90:05: 0b:1e:6c:e9:2d:85:dc:3a:a1:99:e7:e5:69:82:b4:07:66:11: fb:84:9c:77:23:c9:ec:9e:75:44:b9:a0:b3:d8:49:59:7b:6d: f6:7d:80:78:64:3f:8a:d3:db:6d:a9:3e:5c:92:45:58:4a:c1: af:49:0e:19:b8:68:ff:fc:7b:11:3d:c1:86:8a:b1:66:7f:b6: d3:b4:09:11:41:ec:2e:63:d5:b9:24:11:55:e2:07:2a:13:5a: f1:92:3e:aa:c2:8f:3c:b3:f2:de:62:01:27:7f:4b:bf:b1:87: dd:24:3f:cc:02:bc:64:34:6a:a1:bc:67:d2:2d:11:78:43:c8: 1d:68:2f:64:d3:5b:ee:f8:2b:b3:2a:0d:91:00:cc:ff:e7:9f: fe:29:46:2a:70:d3:a5:4c:c3:b6:da:de:50:e7:9c:9c:50:fd: 30:76:0d:ea:5d:5d:95:26:58:e3:f8:c5:a6:ff:5a:64:9d:f9: 83:9e:d3:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0X8da3QviqIRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzcwNDViOGYtNTRmZS00N2UxLTgzZTYtMzY3ZjU0OTlkM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbsDalFtHl881gbyhAGycB7SoDLSyQ2+Tdi9 2w1zdYHkF/FCDm/zpqcq5auZE15BVFikhXGIepPUwYSyHHjjfZ/28MBitoHsYure AjsBChBapnPrd3s/nbQbVS84EyxdzUtaX63SzP3XT66iuQRTqmdVu3JwNhdxEfFS DsMPdVqyoaNl4WmXyNgjkgGlNq7LZyqq1cxCyjSjZ9DLC9mYsw+s/oekjONAcxIQ NS7zruWAvtkcIwcAzvidEsZNREJSMMMRfP+S1jtP8EXyq6uRXekqW2Bd3+d1DOYa kMsTuxWLgpkkFKE78Cmh6oLWBRMsl6suP5gmlPQS6K/hAjJfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV+bV5elGeh9kCL9WIigZoiLlnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY5ZDZmNjctMzdlNC0z MDhmLTk2MmYtYTIxMzY2NzIxODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGIRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfJSNfGluV1IF7yavoBrs2xfyKaUSmK2HScYbpvrsDLsX0LALwoJyen GxeUA5IwC1jyh3Al5edszeRwgTNCDPztxL+lAWSQBQsebOkthdw6oZnn5WmCtAdm EfuEnHcjyeyedUS5oLPYSVl7bfZ9gHhkP4rT222pPlySRVhKwa9JDhm4aP/8exE9 wYaKsWZ/ttO0CRFB7C5j1bkkEVXiByoTWvGSPqrCjzyz8t5iASd/S7+xh90kP8wC vGQ0aqG8Z9ItEXhDyB1oL2TTW+74K7MqDZEAzP/nn/4pRipw06VMw7ba3lDnnJxQ /TB2DepdXZUmWOP4xab/WmSd+YOe02I= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:46 2025 by rpki-client