$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa File: 214cbfa4-dda2-3cf0-bd78-377280372513.roa (raw, json) Hash identifier: 2TNYGb/+imKEAWah2AX7FEuJsvNXUoZOOCkAQvsta8w= Subject key identifier: 55:99:65:20:54:A0:36:FA:7A:0C:D7:5C:1A:F1:75:08:B7:AB:62:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C26645A50A34A7DE39C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:26:64:5a:50:a3:4a:7d:e3:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=c0d3ad1b-ec0e-4970-95b0-7909af81c461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:f7:07:79:2f:eb:8e:86:76:10:70:f8:32: b0:aa:13:1a:c5:68:a6:97:b4:4b:0b:c9:c9:df:ab: 99:6d:16:4b:a6:83:e2:35:22:9f:5a:9a:9e:01:e0: 5e:ad:c9:c3:31:ac:15:44:ab:2e:7d:c7:ba:af:fd: 0e:e7:05:ee:65:6f:b8:90:9a:bc:6e:25:57:fa:b3: 59:ae:24:cd:90:17:3b:d1:6e:2c:a2:f1:29:74:56: 4e:80:01:3a:aa:87:35:4d:07:ae:99:87:2b:cd:c2: 12:61:dc:6d:64:8f:1a:5a:f8:2a:d1:5d:80:63:a0: ad:1c:e0:37:5e:24:8f:cc:a6:3e:8e:6a:59:f7:2e: 77:31:61:88:ca:19:55:3b:02:f1:86:aa:8d:09:6a: 16:13:25:7b:85:d4:1b:5e:15:6b:82:52:5b:8c:97: 9b:45:1e:1a:c8:b6:37:3b:71:dc:9c:a4:04:b2:f5: 8f:24:ae:9d:23:05:65:c2:b3:65:fe:d5:37:b4:4d: 7e:d6:c4:fc:9e:e6:36:e4:1f:f7:49:aa:4a:15:e9: 4f:de:f5:49:ed:f0:7a:16:f7:e1:4c:9b:01:f2:11: 42:ee:9d:4a:b9:85:a4:22:f8:e7:9a:b1:1a:a7:ea: d2:af:52:06:c9:b3:2a:d5:b0:bc:98:57:6f:f1:58: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:65:20:54:A0:36:FA:7A:0C:D7:5C:1A:F1:75:08:B7:AB:62:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:67:a5:83:54:4c:f3:18:5a:62:0b:91:b8:26:bb:56:7e:71: 9c:9d:09:4f:f5:17:cc:5a:59:62:e8:ef:af:70:b1:e6:a3:ad: 31:13:cf:b0:ab:53:27:e6:16:85:d7:43:5c:0d:51:e7:5b:15: 98:ba:52:5c:6b:81:21:1a:ae:5d:f3:61:83:9f:17:8b:f8:56: 78:fb:ef:f7:34:16:1c:6f:ff:5b:33:87:d2:ff:6b:7f:5c:45: 36:5a:66:b9:2f:57:a5:d2:cc:ad:38:03:61:17:b9:fb:3b:71: 8f:1c:d1:2f:87:25:35:86:cf:fd:51:ae:fa:28:40:86:95:6b: 7d:3a:58:89:87:a3:a9:93:12:ba:a7:35:92:4c:78:1f:71:34: a6:ac:85:35:f5:d5:41:ee:89:d3:0e:12:3f:90:d4:9f:53:2b: c6:f1:22:a4:3d:0a:53:b1:5a:c5:45:63:73:2b:1e:d5:ed:45: 4c:ef:ca:90:f0:08:a8:50:2e:9a:b2:11:e6:46:fe:dc:3e:da: 62:e7:2c:d5:fa:90:ee:6c:57:01:fc:02:3a:1b:e5:01:02:cc: f9:ca:81:a2:93:13:68:10:51:ee:17:9e:c0:63:fc:67:87:ec: 12:b7:04:2a:29:c1:63:b4:1a:b9:15:da:d1:76:ba:af:04:9f: 70:85:9b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCZkWlCjSn3jnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YzBkM2FkMWItZWMwZS00OTcwLTk1YjAtNzkwOWFmODFjNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP33B3kv646GdhBw+DKwqhMaxWiml7RLC8nJ 36uZbRZLpoPiNSKfWpqeAeBercnDMawVRKsufce6r/0O5wXuZW+4kJq8biVX+rNZ riTNkBc70W4sovEpdFZOgAE6qoc1TQeumYcrzcISYdxtZI8aWvgq0V2AY6CtHOA3 XiSPzKY+jmpZ9y53MWGIyhlVOwLxhqqNCWoWEyV7hdQbXhVrglJbjJebRR4ayLY3 O3HcnKQEsvWPJK6dIwVlwrNl/tU3tE1+1sT8nuY25B/3SapKFelP3vVJ7fB6Fvfh TJsB8hFC7p1KuYWkIvjnmrEap+rSr1IGybMq1bC8mFdv8VhVmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWZZSBUoDb6egzXXBrxdQi3q2LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE0Y2JmYTQtZGRhMi0z Y2YwLWJkNzgtMzc3MjgwMzcyNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZnpYNUTPMYWmILkbgmu1Z+cZydCU/1F8xaWWLo769wseajrTETz7Cr UyfmFoXXQ1wNUedbFZi6UlxrgSEarl3zYYOfF4v4Vnj77/c0Fhxv/1szh9L/a39c RTZaZrkvV6XSzK04A2EXufs7cY8c0S+HJTWGz/1RrvooQIaVa306WImHo6mTErqn NZJMeB9xNKashTX11UHuidMOEj+Q1J9TK8bxIqQ9ClOxWsVFY3MrHtXtRUzvypDw CKhQLpqyEeZG/tw+2mLnLNX6kO5sVwH8Ajob5QECzPnKgaKTE2gQUe4XnsBj/GeH 7BK3BCopwWO0GrkV2tF2uq8En3CFmw4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:56 2025 by rpki-client