$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/215730ed-44e3-3978-89f6-96888494b404.roa File: 215730ed-44e3-3978-89f6-96888494b404.roa (raw, json) Hash identifier: prMtX0fALRq2YX8ZQKuSb1x+RQ7RisIdUg9B3SznEm8= Subject key identifier: 59:EE:67:85:4D:F5:7B:DA:75:B6:FA:96:17:FA:5F:CB:B1:65:6C:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F791FF551ECBCAD44680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/215730ed-44e3-3978-89f6-96888494b404.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f7:91:ff:55:1e:cb:ca:d4:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=cde9b4c7-38b1-434b-a2cc-44981dc5c0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:90:63:6d:61:79:0e:94:c8:f3:23:fb:66:04: 38:f0:60:7a:12:01:1a:f0:49:ab:3d:b2:8d:82:64: 3f:b5:aa:6c:9d:93:c0:4f:4c:1b:e1:f4:2a:ac:d7: a2:f5:c9:c8:55:af:e6:29:86:8b:0e:79:54:3d:42: b4:91:3f:1b:7f:e1:52:f0:25:08:2e:48:d2:21:99: 35:95:62:7b:cc:e4:23:e2:95:a0:72:35:4e:60:86: 92:23:cb:76:c8:dc:51:91:d5:b0:76:90:ee:91:4a: 1f:b4:fe:6a:88:5c:a5:5c:b9:58:30:c8:ae:34:72: 94:26:43:5c:d0:54:5c:ca:f3:6f:ee:fe:56:41:ce: cf:11:d8:17:a0:f1:34:3d:81:27:ac:1e:73:6a:66: 4a:6a:9a:56:3a:38:95:2a:88:8b:45:ad:84:d3:94: 54:9d:17:08:ff:6d:7a:6d:9e:a4:28:45:10:8d:f5: d9:a6:26:0e:d6:5e:10:ac:92:91:71:f1:e8:e0:32: 3a:ac:bb:5e:12:bd:ce:f1:dc:3a:fe:11:9b:31:2e: c2:7b:cc:84:ed:cd:c1:09:14:03:9a:38:58:1f:8b: 0b:49:3e:70:08:05:1b:a2:3b:12:6f:3b:d9:97:2e: c7:b8:3a:e2:16:bf:b3:33:19:70:76:f5:66:a0:30: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EE:67:85:4D:F5:7B:DA:75:B6:FA:96:17:FA:5F:CB:B1:65:6C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/215730ed-44e3-3978-89f6-96888494b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:44:1b:7a:d0:ce:9b:2f:5c:7d:1e:6d:e1:83:71:eb:fd:8b: 86:68:6f:b0:13:18:41:c3:e4:57:8f:e4:bd:1e:7d:3a:34:ca: 3f:83:69:7d:57:b4:8e:a0:07:0c:55:27:3c:fd:31:b7:73:39: 39:31:3b:27:3e:1b:0d:36:da:4e:a3:4d:71:78:2b:f9:78:4f: 08:4d:dc:6f:66:f5:4d:e6:65:24:73:66:b9:2d:82:7d:11:03: 52:5a:96:8e:7d:d7:5c:c5:bb:2b:ff:e4:96:79:95:5f:06:4f: a0:70:20:0e:7a:ca:0d:89:33:6e:ee:0e:7b:9e:43:5a:01:3c: 9f:2a:d1:8a:51:e8:05:e6:a5:98:4e:91:bb:7e:55:1b:10:2c: 1b:77:8d:9c:af:c0:a4:49:f7:38:a6:07:a3:5d:08:e6:3e:f7: e8:0d:6a:82:23:fb:d1:c9:44:45:b5:7c:ba:46:fc:68:07:53: 5f:c5:de:2d:34:8d:88:d0:81:62:d8:31:ac:b3:ce:a6:64:c8: 80:7f:04:5c:66:0a:b5:7d:05:cc:6d:e2:c4:6a:ce:c8:6d:94: 21:b6:24:0a:79:fe:da:cf:c3:be:52:66:50:98:a7:07:22:61: d8:df:10:20:20:f2:40:41:e5:c1:27:b1:d0:2b:32:40:94:a8: 04:27:88:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZveR/1Uey8rURoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2RlOWI0YzctMzhiMS00MzRiLWEyY2MtNDQ5ODFkYzVjMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZBjbWF5DpTI8yP7ZgQ48GB6EgEa8EmrPbKN gmQ/tapsnZPAT0wb4fQqrNei9cnIVa/mKYaLDnlUPUK0kT8bf+FS8CUILkjSIZk1 lWJ7zOQj4pWgcjVOYIaSI8t2yNxRkdWwdpDukUoftP5qiFylXLlYMMiuNHKUJkNc 0FRcyvNv7v5WQc7PEdgXoPE0PYEnrB5zamZKappWOjiVKoiLRa2E05RUnRcI/216 bZ6kKEUQjfXZpiYO1l4QrJKRcfHo4DI6rLteEr3O8dw6/hGbMS7Ce8yE7c3BCRQD mjhYH4sLST5wCAUbojsSbzvZly7HuDriFr+zMxlwdvVmoDBlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnuZ4VN9Xvadbb6lhf6X8uxZWyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE1NzMwZWQtNDRlMy0z OTc4LTg5ZjYtOTY4ODg0OTRiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhEG3rQzpsvXH0ebeGDcev9i4Zob7ATGEHD5FeP5L0efTo0yj+DaX1X tI6gBwxVJzz9MbdzOTkxOyc+Gw022k6jTXF4K/l4TwhN3G9m9U3mZSRzZrktgn0R A1Jalo5911zFuyv/5JZ5lV8GT6BwIA56yg2JM27uDnueQ1oBPJ8q0YpR6AXmpZhO kbt+VRsQLBt3jZyvwKRJ9zimB6NdCOY+9+gNaoIj+9HJREW1fLpG/GgHU1/F3i00 jYjQgWLYMayzzqZkyIB/BFxmCrV9Bcxt4sRqzshtlCG2JAp5/trPw75SZlCYpwci YdjfECAg8kBB5cEnsdArMkCUqAQniE8= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:50 2025 by rpki-client