$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa File: 24852c38-21d4-3340-ad31-087aec7f9bba.roa (raw, json) Hash identifier: pATR64jw5AGW7IkMjZ7FxXMrWlS/z6dL31ubhE7iDb0= Subject key identifier: 1F:F1:A5:13:36:6F:E3:FD:80:ED:C7:CC:BB:13:D6:25:91:12:01:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F6C7CD2E2E5EE23F0F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f6:c7:cd:2e:2e:5e:e2:3f:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=0d9c75ef-7521-4a83-8597-cf2739e84797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:55:e4:1d:1c:02:34:90:bf:84:51:0d:46:36: c7:33:c6:ce:b1:56:b6:fc:13:a7:a1:0f:87:20:99: c3:28:d3:fd:dd:6f:92:7d:47:4a:ff:7d:3d:b7:3b: 62:6a:61:fb:a7:48:ce:7c:f3:76:e4:10:64:9c:3f: 78:33:f3:87:4e:db:18:d0:fb:03:62:9b:99:79:06: f8:d9:44:b8:ca:8d:96:21:19:12:65:6d:3d:be:ef: 3c:3d:14:e5:da:52:69:2a:0f:a7:98:5c:a8:3d:e5: 4d:1f:7a:aa:14:33:2f:73:5a:8c:47:6c:62:cd:c2: 3b:14:52:8f:bc:fe:f5:67:36:1d:0f:a4:41:24:42: 8b:26:4f:97:03:05:48:89:5f:79:3f:4d:19:73:ed: 2f:60:4a:5b:4d:b3:51:fc:2c:7b:c3:11:32:0f:f0: 61:b6:21:be:ce:18:61:ec:02:e4:a5:81:a7:b6:cc: ed:c3:52:6c:b8:c3:33:f9:18:e8:c0:26:fe:c5:1a: 57:31:a6:83:2e:1f:ad:96:91:6a:f0:63:29:0a:f7: b1:b5:2c:a1:35:14:3b:42:20:91:e3:b8:02:d5:c2: ec:11:1c:e6:57:d2:92:2d:5c:8d:ca:4e:40:2c:15: 93:31:8e:ba:a2:69:c6:cb:91:62:6b:9f:c4:8d:74: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:A5:13:36:6F:E3:FD:80:ED:C7:CC:BB:13:D6:25:91:12:01:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6e:8e:2a:e2:f4:cb:8e:93:32:37:81:30:62:1d:cc:2b:97: 68:2e:9f:f6:38:0e:17:88:a2:03:6a:aa:bc:4a:85:d6:95:b7: 25:f3:e6:6b:c4:2c:1c:a2:c6:9f:60:5c:0d:a8:34:27:33:7e: f0:7c:0a:68:0f:43:37:2f:71:0f:66:1a:7b:a2:b5:76:da:83: b4:8e:0f:cf:8a:f1:b3:15:45:db:b7:f6:20:31:7e:d7:a6:5c: ef:03:de:ae:d2:97:1d:84:da:10:bf:26:57:9c:e6:2a:f9:eb: bd:5d:bd:78:13:ab:c3:f4:97:c4:e8:d2:18:b7:d8:2a:75:2c: 63:d8:e9:4e:d1:26:6d:36:30:39:fa:53:80:be:f1:56:03:56: df:d8:fd:9b:56:fd:4f:af:93:fc:4b:5e:2d:aa:1e:75:33:8a: 47:e5:88:f3:44:11:00:8c:4e:d7:d8:03:05:b2:4c:f0:94:de: e3:bf:49:62:d2:87:70:2b:90:55:fe:1e:ec:a9:50:76:69:ef: 5d:6b:1a:5c:de:dd:ab:1f:23:d0:cf:30:ea:e8:37:55:f8:9d: 8c:04:1e:41:34:d9:ca:48:64:dd:b3:16:ab:f6:0d:16:a5:8a: 49:cb:b9:55:70:39:42:31:0f:aa:1f:be:4b:3c:b4:4f:60:bd: 61:64:31:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvbHzS4uXuI/D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGQ5Yzc1ZWYtNzUyMS00YTgzLTg1OTctY2YyNzM5ZTg0Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51XkHRwCNJC/hFENRjbHM8bOsVa2/BOnoQ+H IJnDKNP93W+SfUdK/309tztiamH7p0jOfPN25BBknD94M/OHTtsY0PsDYpuZeQb4 2US4yo2WIRkSZW09vu88PRTl2lJpKg+nmFyoPeVNH3qqFDMvc1qMR2xizcI7FFKP vP71ZzYdD6RBJEKLJk+XAwVIiV95P00Zc+0vYEpbTbNR/Cx7wxEyD/BhtiG+zhhh 7ALkpYGntsztw1JsuMMz+RjowCb+xRpXMaaDLh+tlpFq8GMpCvextSyhNRQ7QiCR 47gC1cLsERzmV9KSLVyNyk5ALBWTMY66omnGy5Fia5/EjXS2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/xpRM2b+P9gO3HzLsT1iWREgF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQ4NTJjMzgtMjFkNC0z MzQwLWFkMzEtMDg3YWVjN2Y5YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZujiri9MuOkzI3gTBiHcwrl2gun/Y4DheIogNqqrxKhdaVtyXz5mvE LByixp9gXA2oNCczfvB8CmgPQzcvcQ9mGnuitXbag7SOD8+K8bMVRdu39iAxftem XO8D3q7Slx2E2hC/Jlec5ir5671dvXgTq8P0l8To0hi32Cp1LGPY6U7RJm02MDn6 U4C+8VYDVt/Y/ZtW/U+vk/xLXi2qHnUzikfliPNEEQCMTtfYAwWyTPCU3uO/SWLS h3ArkFX+HuypUHZp711rGlze3asfI9DPMOroN1X4nYwEHkE02cpIZN2zFqv2DRal iknLuVVwOUIxD6ofvks8tE9gvWFkMe0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:11 2025 by rpki-client