$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fdff48-4fd3-35c4-8c15-b0a53f5001f4.roa File: 25fdff48-4fd3-35c4-8c15-b0a53f5001f4.roa (raw, json) Hash identifier: 4JEerBFCtSEw+TCrLvACugbzokM7O5Yz9EQdJd29bYk= Subject key identifier: C3:34:99:6F:23:0C:A5:7F:85:93:CB:69:B1:EB:2C:E8:61:2E:13:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4B5E0B9AEA2AD501C680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fdff48-4fd3-35c4-8c15-b0a53f5001f4.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.228.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4b:5e:0b:9a:ea:2a:d5:01:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=0be0060b-46c3-46d9-95e9-336b151ca53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:e7:7d:8f:bc:59:59:46:a0:98:0a:69:a8: 6f:b7:94:62:ea:cd:46:70:4e:ce:1a:01:b8:5f:b9: 9c:f0:95:f0:6e:21:7f:a5:9b:6a:0e:10:b4:bf:60: c3:f6:e5:b9:86:9f:eb:7d:83:2b:c0:4b:ca:ae:3c: da:98:cd:d3:74:c5:b1:b8:b0:1b:d6:d4:9f:eb:48: 7a:e8:53:8b:27:ad:7a:be:50:1a:53:49:09:21:b7: 4b:47:0d:32:c7:d3:f5:cd:90:bd:1f:7e:ed:66:55: 19:bf:8d:94:64:92:e2:f7:3f:ef:38:50:b6:a6:9a: 4a:cc:85:39:20:98:b7:92:3f:71:a5:8a:c9:91:fe: e0:01:3c:e0:93:f6:c1:58:54:cb:b9:78:d6:a5:4d: 50:14:b1:d9:48:fb:13:cf:5a:94:a3:fc:77:88:bb: ac:b7:c1:31:b1:b8:0a:56:b7:91:6e:97:cc:de:ef: 67:17:e0:02:0f:f4:b7:c7:63:d8:fa:61:ae:1b:88: ed:3e:03:0b:24:d7:dc:ec:de:f4:36:d6:10:b8:b5: 85:da:f3:d0:5c:d3:7d:11:8f:3f:a0:ef:ee:6f:94: 31:5e:e2:cc:3b:01:14:3a:a2:5b:36:71:e1:ab:1f: 09:6c:e9:f3:02:7b:92:f6:e2:12:f0:29:10:60:5b: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:99:6F:23:0C:A5:7F:85:93:CB:69:B1:EB:2C:E8:61:2E:13:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fdff48-4fd3-35c4-8c15-b0a53f5001f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:54:ec:0d:f2:4d:86:09:ac:83:e9:b9:11:4f:c7:0c:32:51: e0:eb:5f:92:50:47:e3:76:c7:f9:de:3a:38:7b:e0:25:25:bd: af:6e:ae:a2:3f:f4:59:23:8c:49:3f:6a:b6:83:e5:51:f1:75: e1:93:85:37:c8:df:42:46:59:fc:3b:93:cb:96:bc:be:36:0c: e8:b1:c5:a9:a7:44:ca:7a:e2:19:2c:c3:c6:20:f7:ab:c6:c1: 29:c2:16:5f:08:56:00:f1:1e:c1:8b:99:6f:d2:ac:00:31:bf: 57:3b:e9:9d:65:87:4f:cc:d5:9a:af:48:50:a5:91:98:34:cd: f6:f6:d7:a8:21:0c:8c:a7:c7:82:78:55:30:eb:34:14:51:ca: c1:0b:3f:0f:42:1c:30:4f:0a:9f:6b:ad:42:da:15:b8:ab:31: 65:8a:74:e8:75:8d:e9:d7:83:29:56:57:1c:2e:82:e8:33:c2: 5c:63:55:5f:39:0b:59:3f:ab:ac:82:8e:ae:c7:13:bf:6e:fd: 81:f3:8c:cd:f3:df:31:e3:37:05:57:ec:1e:4e:2b:b5:61:1a: c8:78:90:30:71:5c:e9:a2:c3:7b:2d:8b:b8:00:ea:72:a5:75: a5:ad:52:cd:75:60:c6:eb:9f:6d:b7:73:30:81:f1:8a:1a:d2: a9:95:93:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEteC5rqKtUBxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MGJlMDA2MGItNDZjMy00NmQ5LTk1ZTktMzM2YjE1MWNhNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywfnfY+8WVlGoJgKaahvt5Ri6s1GcE7OGgG4 X7mc8JXwbiF/pZtqDhC0v2DD9uW5hp/rfYMrwEvKrjzamM3TdMWxuLAb1tSf60h6 6FOLJ616vlAaU0kJIbdLRw0yx9P1zZC9H37tZlUZv42UZJLi9z/vOFC2pppKzIU5 IJi3kj9xpYrJkf7gATzgk/bBWFTLuXjWpU1QFLHZSPsTz1qUo/x3iLust8ExsbgK VreRbpfM3u9nF+ACD/S3x2PY+mGuG4jtPgMLJNfc7N70NtYQuLWF2vPQXNN9EY8/ oO/ub5QxXuLMOwEUOqJbNnHhqx8JbOnzAnuS9uIS8CkQYFtbTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM0mW8jDKV/hZPLabHrLOhhLhPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVmZGZmNDgtNGZkMy0z NWM0LThjMTUtYjBhNTNmNTAwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZU7A3yTYYJrIPpuRFPxwwyUeDrX5JQR+N2x/neOjh74CUlva9urqI/ 9FkjjEk/araD5VHxdeGThTfI30JGWfw7k8uWvL42DOixxamnRMp64hksw8Yg96vG wSnCFl8IVgDxHsGLmW/SrAAxv1c76Z1lh0/M1ZqvSFClkZg0zfb216ghDIynx4J4 VTDrNBRRysELPw9CHDBPCp9rrULaFbirMWWKdOh1jenXgylWVxwugugzwlxjVV85 C1k/q6yCjq7HE79u/YHzjM3z3zHjNwVX7B5OK7VhGsh4kDBxXOmiw3sti7gA6nKl daWtUs11YMbrn223czCB8Yoa0qmVk6o= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:08 2025 by rpki-client