$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d4a967f-cc87-3163-a1dc-d72ece427cba.roa File: 2d4a967f-cc87-3163-a1dc-d72ece427cba.roa (raw, json) Hash identifier: mfSZi9MUt50NLFUlKFCCrkjijJ//PykJu+Arme5tbpI= Subject key identifier: 18:99:3F:07:2D:6C:AD:A0:95:A6:19:88:27:70:E3:4D:29:40:9E:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374429AE155C7E8F68B490 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d4a967f-cc87-3163-a1dc-d72ece427cba.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:44:29:ae:15:5c:7e:8f:68:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=da9427ef-6028-42ad-acef-f63f915cc805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:ae:1c:d6:81:88:c5:3d:02:25:3c:b0:09: a2:3c:09:77:7f:3c:59:e1:da:a9:ec:f6:66:bb:7c: db:29:e8:b3:8a:57:47:0b:c8:d7:97:5e:0b:a8:cd: 66:ac:2b:62:9e:59:28:b0:50:f1:0e:6e:a3:49:b6: 44:8d:49:fa:9d:05:0a:0b:f2:b8:84:91:85:92:fe: 1d:17:fb:11:c1:75:49:3c:e4:91:20:24:db:01:18: 47:00:f6:5b:91:27:74:a6:c1:b4:f4:a4:4b:e7:53: f3:96:21:6b:0d:b5:43:47:aa:50:37:f1:5b:82:25: 58:f8:78:65:da:e1:ed:14:30:9a:17:07:0a:10:6e: 69:8b:17:c8:0e:eb:f5:aa:69:b9:3b:4e:e6:2e:54: ef:c5:f1:df:57:51:82:d0:f4:ef:c0:38:87:23:51: 33:83:c8:62:00:82:9b:97:fe:50:95:7e:d0:a6:c1: dc:32:0e:4d:41:14:2f:06:2c:62:f4:fb:00:c4:56: e1:35:26:63:a1:6b:3d:b5:ef:f9:68:ab:91:95:50: bd:24:89:60:a2:99:95:0d:0c:0d:7f:e9:82:e3:08: 53:14:84:36:73:d9:30:7c:99:c4:64:22:e2:af:fd: e1:b0:47:35:c1:a0:32:f6:a0:f1:41:3e:c3:14:29: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:3F:07:2D:6C:AD:A0:95:A6:19:88:27:70:E3:4D:29:40:9E:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d4a967f-cc87-3163-a1dc-d72ece427cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7d:85:70:3f:3c:93:32:57:62:0d:2b:fc:76:2a:96:05:3b: 2f:cd:f7:47:f4:79:87:a6:59:fb:2c:b1:10:ad:3c:82:f1:8c: 5c:45:44:6b:50:07:39:ce:71:0b:d5:87:14:a6:3a:73:8c:a9: 43:5c:20:30:53:f9:70:1a:5f:eb:06:fd:58:59:17:a4:ed:30: 2b:17:22:95:9c:61:ec:83:f6:ad:34:a7:c1:dc:bd:01:07:9a: 27:92:cb:0d:cb:2b:52:47:b2:94:aa:78:a7:b2:f5:8b:73:f7: 1b:0b:a0:53:90:0c:f4:b4:ed:e2:80:0d:82:1e:e3:15:7e:fc: cd:cd:40:90:d1:44:36:b8:fc:95:ba:a4:d0:0d:32:ca:97:b1: 62:c6:1b:6b:b4:9b:67:30:ab:ea:90:c9:09:a5:15:aa:57:fb: a4:d0:59:68:9a:a8:2f:89:b8:b5:fa:3c:43:f3:4c:c8:21:84: b7:07:fe:ba:2a:64:e8:9a:e4:4b:ed:5c:ed:8f:7c:51:c8:c5: ec:9a:38:b3:af:2a:18:09:6d:71:da:f0:4f:a5:b9:42:fb:bf: 0a:a1:af:d0:75:61:cf:c4:10:b7:a9:e5:b3:a1:1f:7d:c1:70: 41:40:6f:f3:24:d5:87:b5:c7:8e:0a:b2:80:d2:3a:4f:bc:b7: cf:2e:59:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0QprhVcfo9otJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGE5NDI3ZWYtNjAyOC00MmFkLWFjZWYtZjYzZjkxNWNjODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOeuHNaBiMU9AiU8sAmiPAl3fzxZ4dqp7PZm u3zbKeizildHC8jXl14LqM1mrCtinlkosFDxDm6jSbZEjUn6nQUKC/K4hJGFkv4d F/sRwXVJPOSRICTbARhHAPZbkSd0psG09KRL51PzliFrDbVDR6pQN/FbgiVY+Hhl 2uHtFDCaFwcKEG5pixfIDuv1qmm5O07mLlTvxfHfV1GC0PTvwDiHI1Ezg8hiAIKb l/5QlX7QpsHcMg5NQRQvBixi9PsAxFbhNSZjoWs9te/5aKuRlVC9JIlgopmVDQwN f+mC4whTFIQ2c9kwfJnEZCLir/3hsEc1waAy9qDxQT7DFCnTzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiZPwctbK2glaYZiCdw400pQJ7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ0YTk2N2YtY2M4Ny0z MTYzLWExZGMtZDcyZWNlNDI3Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp9hXA/PJMyV2INK/x2KpYFOy/N90f0eYemWfsssRCtPILxjFxFRGtQ BznOcQvVhxSmOnOMqUNcIDBT+XAaX+sG/VhZF6TtMCsXIpWcYeyD9q00p8HcvQEH mieSyw3LK1JHspSqeKey9Ytz9xsLoFOQDPS07eKADYIe4xV+/M3NQJDRRDa4/JW6 pNANMsqXsWLGG2u0m2cwq+qQyQmlFapX+6TQWWiaqC+JuLX6PEPzTMghhLcH/roq ZOia5EvtXO2PfFHIxeyaOLOvKhgJbXHa8E+luUL7vwqhr9B1Yc/EELep5bOhH33B cEFAb/Mk1Ye1x44KsoDSOk+8t88uWX4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:51 2025 by rpki-client