$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ddd013b-edc2-3379-9b84-5c9d29e6aec7.roa File: 2ddd013b-edc2-3379-9b84-5c9d29e6aec7.roa (raw, json) Hash identifier: XX6DseNWwVYltRWC6NWqdw/Oe08csxWDZ0Nhp39yHRY= Subject key identifier: F6:21:51:73:33:5F:6C:9A:53:49:65:B9:5D:20:68:A8:0F:FA:0D:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067011E56A8F8B24D30C180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ddd013b-edc2-3379-9b84-5c9d29e6aec7.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.229.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:01:1e:56:a8:f8:b2:4d:30:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=90b7eeee-85fc-46e2-bfa2-172a12d6fb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:cd:da:1f:4e:a7:f0:92:27:bf:e0:87:9b: 39:0e:68:b8:15:c4:33:58:cc:12:89:f2:30:d2:54: 47:be:8d:60:40:6b:7a:72:73:1a:9d:07:4b:39:b7: 3f:de:6c:6f:1c:fa:b4:ff:f0:89:77:c9:bd:e3:f1: e7:21:fe:13:47:2a:cf:13:31:31:9e:3f:dd:4e:17: 67:16:c7:a8:37:94:df:c9:de:ab:0a:8f:ab:d4:f7: ee:bb:9a:a4:a5:c0:46:a6:d9:4b:8c:eb:d8:2b:48: 98:86:58:b3:45:c4:cf:2d:75:0c:1a:01:1e:a4:4f: 0a:00:90:d6:e4:72:e0:02:f0:b4:98:46:c1:22:c2: c8:57:65:f1:f8:5a:81:59:65:58:8f:d4:5c:b9:c5: 37:ef:c4:b8:13:4f:a6:25:72:bb:c1:fa:cf:52:67: 29:22:e9:09:84:d6:db:26:75:c6:99:d3:16:58:eb: 75:56:1e:f6:dc:2e:e7:18:b2:7c:70:ec:a7:7e:3f: a1:a0:61:be:fd:66:6d:3d:62:9b:52:14:e3:80:f4: 02:3b:bf:03:e4:40:a2:9c:a4:e0:45:01:65:12:ed: 73:dc:ae:34:ab:25:4e:42:c7:a5:b7:45:23:3f:7b: 60:44:b6:8d:19:f2:02:c7:b6:7a:75:f3:f1:dd:7c: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:21:51:73:33:5F:6C:9A:53:49:65:B9:5D:20:68:A8:0F:FA:0D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ddd013b-edc2-3379-9b84-5c9d29e6aec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:11:36:1c:24:b4:fa:78:a8:b9:e9:c2:a2:8d:0d:cf:7a:15: f0:af:7e:9b:ad:5e:4b:ae:c3:cd:b4:76:a0:fd:a7:27:1d:9a: a0:06:db:db:b7:c0:dd:ee:f3:61:20:ed:3d:42:4e:dd:a8:88: ad:88:97:ba:f6:98:49:ce:b0:11:19:c6:fa:93:6d:0e:a7:4b: 7a:79:36:fb:e2:9f:3e:47:26:e0:83:70:a1:1f:6a:4d:e4:fe: 03:54:e0:99:07:e9:73:44:38:c3:a1:31:51:73:cd:0d:af:33: 17:af:e0:01:34:58:d9:e7:97:58:2a:b5:73:16:5a:74:01:93: 43:73:8a:53:6f:f3:fa:a0:2c:04:16:28:e2:91:47:1b:66:46: b3:7b:8f:89:00:74:da:72:c2:e3:c4:80:3d:ce:1c:5f:f0:00: 33:58:6c:a7:e6:1b:06:d8:90:4c:90:c0:37:e6:05:51:6d:ac: a1:28:b0:68:1f:17:69:6f:01:80:01:3a:ca:ef:77:f5:89:cf: 6e:18:d7:21:2e:d9:cc:1e:f2:36:c1:84:9a:e0:e2:1a:1a:38: 2a:39:1a:21:9b:f2:3f:be:5a:90:64:66:ed:fc:9c:31:ad:b9: 96:81:c0:16:76:c0:d4:bb:c4:6f:5a:9a:0e:73:07:5f:8e:8c: a0:f7:6f:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZwEeVqj4sk0wwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTBiN2VlZWUtODVmYy00NmUyLWJmYTItMTcyYTEyZDZmYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi63N2h9Op/CSJ7/gh5s5Dmi4FcQzWMwSifIw 0lRHvo1gQGt6cnManQdLObc/3mxvHPq0//CJd8m94/HnIf4TRyrPEzExnj/dThdn FseoN5Tfyd6rCo+r1Pfuu5qkpcBGptlLjOvYK0iYhlizRcTPLXUMGgEepE8KAJDW 5HLgAvC0mEbBIsLIV2Xx+FqBWWVYj9RcucU378S4E0+mJXK7wfrPUmcpIukJhNbb JnXGmdMWWOt1Vh723C7nGLJ8cOynfj+hoGG+/WZtPWKbUhTjgPQCO78D5ECinKTg RQFlEu1z3K40qyVOQselt0UjP3tgRLaNGfICx7Z6dfPx3XzMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYhUXMzX2yaU0lluV0gaKgP+g2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRkZDAxM2ItZWRjMi0z Mzc5LTliODQtNWM5ZDI5ZTZhZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsRNhwktPp4qLnpwqKNDc96FfCvfputXkuuw820dqD9pycdmqAG29u3 wN3u82Eg7T1CTt2oiK2Il7r2mEnOsBEZxvqTbQ6nS3p5Nvvinz5HJuCDcKEfak3k /gNU4JkH6XNEOMOhMVFzzQ2vMxev4AE0WNnnl1gqtXMWWnQBk0NzilNv8/qgLAQW KOKRRxtmRrN7j4kAdNpywuPEgD3OHF/wADNYbKfmGwbYkEyQwDfmBVFtrKEosGgf F2lvAYABOsrvd/WJz24Y1yEu2cwe8jbBhJrg4hoaOCo5GiGb8j++WpBkZu38nDGt uZaBwBZ2wNS7xG9amg5zB1+OjKD3b94= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:47 2025 by rpki-client