$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa File: 2fef5e88-c658-32c2-aa02-a9f8997aae15.roa (raw, json) Hash identifier: K3W0SJtlFytUZQ4WCRnnus31S0zTY2Fx/jON150O1v8= Subject key identifier: 6A:76:18:FB:7F:C6:E6:8A:C0:B6:09:7C:AA:7E:0A:A7:A9:69:14:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373A1F11EB00403DEE7A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3a:1f:11:eb:00:40:3d:ee:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e2c82019-0315-48fc-b752-c8224c2b009f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ad:3a:71:4a:67:97:0a:a5:8c:01:d1:44:4b: bd:2c:0c:02:89:82:da:a3:5c:ee:40:ca:ae:2d:f0: fe:0f:8a:37:ea:fb:bc:ed:24:ff:f9:b2:ee:28:37: 6a:cc:89:1b:6c:35:81:2b:57:fb:7f:48:e2:b6:21: 99:19:41:06:db:42:1d:4f:c4:70:36:19:81:a7:d8: 33:a1:e2:6f:15:1d:fa:2a:cf:1f:6a:d6:75:85:e4: 4e:05:27:35:1a:9c:f8:61:14:be:56:1e:35:97:5c: e9:7d:b5:64:f7:f9:04:99:17:d4:ee:f2:7a:64:87: 2d:70:a2:fa:49:09:46:f6:2a:3f:bf:ef:38:83:57: 1d:a2:0c:c6:38:31:52:da:a3:1b:79:5a:b7:d0:01: 35:98:a4:bd:28:31:77:ee:fa:84:35:9d:8d:ee:7f: 30:29:be:21:71:68:d5:35:6b:cb:46:73:36:0b:f8: f5:2e:8d:bd:3f:e8:1b:c0:b0:38:76:41:b7:2f:ee: b9:15:54:84:6d:1a:aa:20:90:a2:d6:c9:c2:be:a0: e6:ad:51:23:0a:bf:48:ea:aa:ec:a0:4a:48:ec:88: f8:fc:c3:73:7d:85:07:35:c0:fb:52:a2:58:c3:f2: bc:b1:af:5e:ca:3b:bb:ad:97:6b:f1:6f:9a:4e:60: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:76:18:FB:7F:C6:E6:8A:C0:B6:09:7C:AA:7E:0A:A7:A9:69:14:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c5:a6:3e:dc:f4:2f:9c:0c:6c:2b:2f:c9:4e:8b:83:fa:23: 8d:42:00:01:d4:3e:bf:2b:d1:e0:25:fc:a9:e2:3c:11:35:33: a1:58:1b:22:ca:77:9e:27:35:6e:39:5e:89:ba:10:03:3e:1b: 5a:6c:5d:4a:4b:83:65:79:c3:9a:58:68:97:bf:d9:98:77:b3: 65:29:25:61:46:77:01:95:b0:ba:5b:3e:33:8e:8d:5e:38:e1: f8:68:11:5a:7d:8c:3b:be:8c:ad:1f:c7:27:af:8a:5c:15:92: 99:dc:27:3a:55:e7:14:59:08:c6:53:48:dd:9b:6a:b3:28:3c: 81:e6:bc:e2:09:08:cf:9d:ab:d4:c1:30:3f:2e:42:61:ed:24: 19:66:98:53:30:32:ba:8b:89:85:96:e5:32:1e:ce:71:22:4a: 0e:7f:d2:68:18:98:e3:68:b9:e3:8c:2f:31:c4:f5:da:ee:9f: f4:46:84:a4:c6:3b:37:eb:c6:de:df:01:a4:0d:95:65:bd:73: df:df:5b:80:e0:d1:67:fd:d5:f9:e7:71:61:7a:f2:83:dc:c8: b6:4c:b5:3c:25:e9:98:3b:5c:da:b1:d4:a1:bf:61:ca:e5:fc: 88:49:5b:9d:0d:de:ed:2d:cf:dc:03:d1:b1:cb:96:7e:a4:fb: 90:12:93:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzofEesAQD3ueoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTJjODIwMTktMDMxNS00OGZjLWI3NTItYzgyMjRjMmIwMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh606cUpnlwqljAHRREu9LAwCiYLao1zuQMqu LfD+D4o36vu87ST/+bLuKDdqzIkbbDWBK1f7f0jitiGZGUEG20IdT8RwNhmBp9gz oeJvFR36Ks8fatZ1heROBSc1Gpz4YRS+Vh41l1zpfbVk9/kEmRfU7vJ6ZIctcKL6 SQlG9io/v+84g1cdogzGODFS2qMbeVq30AE1mKS9KDF37vqENZ2N7n8wKb4hcWjV NWvLRnM2C/j1Lo29P+gbwLA4dkG3L+65FVSEbRqqIJCi1snCvqDmrVEjCr9I6qrs oEpI7Ij4/MNzfYUHNcD7UqJYw/K8sa9eyju7rZdr8W+aTmBOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp2GPt/xuaKwLYJfKp+CqepaRRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmZlZjVlODgtYzY1OC0z MmMyLWFhMDItYTlmODk5N2FhZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfFpj7c9C+cDGwrL8lOi4P6I41CAAHUPr8r0eAl/KniPBE1M6FYGyLK d54nNW45Xom6EAM+G1psXUpLg2V5w5pYaJe/2Zh3s2UpJWFGdwGVsLpbPjOOjV44 4fhoEVp9jDu+jK0fxyevilwVkpncJzpV5xRZCMZTSN2barMoPIHmvOIJCM+dq9TB MD8uQmHtJBlmmFMwMrqLiYWW5TIeznEiSg5/0mgYmONoueOMLzHE9drun/RGhKTG Ozfrxt7fAaQNlWW9c9/fW4Dg0Wf91fnncWF68oPcyLZMtTwl6Zg7XNqx1KG/Ycrl /IhJW50N3u0tz9wD0bHLln6k+5ASk0o= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:24 2025 by rpki-client