$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30fa75ef-64fe-3cb7-8aee-d5574ba74448.roa File: 30fa75ef-64fe-3cb7-8aee-d5574ba74448.roa (raw, json) Hash identifier: i0sK/i7bsyeGhDSvHzGNpPQYiwSssFwT/JQPkjIZGSg= Subject key identifier: CA:72:D9:72:C2:57:09:49:41:D9:A6:F2:7B:F4:03:80:CE:D0:F3:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FB5664F8CFD062675E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30fa75ef-64fe-3cb7-8aee-d5574ba74448.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fb:56:64:f8:cf:d0:62:67:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=542ca5b1-c12c-4067-92f6-6efa76aade89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:f3:db:06:e6:26:bc:9d:91:68:97:8d:9c: c1:10:8e:dd:4b:8c:38:3c:eb:69:17:c8:7a:76:57: 91:7d:f4:3c:61:f2:6c:a3:58:78:83:fa:4b:7f:e1: 0e:14:3d:17:33:93:72:c9:df:55:a2:95:a2:8f:e5: 96:57:76:db:75:c6:72:05:d5:34:93:03:9d:b1:9a: a3:86:76:71:e4:dc:ed:94:cb:96:17:f7:7d:44:7f: 1c:43:4f:b9:6a:d5:6d:0d:f2:26:bc:be:1d:b9:28: 13:a1:45:ba:ec:04:f2:66:03:95:09:e1:d6:6b:d5: 8c:3f:06:10:40:1d:a2:2d:73:b7:06:67:7f:d4:81: e2:7e:d8:61:ac:b6:a0:36:85:04:47:4d:2f:04:67: ac:f1:7a:ef:27:f5:04:09:d4:61:36:1b:1e:e2:21: e5:8f:17:51:74:f1:9e:3b:58:76:a7:cc:74:93:5c: 89:0a:97:4e:d2:95:2b:48:de:e0:21:ed:aa:3f:6e: ee:aa:30:aa:cb:36:76:49:23:d9:80:40:dc:f9:3a: 50:dd:de:ba:50:a0:ea:0e:10:04:01:a4:93:f8:22: d9:7d:12:f0:39:5f:43:5a:b0:7b:f6:dd:f8:13:d4: 34:d4:8f:63:75:7b:69:b9:62:df:54:2c:3c:04:ab: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:D9:72:C2:57:09:49:41:D9:A6:F2:7B:F4:03:80:CE:D0:F3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30fa75ef-64fe-3cb7-8aee-d5574ba74448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0d:ec:fc:cd:0c:2d:2a:f6:04:20:61:af:10:87:ae:97:99: d8:09:fe:45:fe:35:b2:2c:c6:c8:6e:ee:39:2b:5e:bc:1e:12: c1:8b:02:85:96:2d:7b:36:f0:42:e0:d7:49:e3:3e:3a:c2:dd: 2b:d7:d3:7d:e5:20:6a:41:33:5c:d0:3c:18:8c:84:97:ec:3c: 31:58:d7:8e:b7:32:cc:00:1b:f2:18:d7:40:d2:9e:a6:bb:73: 31:db:45:f8:69:3b:84:89:32:18:e1:61:09:72:37:d6:e2:e7: 98:66:0b:2b:42:df:6a:7e:95:af:68:4e:5c:20:4f:b9:aa:d3: 1c:10:b1:38:9c:50:f1:79:24:22:d6:4e:e6:ba:83:c9:16:10: c1:da:43:44:d4:18:09:5a:e3:20:d6:f4:77:11:ec:89:41:b0: bd:54:e4:7f:fc:6b:78:53:bc:d6:c2:a2:40:29:41:dd:6b:f9: cf:a7:61:88:af:61:be:6c:3c:e1:33:24:79:d2:fd:4f:e2:d4: 4f:0e:8a:92:57:fd:c1:8e:10:87:03:98:18:2c:97:4e:59:65: 97:12:79:62:6b:7c:c7:7c:c9:c5:46:20:aa:29:7b:e3:c0:0b: 38:c0:eb:58:59:e6:6b:13:7e:e3:6d:92:fd:9c:1a:a4:38:0d: 68:54:47:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvtWZPjP0GJnXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTQyY2E1YjEtYzEyYy00MDY3LTkyZjYtNmVmYTc2YWFkZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPfz2wbmJrydkWiXjZzBEI7dS4w4POtpF8h6 dleRffQ8YfJso1h4g/pLf+EOFD0XM5Nyyd9VopWij+WWV3bbdcZyBdU0kwOdsZqj hnZx5NztlMuWF/d9RH8cQ0+5atVtDfImvL4duSgToUW67ATyZgOVCeHWa9WMPwYQ QB2iLXO3Bmd/1IHifthhrLagNoUER00vBGes8XrvJ/UECdRhNhse4iHljxdRdPGe O1h2p8x0k1yJCpdO0pUrSN7gIe2qP27uqjCqyzZ2SSPZgEDc+TpQ3d66UKDqDhAE AaST+CLZfRLwOV9DWrB79t34E9Q01I9jdXtpuWLfVCw8BKtPFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpy2XLCVwlJQdmm8nv0A4DO0PNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzBmYTc1ZWYtNjRmZS0z Y2I3LThhZWUtZDU1NzRiYTc0NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsN7PzNDC0q9gQgYa8Qh66XmdgJ/kX+NbIsxshu7jkrXrweEsGLAoWW LXs28ELg10njPjrC3SvX033lIGpBM1zQPBiMhJfsPDFY1463MswAG/IY10DSnqa7 czHbRfhpO4SJMhjhYQlyN9bi55hmCytC32p+la9oTlwgT7mq0xwQsTicUPF5JCLW Tua6g8kWEMHaQ0TUGAla4yDW9HcR7IlBsL1U5H/8a3hTvNbCokApQd1r+c+nYYiv Yb5sPOEzJHnS/U/i1E8OipJX/cGOEIcDmBgsl05ZZZcSeWJrfMd8ycVGIKope+PA CzjA61hZ5msTfuNtkv2cGqQ4DWhUR9E= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:41 2025 by rpki-client