$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/349c0b4c-12fc-308f-adc7-44bd9a390951.roa File: 349c0b4c-12fc-308f-adc7-44bd9a390951.roa (raw, json) Hash identifier: qT/tfAIR/1NbkmJ4Qwk2oD6xtdXiyrIYXsm+lzbjcn8= Subject key identifier: 55:B5:40:96:87:DF:F4:9C:0B:C3:C4:68:B5:90:8A:6D:10:B7:88:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374BF0D3135094D2384C20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/349c0b4c-12fc-308f-adc7-44bd9a390951.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4b:f0:d3:13:50:94:d2:38:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=cd791b71-9232-4955-8be6-0b87106fe202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:c5:1f:d6:0c:ee:07:d3:28:51:93:9b:84: cd:91:f1:3d:57:f4:bc:83:76:76:ec:97:5c:db:3c: 27:86:b6:0f:1b:f2:1d:69:44:79:34:f2:1b:15:ea: ef:a3:45:5b:97:a4:85:98:a4:45:60:10:32:da:48: d6:88:05:36:8f:42:a5:13:54:cc:3b:73:73:c3:06: 1c:6c:9f:28:d8:b3:7c:00:83:91:d8:80:72:e4:44: fc:3c:72:4a:b1:be:41:06:fb:42:01:e6:a2:ee:e8: dd:dc:ba:02:b9:3f:d8:00:d5:12:68:62:fc:e8:9a: e3:05:87:cb:67:9d:10:61:57:d4:20:e9:29:86:07: 29:17:b3:ac:70:d1:e3:22:cf:4b:44:00:2f:fe:3f: 7f:cc:5a:0a:a1:0c:71:73:94:b1:e5:21:8d:59:8d: f2:08:eb:da:42:b3:cb:f6:c1:c3:39:7e:bb:29:4f: 62:a5:8b:62:05:d6:e4:25:22:99:f8:c6:85:8f:c4: fb:f2:b8:85:92:94:07:d2:82:13:b0:3b:24:c5:d3: 67:a1:b8:be:85:81:0f:67:48:aa:44:bc:28:8d:8c: 78:65:73:97:1f:09:8a:03:90:69:84:ff:d0:fe:42: 93:31:27:6f:74:4a:4e:a1:89:69:6e:93:af:b1:1b: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B5:40:96:87:DF:F4:9C:0B:C3:C4:68:B5:90:8A:6D:10:B7:88:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/349c0b4c-12fc-308f-adc7-44bd9a390951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0f:50:0c:75:55:38:05:08:ca:f7:3d:09:6b:f1:21:25:a2: 86:52:ec:34:2c:12:b7:fc:43:34:ef:f0:be:e9:34:c1:13:52: ca:31:56:ca:a7:44:f0:3b:35:45:78:a6:41:5f:40:01:62:4c: fb:61:c7:02:1e:06:84:bf:8d:b0:19:2c:e9:ef:14:c2:4f:66: e9:b8:c7:11:33:26:06:42:0e:c5:00:e2:de:a1:2c:34:00:9f: a0:6c:4e:61:d1:40:78:bd:6d:a9:a2:a5:ba:71:7c:63:c0:af: 0c:ac:be:e7:74:ec:29:82:b0:40:20:fa:2c:39:29:5b:e9:df: a4:4c:08:f1:6c:d5:5d:25:0a:08:e6:b4:24:d5:a2:a9:4c:b4: 47:c1:54:81:78:20:e3:c4:da:31:01:6e:9f:0a:d8:bf:15:1f: 32:88:7f:8a:ba:56:b9:f8:ee:38:97:d5:b8:fd:37:4e:91:41: d4:60:0c:ff:39:41:dd:9c:e6:f9:08:d4:d1:06:78:10:54:8c: 68:b6:67:f2:c1:81:ff:12:fb:9e:91:81:80:e1:7a:e6:82:05: c6:e8:42:16:61:14:cf:ea:93:76:cd:65:c9:1f:77:d6:5c:6d: fd:2a:29:2e:9b:95:fb:17:31:98:9f:83:f7:9c:6c:f4:4f:98: 48:4b:1c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0vw0xNQlNI4TCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q3OTFiNzEtOTIzMi00OTU1LThiZTYtMGI4NzEwNmZlMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp63FH9YM7gfTKFGTm4TNkfE9V/S8g3Z27Jdc 2zwnhrYPG/IdaUR5NPIbFervo0Vbl6SFmKRFYBAy2kjWiAU2j0KlE1TMO3NzwwYc bJ8o2LN8AIOR2IBy5ET8PHJKsb5BBvtCAeai7ujd3LoCuT/YANUSaGL86JrjBYfL Z50QYVfUIOkphgcpF7OscNHjIs9LRAAv/j9/zFoKoQxxc5Sx5SGNWY3yCOvaQrPL 9sHDOX67KU9ipYtiBdbkJSKZ+MaFj8T78riFkpQH0oITsDskxdNnobi+hYEPZ0iq RLwojYx4ZXOXHwmKA5BphP/Q/kKTMSdvdEpOoYlpbpOvsRuJNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFW1QJaH3/ScC8PEaLWQim0Qt4iMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ5YzBiNGMtMTJmYy0z MDhmLWFkYzctNDRiZDlhMzkwOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIPUAx1VTgFCMr3PQlr8SElooZS7DQsErf8QzTv8L7pNMETUsoxVsqn RPA7NUV4pkFfQAFiTPthxwIeBoS/jbAZLOnvFMJPZum4xxEzJgZCDsUA4t6hLDQA n6BsTmHRQHi9bamipbpxfGPArwysvud07CmCsEAg+iw5KVvp36RMCPFs1V0lCgjm tCTVoqlMtEfBVIF4IOPE2jEBbp8K2L8VHzKIf4q6Vrn47jiX1bj9N06RQdRgDP85 Qd2c5vkI1NEGeBBUjGi2Z/LBgf8S+56RgYDheuaCBcboQhZhFM/qk3bNZckfd9Zc bf0qKS6blfsXMZifg/ecbPRPmEhLHJc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:43:55 2025 by rpki-client