$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/364350a0-5fb5-3971-b7e5-098f8a0ad777.roa File: 364350a0-5fb5-3971-b7e5-098f8a0ad777.roa (raw, json) Hash identifier: oPkKReMEwKjwQJd6z1ez4M+XZ6lGHgN8jKynZTKv0c8= Subject key identifier: 96:F5:34:4B:E2:E9:4A:21:A0:13:16:54:C4:5B:79:11:76:16:65:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F4D029F6270E38400A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/364350a0-5fb5-3971-b7e5-098f8a0ad777.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f4:d0:29:f6:27:0e:38:40:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=4d3a6016-8ffa-499a-a572-2cb9f27b779b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:08:df:d0:6e:1b:13:83:3e:8e:6e:a4:64: a1:a5:a5:ff:2a:84:72:0b:34:fc:30:cb:ef:14:46: 9f:b4:aa:4b:00:e8:bc:f2:d4:30:73:a8:6c:7a:fe: 40:17:35:b9:26:5f:c7:58:31:6b:66:e6:5d:7e:b5: 2f:02:02:16:7e:fc:96:3a:d7:78:9c:fb:c5:ea:b3: 4d:8b:d8:ef:c5:9d:1e:c3:1c:5f:3f:2a:0b:e6:9b: 4b:b9:38:6d:08:6b:97:d6:a8:9f:de:df:dc:df:52: 41:5b:ee:09:70:f8:dd:97:d4:aa:9b:2d:76:9b:21: 61:a4:47:d8:7b:69:a2:6b:1e:54:2d:f5:dc:95:da: f1:e5:0d:59:85:b4:df:71:f1:be:d1:bb:12:11:b7: cd:ea:97:8e:17:e5:e8:6c:94:3a:29:40:c1:16:6d: 7f:b8:df:02:fe:75:dc:bb:be:4f:12:dc:e7:ad:b5: f0:2c:d1:0d:58:fe:18:26:04:60:85:42:be:65:a7: 23:51:5b:25:9e:8b:5f:ff:9e:f4:4b:31:1e:fb:7e: a7:e2:e2:f4:1f:65:5c:d9:95:f2:a8:c3:44:8d:3c: 66:45:2f:7c:d7:2e:e2:86:3e:e3:ea:ca:a6:96:ef: f7:bc:39:20:a0:95:e9:f5:35:de:5b:6d:e9:81:75: c1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F5:34:4B:E2:E9:4A:21:A0:13:16:54:C4:5B:79:11:76:16:65:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/364350a0-5fb5-3971-b7e5-098f8a0ad777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0b:f0:7b:d4:bb:ce:b6:ef:1b:47:66:59:b9:98:8d:cf:83: 88:07:4f:06:0c:2e:a0:f3:9c:57:bd:6a:54:8a:39:1e:a1:64: d9:12:0b:67:5f:09:f5:4f:1a:85:d2:9b:ed:0e:d1:85:d3:91: 93:2b:6f:95:ad:e4:5f:1e:6a:16:e9:aa:53:67:4a:fa:de:d8: 3a:5d:bf:67:4e:ff:f5:8e:d8:d8:ba:61:31:73:84:d5:d9:54: d8:0a:91:55:c2:2a:f8:fd:b7:37:0d:42:2a:63:b7:85:89:ba: 9e:25:dc:a7:97:8a:87:01:98:23:41:22:4d:68:8c:68:a2:f6: a6:53:19:d6:0c:5d:cd:f7:28:8d:96:66:3f:76:d4:af:90:ee: d5:01:f7:02:f2:70:66:ce:fa:83:af:7f:c3:8d:1b:e6:a2:f5: e0:66:72:7d:ff:cb:8e:e3:71:d0:57:1f:9d:20:7a:79:31:ba: 5a:fb:72:b6:71:c5:42:00:4c:34:11:47:5b:43:2d:a5:91:81: 8e:af:48:35:3b:81:db:41:cc:82:e7:fe:bd:94:d3:46:5a:cc: a9:4d:75:06:96:43:d9:6f:e8:fc:6b:17:59:cc:51:49:3b:fd: 95:9f:20:1c:ef:c4:89:1b:28:2b:2b:36:5c:55:38:e6:f1:e5: cd:13:2d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvTQKfYnDjhACoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NGQzYTYwMTYtOGZmYS00OTlhLWE1NzItMmNiOWYyN2I3NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqcI39BuGxODPo5upGShpaX/KoRyCzT8MMvv FEaftKpLAOi88tQwc6hsev5AFzW5Jl/HWDFrZuZdfrUvAgIWfvyWOtd4nPvF6rNN i9jvxZ0ewxxfPyoL5ptLuThtCGuX1qif3t/c31JBW+4JcPjdl9Sqmy12myFhpEfY e2miax5ULfXcldrx5Q1ZhbTfcfG+0bsSEbfN6peOF+XobJQ6KUDBFm1/uN8C/nXc u75PEtznrbXwLNENWP4YJgRghUK+ZacjUVslnotf/570SzEe+36n4uL0H2Vc2ZXy qMNEjTxmRS981y7ihj7j6sqmlu/3vDkgoJXp9TXeW23pgXXBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb1NEvi6UohoBMWVMRbeRF2FmXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY0MzUwYTAtNWZiNS0z OTcxLWI3ZTUtMDk4ZjhhMGFkNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0L8HvUu8627xtHZlm5mI3Pg4gHTwYMLqDznFe9alSKOR6hZNkSC2df CfVPGoXSm+0O0YXTkZMrb5Wt5F8eahbpqlNnSvre2Dpdv2dO//WO2Ni6YTFzhNXZ VNgKkVXCKvj9tzcNQipjt4WJup4l3KeXiocBmCNBIk1ojGii9qZTGdYMXc33KI2W Zj921K+Q7tUB9wLycGbO+oOvf8ONG+ai9eBmcn3/y47jcdBXH50genkxulr7crZx xUIATDQRR1tDLaWRgY6vSDU7gdtBzILn/r2U00ZazKlNdQaWQ9lv6PxrF1nMUUk7 /ZWfIBzvxIkbKCsrNlxVOObx5c0TLVo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:41:45 2025 by rpki-client