$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa File: 37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa (raw, json) Hash identifier: YA11aPthXfA9Agt4eWox8iNLm64NdYUVqnT64RdjTDU= Subject key identifier: EB:1D:A4:B2:AE:AA:E9:96:D5:24:9B:C1:FA:10:BD:A6:C7:A0:64:92 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B5141C2E458B09820DAFB7800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.106.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c2:e4:58:b0:98:20:da:fb:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=0233b2fc-12d1-4f7a-805f-dfa9f4734aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:53:45:f8:c9:ee:4d:ff:38:f2:13:a9:75: c2:12:67:3e:33:71:e0:73:63:e3:32:31:44:1c:57: 26:51:8d:70:48:1e:d1:79:be:07:2c:86:a7:d2:d1: cf:28:e5:7f:c1:1d:45:01:03:c7:07:82:de:6e:83: e4:e9:83:4e:18:3c:a4:97:db:fa:ec:9a:bb:37:83: 5c:01:c7:72:cd:da:52:e4:64:e6:fc:5c:58:18:a6: 4b:29:23:dd:b8:6e:d7:e4:09:90:91:55:c9:5a:a5: e2:3f:c9:8f:cf:93:c9:45:19:48:7f:b8:f9:11:0f: b3:ba:5f:46:3a:50:b8:3e:5e:e8:4b:07:84:b5:d2: a0:b9:d3:1c:b9:25:fd:54:cb:ab:30:d2:b0:5b:13: 27:9f:92:f5:7b:82:8e:ce:f6:d3:7f:64:29:41:39: 54:0e:dc:21:47:84:91:33:fd:45:ff:cf:36:fb:31: 8a:ff:fe:c0:fb:dc:bb:45:92:31:c6:02:b5:d7:2b: ed:a3:29:4f:5c:ca:92:59:00:1e:0b:2d:20:af:25: 96:b8:75:52:ce:6e:65:77:df:3c:34:bd:d9:a0:03: a4:20:eb:a8:72:b8:79:b8:d3:d8:ac:7a:ff:0f:74: 08:f9:f1:fe:29:ef:1d:46:0f:87:05:7c:1c:a2:d1: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1D:A4:B2:AE:AA:E9:96:D5:24:9B:C1:FA:10:BD:A6:C7:A0:64:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e6:0e:60:da:32:d2:a3:29:01:ea:10:83:8a:e6:95:d3:d9: 8d:2b:3b:ee:b1:70:37:90:d8:c0:b6:d3:c1:f0:ac:2e:e9:8f: a7:9e:70:7d:6e:3f:1f:19:94:5a:15:41:1a:4d:97:3c:e2:07: 14:d5:97:47:6f:e9:2d:ec:2d:1c:1c:1a:5f:04:91:7d:c7:a6: c6:11:4d:35:36:1d:fe:61:5b:aa:3c:0a:90:5b:c3:d2:7c:48: 3e:09:b7:3a:49:73:87:53:57:e4:71:dd:0e:a9:fc:fe:65:29: 5a:dd:29:3d:90:fe:57:17:41:ce:d1:02:65:6e:2b:99:fe:94: af:0d:6a:bf:6e:9c:22:67:32:8b:82:65:ea:3e:ec:49:fa:ca: fe:30:dc:a5:88:2d:a0:b3:49:08:e9:49:31:89:be:6d:8e:9a: ba:61:bc:c6:7d:0c:66:a1:7a:65:dd:2e:e8:f1:2e:79:d9:b3: 90:2a:25:ab:44:55:d6:fe:97:3a:96:9e:72:5c:94:54:67:85: f6:3d:f0:52:fd:9c:17:c6:19:4f:39:70:72:8a:89:ed:c0:8e: ca:9a:61:30:be:0b:1f:16:66:dd:d9:95:45:59:82:58:e7:99: b2:1a:6f:fe:5c:2f:ed:e8:76:c4:3e:0a:95:d6:6c:40:61:5d: 00:dd:db:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcLkWLCYINr7eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MDIzM2IyZmMtMTJkMS00ZjdhLTgwNWYtZGZhOWY0NzM0YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ZTRfjJ7k3/OPITqXXCEmc+M3Hgc2PjMjFE HFcmUY1wSB7Reb4HLIan0tHPKOV/wR1FAQPHB4LeboPk6YNOGDykl9v67Jq7N4Nc AcdyzdpS5GTm/FxYGKZLKSPduG7X5AmQkVXJWqXiP8mPz5PJRRlIf7j5EQ+zul9G OlC4Pl7oSweEtdKgudMcuSX9VMurMNKwWxMnn5L1e4KOzvbTf2QpQTlUDtwhR4SR M/1F/882+zGK//7A+9y7RZIxxgK11yvtoylPXMqSWQAeCy0gryWWuHVSzm5ld988 NL3ZoAOkIOuocrh5uNPYrHr/D3QI+fH+Ke8dRg+HBXwcotGq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsdpLKuqumW1SSbwfoQvabHoGSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzdjMWQ0YmQtMjhlOS0z MzFmLWFlZDMtNDIxOGM0YjIwMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7mDmDaMtKjKQHqEIOK5pXT2Y0rO+6xcDeQ2MC208HwrC7pj6eecH1u Px8ZlFoVQRpNlzziBxTVl0dv6S3sLRwcGl8EkX3HpsYRTTU2Hf5hW6o8CpBbw9J8 SD4JtzpJc4dTV+Rx3Q6p/P5lKVrdKT2Q/lcXQc7RAmVuK5n+lK8Nar9unCJnMouC Zeo+7En6yv4w3KWILaCzSQjpSTGJvm2OmrphvMZ9DGahemXdLujxLnnZs5AqJatE Vdb+lzqWnnJclFRnhfY98FL9nBfGGU85cHKKie3AjsqaYTC+Cx8WZt3ZlUVZgljn mbIab/5cL+3odsQ+CpXWbEBhXQDd2zM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:04 2025 by rpki-client