$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bd7fb43-1790-3925-bf5e-1b31ddebb86e.roa File: 3bd7fb43-1790-3925-bf5e-1b31ddebb86e.roa (raw, json) Hash identifier: lgHfUWlq2CfMCORY/iXql2/ABRYMrGAk3Z6fb9joarg= Subject key identifier: D2:2C:CB:A1:C4:DF:55:D8:12:25:97:57:53:21:1E:35:5A:CE:A6:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C273518434FA3443F4500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bd7fb43-1790-3925-bf5e-1b31ddebb86e.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:27:35:18:43:4f:a3:44:3f:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=bbc97745-7597-4d90-8b87-184b175d8262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:10:7d:ae:76:c6:eb:46:e8:82:31:dc:49: da:4e:d5:f8:dd:ed:de:04:24:67:a2:ea:3c:41:2d: df:51:08:08:82:87:95:58:81:bb:1c:fd:f1:06:21: 82:77:19:ee:ef:8a:1a:75:dd:34:92:b8:9a:f0:76: 72:6e:88:02:75:15:63:39:36:0e:7c:ab:bd:2d:ef: d6:93:77:4e:a5:43:81:71:ee:3e:f6:2d:63:b1:ea: 5c:e7:db:37:a9:f5:1b:53:e8:76:fa:fa:3f:7b:24: d4:df:d8:dc:09:36:91:91:18:a3:25:c8:de:25:a1: 04:0a:b1:09:45:5d:df:3b:5f:4e:7e:b8:f7:18:c5: 5b:f6:06:58:9e:2e:f6:7f:ea:53:2e:ed:16:03:ae: 85:e9:eb:a2:96:a3:f8:92:ec:af:9c:d5:a9:01:21: 2b:20:c3:23:c6:49:fa:5f:5a:e2:9c:9f:a1:b3:3a: a3:fe:86:48:a6:96:a3:d6:5e:19:e8:24:ec:57:6c: 6a:77:1f:ac:28:a6:69:76:30:d7:4c:e1:16:39:dd: 93:51:b9:85:ba:8d:5d:3d:22:80:40:b0:9c:e1:47: 03:b9:07:8e:2d:b1:3d:75:93:a6:67:14:ac:0f:c4: 05:79:4c:47:df:79:3d:ca:9f:44:31:e2:a2:e3:53: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:CB:A1:C4:DF:55:D8:12:25:97:57:53:21:1E:35:5A:CE:A6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bd7fb43-1790-3925-bf5e-1b31ddebb86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:70:fb:f7:02:e1:fe:9f:18:4a:91:b8:da:cf:57:f8:e9:af: e2:f5:b6:1e:20:29:6c:fc:52:fa:03:7e:6f:a7:e7:8c:46:76: 37:c8:5e:14:88:f3:7e:e2:e2:09:de:03:70:53:c8:74:29:c8: 28:4e:0c:34:d7:6b:22:ee:7a:00:93:fa:8b:5e:6d:ee:2b:26: 87:81:4a:b3:e6:f3:43:5c:6b:7c:68:93:d0:d6:21:35:d0:2f: 74:0d:c4:08:0a:f1:90:ff:ef:37:27:30:50:ad:39:60:59:f6: 20:c8:71:cf:2d:1d:e1:73:1c:1d:c2:d3:8b:b4:c2:58:4d:1b: 43:99:67:f1:b2:92:7c:14:e9:24:66:24:e8:5f:1d:28:56:c3: 22:92:82:5d:cb:0b:a4:03:c3:66:36:8f:9a:81:4d:0b:fe:58: 7e:7b:08:31:0e:91:a1:30:f9:c4:93:e1:0c:9e:7a:9a:da:4a: 9a:1b:72:d0:c8:73:63:e2:8c:ab:5c:4f:26:7e:34:8f:2e:10: da:67:64:a3:4b:16:75:f4:0f:c6:1d:1d:39:84:fe:a0:8b:38: f5:9b:a9:c8:2e:81:c4:1d:c6:81:48:07:36:ea:70:c3:77:85: 1c:57:9b:b1:02:08:d4:26:2b:14:08:33:e8:44:01:aa:de:da: 4a:33:b1:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCc1GENPo0Q/RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmJjOTc3NDUtNzU5Ny00ZDkwLThiODctMTg0YjE3NWQ4MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYsQfa52xutG6IIx3EnaTtX43e3eBCRnouo8 QS3fUQgIgoeVWIG7HP3xBiGCdxnu74oadd00kria8HZybogCdRVjOTYOfKu9Le/W k3dOpUOBce4+9i1jsepc59s3qfUbU+h2+vo/eyTU39jcCTaRkRijJcjeJaEECrEJ RV3fO19Ofrj3GMVb9gZYni72f+pTLu0WA66F6euilqP4kuyvnNWpASErIMMjxkn6 X1rinJ+hszqj/oZIppaj1l4Z6CTsV2xqdx+sKKZpdjDXTOEWOd2TUbmFuo1dPSKA QLCc4UcDuQeOLbE9dZOmZxSsD8QFeUxH33k9yp9EMeKi41NpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIsy6HE31XYEiWXV1MhHjVazqY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2JkN2ZiNDMtMTc5MC0z OTI1LWJmNWUtMWIzMWRkZWJiODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRw+/cC4f6fGEqRuNrPV/jpr+L1th4gKWz8UvoDfm+n54xGdjfIXhSI 837i4gneA3BTyHQpyChODDTXayLuegCT+otebe4rJoeBSrPm80Nca3xok9DWITXQ L3QNxAgK8ZD/7zcnMFCtOWBZ9iDIcc8tHeFzHB3C04u0wlhNG0OZZ/GyknwU6SRm JOhfHShWwyKSgl3LC6QDw2Y2j5qBTQv+WH57CDEOkaEw+cST4QyeepraSpobctDI c2PijKtcTyZ+NI8uENpnZKNLFnX0D8YdHTmE/qCLOPWbqcgugcQdxoFIBzbqcMN3 hRxXm7ECCNQmKxQIM+hEAare2kozsUc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:55 2025 by rpki-client