$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa File: 3ddcc118-f412-3942-b6a4-30742cd27a7c.roa (raw, json) Hash identifier: mSwCGW3Xnlcc9hbLg5QX+rLWUMvrG4p/j4LLSi3DA7Q= Subject key identifier: 86:DA:19:D8:6E:FC:C7:84:2A:85:C8:1D:7F:9A:78:F0:47:BC:F5:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4190B16D5FF86B1F0700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.109.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:41:90:b1:6d:5f:f8:6b:1f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e679d5ef-204d-4781-8619-bc2d409dc9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:57:a6:36:2b:aa:d6:5b:73:8d:1c:31:0e: 47:d2:d5:1e:97:6b:e3:23:41:4b:5a:62:d9:e4:de: ea:81:ac:55:61:dd:8a:19:5d:f9:af:dd:ff:76:95: d1:59:d9:89:f8:58:fa:eb:24:9b:4b:0a:a5:c8:b0: 33:ab:b1:12:5b:e9:cd:3b:07:e6:65:f7:61:18:85: 48:b6:77:1d:d8:55:1d:44:7c:4c:1e:a9:41:c5:50: 5a:57:d3:d0:ca:80:54:22:5c:56:ee:08:cf:54:92: 79:f7:8c:32:76:91:fb:22:5a:3d:c8:19:2c:80:e1: 74:50:51:55:a9:65:d6:39:33:0a:0f:32:f8:63:48: af:f1:f7:c9:b5:d6:a2:5c:49:a5:02:84:b0:ab:27: ce:04:23:93:64:55:55:cd:1d:7e:4c:b2:8c:9b:92: 8c:1d:da:95:ed:82:1e:71:2f:87:55:80:21:30:2a: ec:9c:85:f9:11:7b:33:43:f6:23:26:a7:1c:60:63: 55:5e:35:d5:0a:71:d7:e8:64:48:ab:6c:2c:0b:e5: f9:28:f8:29:59:97:62:74:69:8f:d0:31:cd:27:a0: 11:f8:0c:5d:ba:5a:1a:e9:b1:2b:d7:0e:bc:40:76: cf:a3:34:7b:fa:0f:7f:3f:88:21:bf:2c:2f:0b:33: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:19:D8:6E:FC:C7:84:2A:85:C8:1D:7F:9A:78:F0:47:BC:F5:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9c:47:e4:7e:d5:98:89:ff:1c:5e:74:e6:89:55:8c:83:ab: 8e:17:a2:74:58:64:da:90:ff:8b:d6:32:94:78:43:39:ac:de: 08:19:e5:db:15:97:2b:ae:ed:93:95:2f:9d:ec:5c:83:19:70: 3d:6d:f0:4e:9e:7d:2c:b5:1e:1c:4e:50:21:12:9c:c6:dc:17: 23:44:d3:f0:d7:83:84:3a:57:6f:c4:15:17:23:af:a3:b1:71: 85:89:9e:03:4c:7f:6e:95:11:97:3f:cf:4a:be:02:66:97:84: 3f:e4:4f:15:4f:c9:02:84:d4:13:86:4e:19:f6:ca:d1:0f:96: 4d:20:a1:27:4e:de:e2:4a:21:f3:bc:db:13:3a:33:5b:e5:fa: 5a:04:57:14:82:a5:97:7d:33:12:f7:55:25:5b:01:9d:8e:81: b2:7a:e0:0e:fa:f6:bb:a7:7d:d5:db:ed:65:c0:9b:25:2a:ca: b4:c0:07:27:b3:e5:1f:7b:78:fe:1d:14:9d:1d:a5:bf:7d:a7: e6:40:da:64:bd:a9:f2:c7:02:22:31:f2:40:63:6c:f7:13:47: a2:ca:f4:b1:0a:7a:c6:f5:6b:e8:1b:2a:15:4f:47:ec:4e:d6: de:85:1a:46:7d:4b:6a:b7:88:27:93:b3:2d:82:b0:ee:a7:60: b2:ad:38:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEGQsW1f+GsfBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTY3OWQ1ZWYtMjA0ZC00NzgxLTg2MTktYmMyZDQwOWRjOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9ZXpjYrqtZbc40cMQ5H0tUel2vjI0FLWmLZ 5N7qgaxVYd2KGV35r93/dpXRWdmJ+Fj66ySbSwqlyLAzq7ESW+nNOwfmZfdhGIVI tncd2FUdRHxMHqlBxVBaV9PQyoBUIlxW7gjPVJJ594wydpH7Ilo9yBksgOF0UFFV qWXWOTMKDzL4Y0iv8ffJtdaiXEmlAoSwqyfOBCOTZFVVzR1+TLKMm5KMHdqV7YIe cS+HVYAhMCrsnIX5EXszQ/YjJqccYGNVXjXVCnHX6GRIq2wsC+X5KPgpWZdidGmP 0DHNJ6AR+Axduloa6bEr1w68QHbPozR7+g9/P4ghvywvCzPHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbaGdhu/MeEKoXIHX+aePBHvPUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RkY2MxMTgtZjQxMi0z OTQyLWI2YTQtMzA3NDJjZDI3YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWcR+R+1ZiJ/xxedOaJVYyDq44XonRYZNqQ/4vWMpR4Qzms3ggZ5dsV lyuu7ZOVL53sXIMZcD1t8E6efSy1HhxOUCESnMbcFyNE0/DXg4Q6V2/EFRcjr6Ox cYWJngNMf26VEZc/z0q+AmaXhD/kTxVPyQKE1BOGThn2ytEPlk0goSdO3uJKIfO8 2xM6M1vl+loEVxSCpZd9MxL3VSVbAZ2OgbJ64A769runfdXb7WXAmyUqyrTAByez 5R97eP4dFJ0dpb99p+ZA2mS9qfLHAiIx8kBjbPcTR6LK9LEKesb1a+gbKhVPR+xO 1t6FGkZ9S2q3iCeTsy2CsO6nYLKtODo= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:28 2025 by rpki-client