$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f25764c-5df7-3219-a647-2c9d255d937f.roa File: 3f25764c-5df7-3219-a647-2c9d255d937f.roa (raw, json) Hash identifier: LJbzoY++SXuKMf+b835TK89AT5+K8bd2zjfk8icd8FE= Subject key identifier: ED:46:37:12:08:39:4E:5D:E2:7A:AB:59:B2:76:F9:5D:E4:5B:79:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F0ECE3356FE62B912900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f25764c-5df7-3219-a647-2c9d255d937f.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f0:ec:e3:35:6f:e6:2b:91:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=640d8f60-1d21-41cd-896f-3e7579a21963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:f1:27:03:bf:5c:05:ee:97:07:fd:a2:1b: e4:c6:5f:aa:3a:7a:51:8a:cc:2f:4d:d3:ed:d5:31: 89:e9:57:fa:95:dd:7d:73:04:f9:cd:0a:da:5f:20: b3:b1:bf:a5:dd:bd:fd:8b:d5:b0:94:4b:98:f2:e0: 0d:46:ea:e5:f4:96:31:c3:ab:85:e2:47:68:f9:2c: 54:3e:ff:f3:e7:b0:72:a3:8c:e6:0f:fb:86:35:09: 54:a5:a2:f9:54:84:d3:e3:d2:78:71:a6:ec:e6:03: bd:8d:d7:ff:42:ad:af:88:77:4a:98:8c:6c:76:1f: ce:f1:02:5e:a3:e1:94:99:eb:ff:9e:48:a1:1f:1b: 7d:b6:ef:b4:bf:0f:92:81:04:2b:cc:31:fa:d8:bc: 3d:b5:e2:5f:36:05:7d:6a:6f:2a:80:50:2f:4c:eb: 48:0c:99:17:3b:83:69:42:ee:b4:0d:2e:bf:19:d6: 9c:3c:73:df:a4:43:c5:4c:18:15:74:32:de:36:04: 57:20:69:bf:6a:9b:e1:d2:76:9b:b0:11:81:0a:ca: 3c:19:6f:55:f9:cb:f0:56:f1:89:35:20:f1:7d:b6: f2:08:b5:4d:b1:a5:e7:f3:fa:f0:ad:4f:81:c2:f9: 2d:c0:b1:bf:51:00:7c:df:50:64:5f:ce:15:1c:a0: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:46:37:12:08:39:4E:5D:E2:7A:AB:59:B2:76:F9:5D:E4:5B:79:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f25764c-5df7-3219-a647-2c9d255d937f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3e:85:19:dd:ab:ab:89:c4:31:5b:b8:17:a2:d7:d8:9a:58: bb:27:23:ae:d0:f5:8b:d7:a4:05:19:8c:da:fb:87:d4:1f:d2: 72:94:ca:81:2d:d0:c2:8c:3b:94:5b:ce:69:a8:7a:54:7e:e5: 22:28:1b:ad:e7:fa:9c:4e:87:07:e5:da:b8:b6:33:4d:d2:93: df:3b:b9:79:fa:ea:14:7e:26:cc:10:08:3b:9c:5d:ac:14:4c: 9d:fd:66:d5:77:8d:8c:72:23:93:ce:c9:a2:67:9e:46:5c:18: 41:28:ed:7e:ca:05:de:8f:37:48:96:fe:6a:2d:84:9e:a2:78: b3:ba:3d:08:6d:0e:ac:5e:d9:71:1a:48:35:d0:01:93:8a:50: 67:8c:7d:7a:04:8b:af:ed:57:2d:bb:35:45:08:da:05:f7:9f: 16:3f:d0:90:bd:b4:a9:c7:2a:c8:ee:ad:17:ce:0c:d5:61:07: 88:1f:af:1e:3e:c0:b4:f5:6b:1b:3a:fa:bb:24:de:52:96:7b: cc:6d:94:8d:99:57:c0:61:55:d1:d2:76:e1:e4:70:ed:84:92: ce:f7:2c:6f:f5:0c:2b:39:51:b7:2b:8b:a2:9a:2a:e3:0f:10: a4:dc:4c:7a:f6:16:f5:90:16:93:b1:55:eb:48:89:c1:9f:2e: d2:a6:42:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvDs4zVv5iuRKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NjQwZDhmNjAtMWQyMS00MWNkLTg5NmYtM2U3NTc5YTIxOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjHxJwO/XAXulwf9ohvkxl+qOnpRiswvTdPt 1TGJ6Vf6ld19cwT5zQraXyCzsb+l3b39i9WwlEuY8uANRurl9JYxw6uF4kdo+SxU Pv/z57Byo4zmD/uGNQlUpaL5VITT49J4cabs5gO9jdf/Qq2viHdKmIxsdh/O8QJe o+GUmev/nkihHxt9tu+0vw+SgQQrzDH62Lw9teJfNgV9am8qgFAvTOtIDJkXO4Np Qu60DS6/GdacPHPfpEPFTBgVdDLeNgRXIGm/apvh0nabsBGBCso8GW9V+cvwVvGJ NSDxfbbyCLVNsaXn8/rwrU+BwvktwLG/UQB831BkX84VHKBkXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1GNxIIOU5d4nqrWbJ2+V3kW3nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2YyNTc2NGMtNWRmNy0z MjE5LWE2NDctMmM5ZDI1NWQ5MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGh3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo+hRndq6uJxDFbuBei19iaWLsnI67Q9YvXpAUZjNr7h9Qf0nKUyoEt 0MKMO5RbzmmoelR+5SIoG63n+pxOhwfl2ri2M03Sk987uXn66hR+JswQCDucXawU TJ39ZtV3jYxyI5POyaJnnkZcGEEo7X7KBd6PN0iW/mothJ6ieLO6PQhtDqxe2XEa SDXQAZOKUGeMfXoEi6/tVy27NUUI2gX3nxY/0JC9tKnHKsjurRfODNVhB4gfrx4+ wLT1axs6+rsk3lKWe8xtlI2ZV8BhVdHSduHkcO2Eks73LG/1DCs5Ubcri6KaKuMP EKTcTHr2FvWQFpOxVetIicGfLtKmQuQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:46 2025 by rpki-client