$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41f094d7-90ce-32fd-b3b5-51d710cd6437.roa File: 41f094d7-90ce-32fd-b3b5-51d710cd6437.roa (raw, json) Hash identifier: xPYSX6p1Sa+XcC+swt9MKsafoVV5QVhj7Br3Ki0KuvA= Subject key identifier: 5E:CA:D7:75:A0:C6:32:85:BF:96:92:7B:4E:EE:00:C4:68:A7:DC:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374CD59972B604C415A740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41f094d7-90ce-32fd-b3b5-51d710cd6437.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4c:d5:99:72:b6:04:c4:15:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a5891b34-5c21-4e77-a063-4e53c6c7b65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:bc:83:23:8a:70:ae:78:68:7f:b2:c8:97: 6d:54:2a:2c:c5:22:08:01:c6:31:ca:40:63:95:32: a4:b1:e9:61:67:6b:6e:e3:1d:34:83:06:c6:b3:40: 1f:c1:78:86:8c:75:a0:a7:6d:b5:00:9a:c2:8a:60: f9:8e:40:e4:0a:10:f6:17:7e:98:b5:4b:c2:db:f8: ab:45:e7:29:89:8e:fa:83:81:68:21:7c:f5:e6:e1: 7d:21:15:dc:0b:0a:51:3d:74:65:49:f5:d8:58:2e: 90:b8:57:2d:1a:df:7f:fc:01:b7:d8:ec:74:08:44: f7:f5:f2:bb:26:5f:f9:76:a8:32:aa:63:a0:6b:14: 8e:01:02:56:e5:57:0d:e7:76:2e:fc:a2:c8:2f:89: 84:b7:ed:dd:8e:f5:9a:34:e9:57:6a:30:d8:40:80: 91:75:74:d2:25:c9:2b:c8:f4:81:d6:25:43:54:b3: 42:77:81:a7:e0:d6:de:1b:ef:10:a3:7e:cd:f7:ab: 84:11:7c:7a:e0:72:db:8f:47:7c:23:c2:99:b0:70: dd:0d:61:47:00:5a:92:19:e8:a5:56:41:41:47:95: 46:12:19:11:85:84:7d:a3:92:f1:8a:f7:25:63:2c: 90:f2:37:6b:76:05:dc:ef:05:b7:6e:bc:01:51:91: 91:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CA:D7:75:A0:C6:32:85:BF:96:92:7B:4E:EE:00:C4:68:A7:DC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/41f094d7-90ce-32fd-b3b5-51d710cd6437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:af:8c:5a:fd:cc:ab:81:05:cc:c3:36:e9:31:88:82:92:3f: aa:63:df:3a:76:26:57:e1:03:7a:20:ae:f6:26:6f:e4:98:4d: 05:66:c8:69:94:b8:30:3a:ad:95:78:8e:b7:a7:7b:96:9f:00: e7:cc:fc:21:2a:5b:d1:d0:62:83:c6:d6:b2:ac:41:1e:2d:38: 8f:80:c2:14:4b:e1:36:62:82:aa:fe:1d:02:a7:53:45:23:27: 76:0c:69:58:73:1a:e9:86:c2:02:b8:cd:43:b3:d5:0b:e0:1d: 2d:34:3d:8a:66:a4:52:5f:a3:ce:1a:36:00:0d:a2:22:92:85: 26:30:40:ee:2e:c2:a6:5f:16:06:b9:69:2e:2f:d7:2e:0a:93: 63:38:ec:89:c4:83:a2:22:11:8f:10:26:4e:7b:b6:65:e2:56: 4f:0f:6e:b9:05:2b:e0:f2:e8:2c:dd:66:af:53:84:be:2a:6e: 44:19:77:1e:e9:67:71:d3:7a:ed:ae:2a:50:28:95:a1:95:c0: cf:64:ee:e3:54:09:eb:2d:21:41:49:63:84:b1:32:98:ff:a7: f4:29:1d:8e:57:63:22:c8:44:32:9f:3a:bc:7c:8c:60:c9:9a: e5:00:34:13:ea:8f:63:71:e0:e9:a8:7f:ce:ae:d4:22:c6:f2: 6d:59:b5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0zVmXK2BMQVp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTU4OTFiMzQtNWMyMS00ZTc3LWEwNjMtNGU1M2M2YzdiNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr+8gyOKcK54aH+yyJdtVCosxSIIAcYxykBj lTKkselhZ2tu4x00gwbGs0AfwXiGjHWgp221AJrCimD5jkDkChD2F36YtUvC2/ir RecpiY76g4FoIXz15uF9IRXcCwpRPXRlSfXYWC6QuFctGt9//AG32Ox0CET39fK7 Jl/5dqgyqmOgaxSOAQJW5VcN53Yu/KLIL4mEt+3djvWaNOlXajDYQICRdXTSJckr yPSB1iVDVLNCd4Gn4NbeG+8Qo37N96uEEXx64HLbj0d8I8KZsHDdDWFHAFqSGeil VkFBR5VGEhkRhYR9o5LxivclYyyQ8jdrdgXc7wW3brwBUZGRnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7K13WgxjKFv5aSe07uAMRop9xjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDFmMDk0ZDctOTBjZS0z MmZkLWIzYjUtNTFkNzEwY2Q2NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuvjFr9zKuBBczDNukxiIKSP6pj3zp2JlfhA3ogrvYmb+SYTQVmyGmU uDA6rZV4jrene5afAOfM/CEqW9HQYoPG1rKsQR4tOI+AwhRL4TZigqr+HQKnU0Uj J3YMaVhzGumGwgK4zUOz1QvgHS00PYpmpFJfo84aNgANoiKShSYwQO4uwqZfFga5 aS4v1y4Kk2M47InEg6IiEY8QJk57tmXiVk8PbrkFK+Dy6CzdZq9ThL4qbkQZdx7p Z3HTeu2uKlAolaGVwM9k7uNUCestIUFJY4SxMpj/p/QpHY5XYyLIRDKfOrx8jGDJ muUANBPqj2Nx4Omof86u1CLG8m1ZtfI= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:27 2025 by rpki-client