$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa File: 42560064-0659-32dc-a3b0-1a01cfca664e.roa (raw, json) Hash identifier: /k/+70z2NKKD6/ip9g+B1vSbjXmNQKMgefNwnHQnO5k= Subject key identifier: 5D:44:81:C8:BC:AB:81:9F:5C:3D:71:6B:E9:FD:BC:4E:BA:34:DD:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373A658E5011520D5A4F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3a:65:8e:50:11:52:0d:5a:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=6b1e15b5-32fe-4866-9722-bf0d194aaf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:b0:28:d0:13:24:e2:25:91:b3:70:cc:a6: 58:7a:04:92:b3:f0:44:52:8f:07:52:54:e4:be:af: 83:03:32:50:80:bc:db:3c:b2:b7:cf:b4:a0:29:74: ad:24:2e:f8:6b:29:d6:ce:bd:5d:02:db:ec:7b:7d: f2:08:bd:1a:d1:cf:ec:09:4e:d3:50:5a:41:ee:d3: fc:17:8a:d9:70:5c:24:73:32:bf:b9:58:d9:71:65: d2:0f:e2:af:88:63:27:b2:49:a7:c0:99:dd:dd:3a: a9:00:44:81:57:d6:9f:8b:f7:f6:d5:88:16:6f:11: 3c:4b:70:86:ea:27:27:2f:c9:c4:60:e2:47:32:0c: 48:68:bc:ed:3d:ae:06:3c:a0:50:82:4c:40:95:ab: e4:94:00:ed:57:c1:22:63:a6:f3:fa:b5:b9:ed:0a: 09:b5:48:ce:ca:f9:97:f8:51:ec:28:27:3c:49:6c: 54:be:aa:09:11:b1:1e:dc:a6:36:aa:75:4f:7e:84: 91:79:40:f9:11:8d:b8:92:4a:7d:a4:b0:3f:0c:b1: 91:a4:a0:2e:be:11:8a:b5:2a:88:5b:64:78:7e:1b: 2d:9c:4c:ff:04:5a:d9:9c:da:33:3d:35:22:cb:42: f9:26:13:3b:dc:2a:e6:01:a2:d0:02:3d:b8:5f:d5: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:81:C8:BC:AB:81:9F:5C:3D:71:6B:E9:FD:BC:4E:BA:34:DD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e6:0f:7b:29:5e:49:b7:40:44:e1:ea:75:2b:5b:f2:96:d0: 7b:b9:83:38:77:ab:bd:8a:94:5b:d0:d8:7c:87:d0:aa:81:0b: 1c:57:bd:35:e1:63:92:48:4e:d1:f0:a1:57:cc:5e:78:30:eb: 49:03:72:21:51:e6:69:40:c1:f9:8d:46:04:0d:28:e2:10:6f: b2:93:fb:ba:3f:7a:f1:6a:51:49:aa:ca:7d:9b:2f:f1:83:ad: a5:05:16:0e:e8:03:92:ab:0c:f7:ef:66:d4:0c:19:89:03:bc: 46:10:be:a9:44:1c:aa:ba:f9:89:4b:3b:9f:a8:41:c1:9e:7f: 83:0f:30:3d:bc:10:e5:1a:3e:25:8a:4c:30:ce:00:f3:68:2c: cb:c8:19:46:14:3f:1e:3e:c4:4a:79:b3:4b:b6:6a:9c:1c:38: 8b:af:a3:73:a7:d0:8d:2a:fb:8b:fe:81:54:19:0c:73:df:2d: 86:82:b2:27:25:9d:30:3e:b3:87:49:3e:3a:c7:98:33:24:3d: fd:ad:5e:8f:a1:61:45:a9:01:cd:3e:a0:3b:53:1f:5a:d2:8b: 24:e5:7b:33:d1:96:f0:4c:71:6e:c8:12:2d:93:d4:aa:f1:3c: 2e:9e:55:7b:2e:be:2e:4e:01:14:7e:a4:8f:4b:ea:3e:fc:28: a8:ad:32:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzpljlARUg1aTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NmIxZTE1YjUtMzJmZS00ODY2LTk3MjItYmYwZDE5NGFhZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoKwKNATJOIlkbNwzKZYegSSs/BEUo8HUlTk vq+DAzJQgLzbPLK3z7SgKXStJC74aynWzr1dAtvse33yCL0a0c/sCU7TUFpB7tP8 F4rZcFwkczK/uVjZcWXSD+KviGMnskmnwJnd3TqpAESBV9afi/f21YgWbxE8S3CG 6icnL8nEYOJHMgxIaLztPa4GPKBQgkxAlavklADtV8EiY6bz+rW57QoJtUjOyvmX +FHsKCc8SWxUvqoJEbEe3KY2qnVPfoSReUD5EY24kkp9pLA/DLGRpKAuvhGKtSqI W2R4fhstnEz/BFrZnNozPTUiy0L5JhM73CrmAaLQAj24X9UdFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1Egci8q4GfXD1xa+n9vE66NN3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDI1NjAwNjQtMDY1OS0z MmRjLWEzYjAtMWEwMWNmY2E2NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXmD3spXkm3QETh6nUrW/KW0Hu5gzh3q72KlFvQ2HyH0KqBCxxXvTXh Y5JITtHwoVfMXngw60kDciFR5mlAwfmNRgQNKOIQb7KT+7o/evFqUUmqyn2bL/GD raUFFg7oA5KrDPfvZtQMGYkDvEYQvqlEHKq6+YlLO5+oQcGef4MPMD28EOUaPiWK TDDOAPNoLMvIGUYUPx4+xEp5s0u2apwcOIuvo3On0I0q+4v+gVQZDHPfLYaCsicl nTA+s4dJPjrHmDMkPf2tXo+hYUWpAc0+oDtTH1rSiyTlezPRlvBMcW7IEi2T1Krx PC6eVXsuvi5OARR+pI9L6j78KKitMv0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:51 2025 by rpki-client