$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa File: 438125ea-62d3-37b8-8d16-432d8d0b72b2.roa (raw, json) Hash identifier: hP5OqajYMmyAFE0DIUcjkJfmumNBn06ZACuoW/pM3BY= Subject key identifier: C6:F5:86:BD:BB:EF:09:A8:D5:62:AE:8D:84:B2:99:78:EF:99:7A:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B0FA6C55F2FBF813118170780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 22773 IP address blocks: 68.227.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c5:5f:2f:bf:81:31:18:17:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=25029dea-53e6-4a06-aa5f-357004187a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:42:d9:51:60:f2:9a:7f:98:7f:ed:11:1c:75: a4:57:56:47:77:ad:ec:ca:86:72:95:66:05:37:cb: 78:70:9d:e5:1a:9a:71:1d:de:43:c8:a1:1c:f4:1f: 47:8b:9d:b7:45:1a:84:f8:c0:2f:d0:3d:2b:96:d2: 8c:9f:0b:cb:44:43:5b:10:7e:45:0a:ee:3b:10:be: fd:50:bc:5a:eb:60:82:73:bd:20:f0:2d:c9:e9:54: ec:12:5f:ec:3c:1f:b6:6d:30:0f:ce:63:2b:2f:98: a2:18:2d:f4:22:79:fa:8c:79:e0:34:00:93:ad:e2: 57:b9:53:7c:a8:06:17:26:7e:b6:a4:7e:2c:38:01: 12:61:f7:c1:52:bd:5b:fa:4b:c8:c0:0f:74:78:20: 17:11:8b:ef:60:63:4d:02:c4:31:aa:49:f7:a1:a0: 93:a8:e3:46:57:8e:47:6c:95:d0:71:d3:1c:b2:ed: 18:58:a5:98:10:02:a5:ce:59:ff:f5:71:8f:86:23: c6:88:58:a2:6c:2e:4e:2a:d9:dd:49:8d:6f:57:04: 0a:75:0a:86:3f:6b:98:21:46:4a:77:d1:8c:0e:3b: 6c:75:c3:ff:3e:4b:7f:e4:88:f7:03:46:51:dc:43: c1:ba:ff:1f:fe:4e:c2:7c:6a:7c:ba:f6:8f:fe:25: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F5:86:BD:BB:EF:09:A8:D5:62:AE:8D:84:B2:99:78:EF:99:7A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3a:96:8b:00:41:a7:bd:ec:23:72:27:a1:06:71:e4:91:c2: 9f:62:1e:e0:01:5c:26:a9:a4:79:5e:d1:ca:bf:83:2a:ba:44: 82:1c:8b:bb:35:b3:11:f3:12:5f:01:87:c6:82:a7:a2:89:d3: 35:b4:ca:c5:75:c2:cd:a5:73:97:6b:42:4a:4a:01:a7:9d:d7: 7a:3e:a2:bd:72:4c:7e:2f:e3:b5:be:03:48:52:19:f9:9f:e4: b5:b5:07:c2:ab:25:fc:47:2c:9b:17:eb:3d:4d:60:46:f9:b6: cc:5a:70:b6:83:7d:3f:a5:d6:af:86:93:e1:5f:9d:49:d9:2b: 9a:b3:0b:cd:5a:27:b3:40:5d:46:10:c4:66:ea:fd:c8:20:b6: 7f:ca:dd:d4:ed:dd:d4:47:c8:53:95:7c:eb:c7:ab:73:0c:51: 2d:6a:fc:52:c1:1a:68:9e:e9:ad:3b:f7:2b:d3:70:92:ab:e6: a8:f0:3a:46:27:0f:0e:6e:42:f8:02:d4:02:d6:f2:2d:0a:cd: 5d:28:0c:6b:57:79:ff:60:bc:0d:62:c8:87:f8:56:e9:b5:ca: de:e5:76:63:c8:b1:11:9e:ed:b5:f7:a1:aa:a1:ef:1a:c7:69: 9d:7b:bf:cc:49:c6:60:6c:67:ac:28:4a:3c:19:c7:0d:3f:e6: da:1b:43:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsVfL7+BMRgXB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MjUwMjlkZWEtNTNlNi00YTA2LWFhNWYtMzU3MDA0MTg3YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiULZUWDymn+Yf+0RHHWkV1ZHd63syoZylWYF N8t4cJ3lGppxHd5DyKEc9B9Hi523RRqE+MAv0D0rltKMnwvLRENbEH5FCu47EL79 ULxa62CCc70g8C3J6VTsEl/sPB+2bTAPzmMrL5iiGC30Inn6jHngNACTreJXuVN8 qAYXJn62pH4sOAESYffBUr1b+kvIwA90eCAXEYvvYGNNAsQxqkn3oaCTqONGV45H bJXQcdMcsu0YWKWYEAKlzln/9XGPhiPGiFiibC5OKtndSY1vVwQKdQqGP2uYIUZK d9GMDjtsdcP/Pkt/5Ij3A0ZR3EPBuv8f/k7CfGp8uvaP/iW37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb1hr277wmo1WKujYSymXjvmXo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4MTI1ZWEtNjJkMy0z N2I4LThkMTYtNDMyZDhkMGI3MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE86losAQae97CNyJ6EGceSRwp9iHuABXCappHle0cq/gyq6RIIci7s1 sxHzEl8Bh8aCp6KJ0zW0ysV1ws2lc5drQkpKAaed13o+or1yTH4v47W+A0hSGfmf 5LW1B8KrJfxHLJsX6z1NYEb5tsxacLaDfT+l1q+Gk+FfnUnZK5qzC81aJ7NAXUYQ xGbq/cggtn/K3dTt3dRHyFOVfOvHq3MMUS1q/FLBGmie6a079yvTcJKr5qjwOkYn Dw5uQvgC1ALW8i0KzV0oDGtXef9gvA1iyIf4Vum1yt7ldmPIsRGe7bX3oaqh7xrH aZ17v8xJxmBsZ6woSjwZxw0/5tobQ+s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:26 2025 by rpki-client