$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49c4cab6-5710-342b-89b4-5f98025c94ee.roa File: 49c4cab6-5710-342b-89b4-5f98025c94ee.roa (raw, json) Hash identifier: 16m2fa0b0xubRpTapEqOmEA4B/Nkr4CdFRECdkY2eY4= Subject key identifier: CD:B7:9A:D5:30:8A:7A:77:B0:82:29:53:E7:E0:30:B4:55:1B:1E:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4C4C92CB833DCA800800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49c4cab6-5710-342b-89b4-5f98025c94ee.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.228.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4c:4c:92:cb:83:3d:ca:80:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=cef0c798-142e-40e1-a8e5-024d31554261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:2e:8a:ef:c7:68:c9:ef:ba:b2:34:db:dc: 0f:41:a7:97:73:08:bf:67:99:ed:26:ed:25:6f:a4: 1c:6f:1d:42:0b:2e:73:1a:d6:f2:fa:45:3e:e3:62: b2:f8:a3:f7:3f:8f:85:28:1c:1c:52:7b:13:e9:97: 97:95:e0:e4:50:e9:19:8a:09:40:3e:6a:d6:c7:ed: 96:06:68:e9:d0:dc:a5:75:ad:38:91:ae:2c:4f:3f: 8f:35:ce:77:e2:07:30:70:20:e1:aa:81:63:42:61: f5:e4:dc:35:6d:05:62:10:ef:7f:41:d5:fd:7c:9e: 79:f2:11:32:eb:53:e7:c6:d9:8a:35:6e:5d:db:f5: 59:c1:47:d2:43:2a:df:d6:9a:86:d9:a5:c4:76:7b: 24:fc:4f:cf:a1:28:15:fd:55:da:3a:e2:13:2d:a7: ea:bd:65:ec:46:cf:f1:04:cd:cc:22:4e:3f:bb:a9: 6b:38:e9:a1:b7:b8:95:9a:11:48:df:ec:bb:64:78: 61:39:35:3e:1e:b2:c6:df:d5:19:35:f3:17:8d:c5: a6:c4:2e:96:fe:27:e9:a1:79:bd:f7:65:47:ae:50: 0e:0b:63:d9:4f:1c:67:05:59:86:70:bf:09:56:0b: b2:c0:89:e3:61:f7:74:dc:73:8d:d0:ac:a2:d5:f0: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:9A:D5:30:8A:7A:77:B0:82:29:53:E7:E0:30:B4:55:1B:1E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49c4cab6-5710-342b-89b4-5f98025c94ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b5:62:78:79:60:39:a8:d7:61:76:e3:aa:b1:3a:a6:7b:96: 52:24:4d:29:8b:da:aa:fa:29:f2:a3:3e:b2:07:9b:24:40:d6: 9b:c8:21:93:8d:99:b7:bc:a9:8c:8b:7e:03:c4:b1:7b:34:39: 84:dc:14:70:c3:ae:37:12:d8:bd:ba:15:36:02:cd:28:1b:62: e6:ae:fa:ee:d2:5d:e5:7d:82:06:14:c4:d7:49:0b:b4:a5:b3: 1d:f1:98:b6:07:5a:f1:69:a7:39:3c:e4:98:4c:67:17:29:bc: ee:fe:7c:5e:22:f6:f2:92:9a:96:99:8c:43:de:f0:5b:7d:73: cc:43:31:e1:94:b9:35:cd:f9:17:88:05:43:e8:9d:1d:f0:8f: e6:7e:ae:c4:6e:ec:c6:4b:f6:f6:e4:41:28:3b:8a:7a:70:69: 85:de:c7:2c:4e:70:8c:a4:9a:a7:63:bf:36:9b:ec:d7:00:8e: 83:07:18:e6:47:37:ee:45:98:eb:16:e4:2e:3f:ad:fd:4f:4a: bc:f3:9c:c0:05:c6:68:5f:0e:68:3b:73:92:21:0c:53:84:a4: da:3d:af:e8:0a:23:21:27:45:b1:7d:e3:3b:df:35:f6:b8:b8: b3:ac:67:75:fe:82:73:20:88:a9:b4:34:64:93:36:d9:af:53: 57:00:f7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnExMksuDPcqACAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Y2VmMGM3OTgtMTQyZS00MGUxLWE4ZTUtMDI0ZDMxNTU0MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrYuiu/HaMnvurI029wPQaeXcwi/Z5ntJu0l b6Qcbx1CCy5zGtby+kU+42Ky+KP3P4+FKBwcUnsT6ZeXleDkUOkZiglAPmrWx+2W Bmjp0Nylda04ka4sTz+PNc534gcwcCDhqoFjQmH15Nw1bQViEO9/QdX9fJ558hEy 61PnxtmKNW5d2/VZwUfSQyrf1pqG2aXEdnsk/E/PoSgV/VXaOuITLafqvWXsRs/x BM3MIk4/u6lrOOmht7iVmhFI3+y7ZHhhOTU+HrLG39UZNfMXjcWmxC6W/ifpoXm9 92VHrlAOC2PZTxxnBVmGcL8JVguywInjYfd03HON0Kyi1fDWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM23mtUwinp3sIIpU+fgMLRVGx5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDljNGNhYjYtNTcxMC0z NDJiLTg5YjQtNWY5ODAyNWM5NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe1Ynh5YDmo12F246qxOqZ7llIkTSmL2qr6KfKjPrIHmyRA1pvIIZON mbe8qYyLfgPEsXs0OYTcFHDDrjcS2L26FTYCzSgbYuau+u7SXeV9ggYUxNdJC7Sl sx3xmLYHWvFppzk85JhMZxcpvO7+fF4i9vKSmpaZjEPe8Ft9c8xDMeGUuTXN+ReI BUPonR3wj+Z+rsRu7MZL9vbkQSg7inpwaYXexyxOcIykmqdjvzab7NcAjoMHGOZH N+5FmOsW5C4/rf1PSrzznMAFxmhfDmg7c5IhDFOEpNo9r+gKIyEnRbF94zvfNfa4 uLOsZ3X+gnMgiKm0NGSTNtmvU1cA91I= -----END CERTIFICATE-----Generated at Wed Oct 15 23:52:50 2025 by rpki-client