$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa File: 4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa (raw, json) Hash identifier: JEsaqIpqucfZ32P0v/pW+AWyLp/lOVxvW6WhiV2gcUk= Subject key identifier: D4:EF:6D:0D:C8:16:A0:53:0E:4F:A6:DE:F7:8D:72:48:50:68:06:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C53CB9E387E5491031B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:53:cb:9e:38:7e:54:91:03:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=adb5660d-0491-4758-a996-e768925c5ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:35:e0:94:04:6e:d2:0d:57:20:a4:12:57: 50:e2:84:67:02:93:d9:5c:4b:b2:31:7a:68:4a:80: d0:5a:a4:be:e0:cb:7f:5c:82:bf:0f:c0:ff:2f:7e: 15:bd:00:f2:4c:73:39:17:ac:42:f2:06:ac:6f:e5: c3:db:45:43:db:6a:79:a0:8c:df:2f:b3:01:86:a2: 90:56:6d:95:66:05:66:43:4c:29:ab:55:9d:d8:c5: 3b:5f:e3:0e:8d:0d:d0:aa:0f:30:38:ee:59:95:0c: 90:06:d9:ca:19:2b:3b:4c:12:73:85:77:f1:a1:e6: a9:28:36:66:74:21:39:88:65:37:9f:9b:9f:51:0e: 2c:2e:24:aa:69:e0:e2:a8:5e:c0:cd:bc:6b:87:9d: f9:8e:e0:93:f6:86:61:2e:1a:28:34:d6:73:88:e4: f5:c1:de:e1:2d:47:26:21:5d:69:ac:0e:64:be:a5: 45:ff:ac:5a:33:66:35:06:57:69:e0:90:01:e2:e1: da:b5:12:7b:03:e7:38:21:84:4e:c7:e4:cf:e7:1e: 45:c8:a2:7c:b1:d8:4f:55:99:3b:9e:e1:e8:07:15: b9:64:48:00:cc:14:d7:8c:2d:b3:f4:55:32:94:39: b1:d5:4b:39:10:df:7d:d8:a2:a4:4d:d0:e1:7f:6d: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EF:6D:0D:C8:16:A0:53:0E:4F:A6:DE:F7:8D:72:48:50:68:06:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:11:a9:6f:21:cd:41:0a:28:c5:71:0f:94:a8:d7:33:51:5e: 0f:ab:fe:ac:46:c8:9a:c7:72:05:de:32:e3:ed:a5:67:5d:f9: e6:26:21:bc:0c:43:59:41:bd:cd:eb:ff:b3:22:01:cd:7d:6e: 5c:3a:64:43:61:24:5e:2b:22:47:a8:58:3d:8c:e6:02:d0:c2: eb:a6:5e:da:de:71:93:13:d4:e7:f3:76:78:a5:69:22:af:d9: b7:bd:5a:be:cd:4e:e6:9b:a5:44:a2:9c:82:54:14:ce:c9:da: a7:2f:67:c9:1c:81:26:85:af:08:cf:99:0c:88:3c:fc:9b:95: 2c:53:91:42:16:54:2a:39:74:bd:b2:0c:2c:87:96:0e:d3:85: 1d:38:db:02:91:f9:62:2a:2c:11:45:c0:40:70:ba:9a:5a:96: 59:be:c1:74:55:13:91:6d:74:26:05:12:74:f0:e8:53:3a:b0: 59:df:fc:2b:5a:a1:b3:38:f1:67:01:6b:df:31:61:b9:6d:ae: fa:ad:6d:7b:5b:22:69:3a:a2:30:55:13:b6:32:1f:92:d2:1a: 64:d3:e4:2a:ff:1f:98:41:de:79:71:80:f7:89:8e:40:19:af: bc:3f:3c:a7:67:81:9c:b0:fb:9b:e6:9d:35:4b:2a:76:6d:7a: a9:79:23:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFPLnjh+VJEDGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YWRiNTY2MGQtMDQ5MS00NzU4LWE5OTYtZTc2ODkyNWM1ZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZE14JQEbtINVyCkEldQ4oRnApPZXEuyMXpo SoDQWqS+4Mt/XIK/D8D/L34VvQDyTHM5F6xC8gasb+XD20VD22p5oIzfL7MBhqKQ Vm2VZgVmQ0wpq1Wd2MU7X+MOjQ3Qqg8wOO5ZlQyQBtnKGSs7TBJzhXfxoeapKDZm dCE5iGU3n5ufUQ4sLiSqaeDiqF7Azbxrh535juCT9oZhLhooNNZziOT1wd7hLUcm IV1prA5kvqVF/6xaM2Y1Bldp4JAB4uHatRJ7A+c4IYROx+TP5x5FyKJ8sdhPVZk7 nuHoBxW5ZEgAzBTXjC2z9FUylDmx1Us5EN992KKkTdDhf210TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTvbQ3IFqBTDk+m3veNckhQaAa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNmMzJkMzYtOTY1NC0z YmJjLWIwMGUtMjMwNmJlYWZhM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROcJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4RqW8hzUEKKMVxD5So1zNRXg+r/qxGyJrHcgXeMuPtpWdd+eYmIbwM Q1lBvc3r/7MiAc19blw6ZENhJF4rIkeoWD2M5gLQwuumXtrecZMT1OfzdnilaSKv 2be9Wr7NTuabpUSinIJUFM7J2qcvZ8kcgSaFrwjPmQyIPPyblSxTkUIWVCo5dL2y DCyHlg7ThR042wKR+WIqLBFFwEBwuppallm+wXRVE5FtdCYFEnTw6FM6sFnf/Cta obM48WcBa98xYbltrvqtbXtbImk6ojBVE7YyH5LSGmTT5Cr/H5hB3nlxgPeJjkAZ r7w/PKdngZyw+5vmnTVLKnZteql5I30= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:57 2025 by rpki-client