$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/513e90e8-3606-35b1-9f1a-781d7fd0ae67.roa File: 513e90e8-3606-35b1-9f1a-781d7fd0ae67.roa (raw, json) Hash identifier: fpYjSDYeMtT20y0Kw9yp7TxcjtDo8LfrIh2bQpg4SBA= Subject key identifier: E2:09:A2:42:E1:6D:D1:EC:CE:AA:8A:B9:AA:79:1F:AD:FB:59:DC:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4D0A51E56C87CC57E800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/513e90e8-3606-35b1-9f1a-781d7fd0ae67.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.228.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4d:0a:51:e5:6c:87:cc:57:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=510b045c-c798-450e-95e2-0bc007f852ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:c4:39:33:75:26:96:f4:eb:5d:9b:32:89: bd:a1:61:28:e4:55:7d:c8:4a:24:3f:90:82:90:13: 54:3a:68:f9:4c:fa:15:d8:f8:15:f7:95:ee:ad:2d: e6:1b:53:38:88:71:c3:7a:eb:49:71:0f:7b:46:22: fe:f8:65:56:23:49:f9:ff:a3:00:41:6f:61:78:4b: 9b:54:97:10:8b:a5:b7:aa:c5:a0:f2:70:0f:be:bf: 1f:b4:59:ea:9c:2f:38:c0:04:f0:56:81:20:75:de: b0:97:c6:1a:f4:74:fb:40:f0:3e:50:ed:56:89:71: 64:78:d4:0e:c1:36:84:2b:12:c7:e3:f6:cd:10:b1: a8:d5:ca:9c:80:8e:ba:70:42:52:8e:10:7c:a4:29: 4f:53:e7:62:53:48:11:5a:c3:f9:9c:ca:01:9b:5e: 37:df:c4:38:05:11:73:f2:0d:6f:1b:5d:e8:a7:02: 35:ee:98:ca:af:16:aa:5d:e4:46:6c:8b:e9:24:7a: db:e0:b1:34:80:02:ca:48:18:2b:fb:43:9c:12:38: ea:ff:44:8f:3b:06:69:dc:70:39:69:2f:c0:d5:62: f9:a7:7d:1a:8f:7a:4b:e0:6e:21:91:15:6f:88:ef: 1d:cd:30:1f:09:d1:68:c8:01:66:d2:c6:2a:48:13: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:09:A2:42:E1:6D:D1:EC:CE:AA:8A:B9:AA:79:1F:AD:FB:59:DC:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/513e90e8-3606-35b1-9f1a-781d7fd0ae67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3f:63:db:66:5b:2c:18:f8:ad:a8:3c:df:e0:ef:39:5b:e7: d1:24:ae:55:cf:6d:4e:cd:34:ce:71:c5:31:51:fc:f3:12:33: 6e:e2:71:68:cb:43:c5:ba:f1:af:9e:5c:1a:a4:f0:4c:15:8a: 98:19:3c:25:b4:40:da:4f:b0:54:14:5f:d5:14:01:6d:5b:a5: cb:de:32:21:49:fb:6b:67:37:61:cd:1c:7f:15:c5:2c:b0:a7: 64:7c:02:0c:29:62:76:19:fe:ac:be:a2:78:86:e9:c0:cf:cf: 18:29:7a:1e:b9:01:22:d3:24:e0:04:d0:cb:d2:b8:f1:32:72: bf:50:81:52:35:d8:d1:e7:a9:9b:b5:9d:e6:f2:6b:c8:90:4f: 2b:8d:ef:45:5d:87:30:f5:61:13:2a:17:59:f3:9a:3d:d1:de: d6:3f:0f:ac:88:30:2e:90:b8:3d:13:cc:59:e4:86:31:f3:21: 64:5b:84:5f:e5:09:ca:4a:f3:e8:44:77:07:b7:c0:ca:a0:ca: cd:1c:ba:35:16:a1:5e:65:e8:91:c2:5c:d6:ec:34:45:79:f8: c7:b5:75:66:6c:af:34:91:39:df:bb:73:40:6c:93:98:cd:30: 04:1c:2c:1d:e0:d1:62:61:71:d2:21:a4:cc:f5:19:70:b5:a8: 25:80:33:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnE0KUeVsh8xX6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTEwYjA0NWMtYzc5OC00NTBlLTk1ZTItMGJjMDA3Zjg1MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqErEOTN1Jpb0612bMom9oWEo5FV9yEokP5CC kBNUOmj5TPoV2PgV95XurS3mG1M4iHHDeutJcQ97RiL++GVWI0n5/6MAQW9heEub VJcQi6W3qsWg8nAPvr8ftFnqnC84wATwVoEgdd6wl8Ya9HT7QPA+UO1WiXFkeNQO wTaEKxLH4/bNELGo1cqcgI66cEJSjhB8pClPU+diU0gRWsP5nMoBm14338Q4BRFz 8g1vG13opwI17pjKrxaqXeRGbIvpJHrb4LE0gALKSBgr+0OcEjjq/0SPOwZp3HA5 aS/A1WL5p30aj3pL4G4hkRVviO8dzTAfCdFoyAFm0sYqSBONnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIJokLhbdHszqqKuap5H637Wdw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTEzZTkwZTgtMzYwNi0z NWIxLTlmMWEtNzgxZDdmZDBhZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs/Y9tmWywY+K2oPN/g7zlb59EkrlXPbU7NNM5xxTFR/PMSM27icWjL Q8W68a+eXBqk8EwVipgZPCW0QNpPsFQUX9UUAW1bpcveMiFJ+2tnN2HNHH8VxSyw p2R8AgwpYnYZ/qy+oniG6cDPzxgpeh65ASLTJOAE0MvSuPEycr9QgVI12NHnqZu1 nebya8iQTyuN70VdhzD1YRMqF1nzmj3R3tY/D6yIMC6QuD0TzFnkhjHzIWRbhF/l CcpK8+hEdwe3wMqgys0cujUWoV5l6JHCXNbsNEV5+Me1dWZsrzSROd+7c0Bsk5jN MAQcLB3g0WJhcdIhpMz1GXC1qCWAM6E= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:01 2025 by rpki-client