$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59d07011-c3b5-35e8-a0c6-372345b8979f.roa File: 59d07011-c3b5-35e8-a0c6-372345b8979f.roa (raw, json) Hash identifier: 1tcUrwboIkKDMm9qOSW5apUnRVzfDsJr9A7VVEOwOLg= Subject key identifier: 54:72:E3:6E:99:83:2B:42:36:5A:C2:11:51:D9:E5:02:5B:A6:BF:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FB1668715C7FE40E6D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59d07011-c3b5-35e8-a0c6-372345b8979f.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fb:16:68:71:5c:7f:e4:0e:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=bab4d051-7ef6-4e80-b385-54c3277125cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:53:04:e2:28:a7:52:5e:9e:55:34:df:f3: 38:51:b2:e4:83:e3:51:d9:ac:64:7c:d3:a8:4d:11: 03:80:c4:e6:ba:ff:e9:99:3a:ce:e5:db:63:5d:6e: 37:d4:d9:4d:dc:92:a3:a8:54:92:22:02:17:cd:07: 42:d6:7e:ed:86:7b:ca:ee:39:2c:5a:b8:60:56:be: 54:05:cd:30:5a:2e:1e:ad:f6:3c:31:6b:62:bd:6b: ab:1c:1f:32:62:a8:a5:96:54:1c:35:89:e0:f8:1c: 7e:ac:bc:ce:e0:b7:d7:77:16:c1:5a:9b:2f:ba:48: f6:39:f5:43:af:b5:24:e1:50:ae:a4:fe:97:43:31: dd:dd:79:f5:ac:9e:57:93:6e:48:b2:1f:c7:e0:81: 41:cb:aa:c3:28:83:c3:3c:0d:92:85:a9:3d:02:1a: a5:99:9f:2a:46:65:88:2f:76:df:d1:7a:9e:2e:99: ea:1a:01:fd:a4:84:29:e0:b4:67:b6:55:a0:ac:89: 4d:87:b3:ad:d3:b4:5f:23:24:f1:bd:93:35:23:52: b8:7c:c8:46:11:de:c6:5d:2b:20:a2:28:66:d2:cf: 2f:16:8f:0a:45:76:a1:18:4d:06:9d:a8:ee:bf:a0: d7:7a:f1:41:b8:8a:ad:9d:91:76:dc:44:49:41:ac: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:72:E3:6E:99:83:2B:42:36:5A:C2:11:51:D9:E5:02:5B:A6:BF:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59d07011-c3b5-35e8-a0c6-372345b8979f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5c:b4:96:63:70:35:3a:f2:5a:5d:6d:51:5f:ab:14:f2:af: 21:2b:39:3f:b2:20:ed:26:cb:a3:10:12:b7:aa:1f:4d:a5:58: b3:d3:35:c0:25:5c:dd:e0:89:4f:b9:58:d8:f0:4d:8d:c6:12: ba:2d:e6:7b:71:dc:9b:56:4e:d0:d5:40:ed:6d:d5:16:28:88: ae:6d:ce:98:72:4a:a8:9a:58:2e:20:ce:f4:12:ec:f1:d1:02: bf:f9:16:72:2f:67:0b:fc:ef:24:b4:39:be:77:5f:5d:84:e0: 6a:50:4a:c1:b4:66:d3:a9:6d:1f:23:1b:95:14:bc:a6:ba:30: 40:b3:17:a6:41:4c:65:bd:1b:10:e9:a3:9d:d4:25:68:dd:a0: 18:5a:eb:f3:86:1e:d3:0f:39:c2:88:da:5f:79:cf:a8:84:ec: 5d:f2:7a:ae:73:40:84:67:73:22:01:fb:01:26:41:ab:04:6a: 6f:b7:39:6b:72:ae:75:40:8d:f9:c8:2c:52:bb:64:e1:27:64: 97:e5:a2:6e:02:de:9a:1d:af:71:25:5e:c5:46:1b:b0:db:09: 00:9d:05:9e:dd:c6:d0:e2:9e:9b:16:ee:b5:4e:ab:07:88:7e: d0:76:21:8c:29:3c:f8:a4:50:b2:b5:34:a4:d1:33:6f:15:22: 9a:81:cb:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvsWaHFcf+QObYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmFiNGQwNTEtN2VmNi00ZTgwLWIzODUtNTRjMzI3NzEyNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaZTBOIop1JenlU03/M4UbLkg+NR2axkfNOo TREDgMTmuv/pmTrO5dtjXW431NlN3JKjqFSSIgIXzQdC1n7thnvK7jksWrhgVr5U Bc0wWi4erfY8MWtivWurHB8yYqilllQcNYng+Bx+rLzO4LfXdxbBWpsvukj2OfVD r7Uk4VCupP6XQzHd3Xn1rJ5Xk25Ish/H4IFBy6rDKIPDPA2Shak9AhqlmZ8qRmWI L3bf0XqeLpnqGgH9pIQp4LRntlWgrIlNh7Ot07RfIyTxvZM1I1K4fMhGEd7GXSsg oihm0s8vFo8KRXahGE0Gnajuv6DXevFBuIqtnZF23ERJQawLWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRy426ZgytCNlrCEVHZ5QJbpr/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTlkMDcwMTEtYzNiNS0z NWU4LWEwYzYtMzcyMzQ1Yjg5NzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxctJZjcDU68lpdbVFfqxTyryErOT+yIO0my6MQEreqH02lWLPTNcAl XN3giU+5WNjwTY3GErot5ntx3JtWTtDVQO1t1RYoiK5tzphySqiaWC4gzvQS7PHR Ar/5FnIvZwv87yS0Ob53X12E4GpQSsG0ZtOpbR8jG5UUvKa6MECzF6ZBTGW9GxDp o53UJWjdoBha6/OGHtMPOcKI2l95z6iE7F3yeq5zQIRncyIB+wEmQasEam+3OWty rnVAjfnILFK7ZOEnZJflom4C3podr3ElXsVGG7DbCQCdBZ7dxtDinpsW7rVOqweI ftB2IYwpPPikULK1NKTRM28VIpqBy00= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:45 2025 by rpki-client