$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa File: 5d838612-1c08-3867-b2b3-267389ecdf04.roa (raw, json) Hash identifier: dD9Oz7BUfQ4ANQoyzg4SHQd5I+6w+sTemgY6FJNBo0c= Subject key identifier: 92:43:70:89:F0:63:47:F8:9D:37:5F:0F:1E:A3:D9:28:A1:3F:96:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FBBCD3869E699516AA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fb:bc:d3:86:9e:69:95:16:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=a2f55132-d004-40f8-8cf6-83be0d2f5c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:1c:b4:4e:74:7d:25:43:2c:f3:ec:26:d4: 97:f4:e7:9b:8b:fa:e9:04:39:58:01:57:3a:5c:28: de:14:6e:bf:10:04:32:49:46:cb:83:ff:fe:5e:26: 85:8b:19:6d:cb:e8:6d:ef:a0:ed:56:30:e9:20:09: e0:0e:6b:f8:3d:2c:88:b6:c8:8f:ff:73:38:a4:8b: 04:3c:fa:0d:34:57:ab:f0:87:3f:e0:94:99:76:be: 6c:c5:61:4b:3c:27:78:f2:84:01:7f:6b:56:c9:ea: eb:7b:51:bd:16:0f:98:b5:7f:d5:60:c8:03:a1:6c: b2:77:47:da:79:bf:93:32:8e:2b:77:e3:a3:ff:89: 56:c9:6c:04:98:9d:5b:7e:52:06:82:86:23:76:42: 24:8f:78:4c:99:f9:b4:f5:4a:23:8f:a4:9d:ea:fa: 54:a1:35:22:8e:61:5c:d0:50:cf:8a:7e:f0:11:cd: 51:be:4f:14:95:7d:82:54:57:d5:50:fd:28:45:71: eb:0c:34:a4:a9:63:cc:69:73:00:27:c4:0d:3f:01: 3b:a9:e2:90:97:61:54:5c:1b:39:24:08:ef:d8:d0: 38:6c:fb:9a:ab:9c:ee:e0:83:0a:ca:a9:44:79:78: 51:4e:ee:15:2a:2e:e5:f4:d8:44:33:4f:ae:d0:87: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:70:89:F0:63:47:F8:9D:37:5F:0F:1E:A3:D9:28:A1:3F:96:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:45:d8:25:08:cc:70:f0:c9:9b:f7:a5:0e:8d:28:06:a8:c9: 12:90:f3:77:77:ad:0f:49:80:32:75:38:e7:4d:db:15:ca:29: a3:52:63:6f:2f:fb:43:46:fe:32:6e:1c:e7:bb:a7:00:06:e8: b7:20:6f:e0:94:b6:b1:8e:68:44:b8:10:84:8c:26:3f:a5:60: e5:c4:79:10:30:32:88:19:27:d9:a4:82:d6:cc:f2:90:bd:78: a3:59:3e:cc:f5:50:ca:e1:29:b4:0f:b6:00:dc:31:a6:fd:f9: d6:88:b9:43:9d:12:ca:03:37:e8:73:85:42:b9:80:aa:92:c6: 0c:53:7f:7f:b5:c1:75:f4:d8:7d:7c:83:2f:7b:51:b6:0c:5b: 74:11:a0:ef:38:36:b5:c8:e9:7a:60:a7:4d:29:1d:3e:e1:83: c0:27:13:8a:fd:bf:50:c1:6c:f0:ee:67:ef:d2:9d:f5:16:d5: 7b:69:a1:c7:6b:8c:2e:85:1b:d4:09:07:a4:da:8e:97:0e:a4: e8:b7:bc:66:22:70:fb:de:4e:fe:5b:6c:1b:cf:b9:79:89:dd: a9:d1:a2:f1:cd:3f:72:0d:77:9b:79:5a:e9:d6:18:87:a6:b7: 6b:04:9f:78:8c:e9:2c:79:84:31:2d:82:41:cf:71:e7:5c:1d: 2a:8a:d5:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvu804aeaZUWqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTJmNTUxMzItZDAwNC00MGY4LThjZjYtODNiZTBkMmY1YzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkIctE50fSVDLPPsJtSX9Oebi/rpBDlYAVc6 XCjeFG6/EAQySUbLg//+XiaFixlty+ht76DtVjDpIAngDmv4PSyItsiP/3M4pIsE PPoNNFer8Ic/4JSZdr5sxWFLPCd48oQBf2tWyerre1G9Fg+YtX/VYMgDoWyyd0fa eb+TMo4rd+Oj/4lWyWwEmJ1bflIGgoYjdkIkj3hMmfm09Uojj6Sd6vpUoTUijmFc 0FDPin7wEc1Rvk8UlX2CVFfVUP0oRXHrDDSkqWPMaXMAJ8QNPwE7qeKQl2FUXBs5 JAjv2NA4bPuaq5zu4IMKyqlEeXhRTu4VKi7l9NhEM0+u0IeySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJDcInwY0f4nTdfDx6j2SihP5awMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWQ4Mzg2MTItMWMwOC0z ODY3LWIyYjMtMjY3Mzg5ZWNkZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBF2CUIzHDwyZv3pQ6NKAaoyRKQ83d3rQ9JgDJ1OOdN2xXKKaNSY28v +0NG/jJuHOe7pwAG6Lcgb+CUtrGOaES4EISMJj+lYOXEeRAwMogZJ9mkgtbM8pC9 eKNZPsz1UMrhKbQPtgDcMab9+daIuUOdEsoDN+hzhUK5gKqSxgxTf3+1wXX02H18 gy97UbYMW3QRoO84NrXI6Xpgp00pHT7hg8AnE4r9v1DBbPDuZ+/SnfUW1Xtpocdr jC6FG9QJB6TajpcOpOi3vGYicPveTv5bbBvPuXmJ3anRovHNP3INd5t5WunWGIem t2sEn3iM6Sx5hDEtgkHPcedcHSqK1bE= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:39 2025 by rpki-client