$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e07c2a3-e12f-37f7-8856-1cafa4356038.roa File: 5e07c2a3-e12f-37f7-8856-1cafa4356038.roa (raw, json) Hash identifier: Bahh8hSc9+Dtsb18VXsInGxHPrZD8Qg8sHyVHY91FAM= Subject key identifier: EA:91:9A:61:12:D9:35:C6:C4:0B:51:B1:33:14:36:31:F1:3C:77:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374C0088C49158C5860BBB Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e07c2a3-e12f-37f7-8856-1cafa4356038.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4c:00:88:c4:91:58:c5:86:0b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5581eca7-6d8a-4048-af89-6332af666fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:78:9c:00:d4:fd:7e:47:e0:d1:23:3b:6d: 54:c0:c7:22:23:50:8d:f2:38:b4:5e:c7:ff:c0:84: 28:d2:a9:5e:36:d7:ae:bc:81:9c:5d:4b:7d:aa:cc: 8a:17:17:8d:a9:4e:4c:b1:f4:d5:cb:4e:fc:39:1e: 16:7f:bb:e9:9b:66:f5:b9:2c:5b:e9:78:b2:1e:f7: 9b:32:b2:4d:94:ab:81:fc:c2:14:28:96:33:5b:45: 1f:2e:14:78:ce:d1:32:df:99:29:1f:93:e0:bf:23: 4e:ea:b9:04:1f:7d:8f:39:5c:6c:76:90:b5:e2:b7: 06:2c:f2:dc:48:9f:cd:bc:96:ca:3e:4c:3e:3d:ba: 68:fc:52:88:b4:44:b3:95:7b:12:f2:7a:9d:be:70: 5e:f6:df:fa:cd:eb:b7:d9:e6:b3:5f:d9:72:af:68: 3f:b9:0b:3a:15:02:4d:24:35:9d:51:54:cd:9c:e4: 4a:bb:50:db:a3:c8:75:48:70:0d:5e:b3:6d:ee:47: 69:0c:a5:91:12:6e:a1:91:ed:81:e1:95:dd:d8:ec: e0:fd:53:a5:65:d2:30:05:31:a1:8f:cb:77:10:3e: 5b:3a:cb:8f:a5:b5:fe:61:ad:ab:cd:1d:d4:4d:ee: cb:1a:91:c8:74:d1:1d:d5:71:39:b6:89:4e:77:3e: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:91:9A:61:12:D9:35:C6:C4:0B:51:B1:33:14:36:31:F1:3C:77:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e07c2a3-e12f-37f7-8856-1cafa4356038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:85:62:5d:93:ff:03:13:62:4f:6f:15:3a:fb:7b:8b:2a:0e: 92:b5:11:fd:09:74:9f:8a:32:06:71:80:1a:65:80:e9:1d:86: 33:44:56:d7:ac:07:b1:4c:ef:0f:55:7b:3a:5b:a9:77:74:71: 74:2c:38:7d:ab:b6:c9:ab:29:cc:16:b3:3e:13:06:68:bb:c0: 61:40:af:75:05:6f:ab:d5:11:4c:a4:d9:f9:1f:86:85:e0:75: 42:aa:f3:5c:15:5f:6f:75:84:37:6f:15:ac:41:18:72:31:88: ee:84:19:5e:d9:30:2d:73:47:01:c0:c9:0c:7e:91:fe:8a:37: b0:c0:fa:c5:96:88:dd:3c:ba:60:c8:5f:28:46:cd:17:82:55: 5a:1e:78:c8:1f:cf:d5:10:32:ae:48:89:65:d3:ca:33:e8:0c: 30:52:49:a4:c7:1f:28:29:26:4d:2e:11:42:98:14:67:86:0a: 77:a7:2c:f0:26:7b:12:07:20:c8:5c:36:e2:9a:89:54:9c:58: 7b:19:d6:9c:e3:a7:e5:2c:76:e9:11:a4:a2:87:fd:98:e3:dc: 52:98:ad:0c:8b:99:f3:d7:64:28:4c:28:0e:e4:bd:9d:bb:08: 99:09:51:a8:c6:92:96:b8:a2:3b:f5:c4:d9:ce:dd:cc:e4:60: 3b:24:c2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0wAiMSRWMWGC7swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTU4MWVjYTctNmQ4YS00MDQ4LWFmODktNjMzMmFmNjY2ZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLd4nADU/X5H4NEjO21UwMciI1CN8ji0Xsf/ wIQo0qleNteuvIGcXUt9qsyKFxeNqU5MsfTVy078OR4Wf7vpm2b1uSxb6XiyHveb MrJNlKuB/MIUKJYzW0UfLhR4ztEy35kpH5PgvyNO6rkEH32POVxsdpC14rcGLPLc SJ/NvJbKPkw+Pbpo/FKItESzlXsS8nqdvnBe9t/6zeu32eazX9lyr2g/uQs6FQJN JDWdUVTNnORKu1Dbo8h1SHANXrNt7kdpDKWREm6hke2B4ZXd2Ozg/VOlZdIwBTGh j8t3ED5bOsuPpbX+Ya2rzR3UTe7LGpHIdNEd1XE5tolOdz7F0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqRmmES2TXGxAtRsTMUNjHxPHcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUwN2MyYTMtZTEyZi0z N2Y3LTg4NTYtMWNhZmE0MzU2MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGFYl2T/wMTYk9vFTr7e4sqDpK1Ef0JdJ+KMgZxgBplgOkdhjNEVtes B7FM7w9VezpbqXd0cXQsOH2rtsmrKcwWsz4TBmi7wGFAr3UFb6vVEUyk2fkfhoXg dUKq81wVX291hDdvFaxBGHIxiO6EGV7ZMC1zRwHAyQx+kf6KN7DA+sWWiN08umDI XyhGzReCVVoeeMgfz9UQMq5IiWXTyjPoDDBSSaTHHygpJk0uEUKYFGeGCnenLPAm exIHIMhcNuKaiVScWHsZ1pzjp+UsdukRpKKH/Zjj3FKYrQyLmfPXZChMKA7kvZ27 CJkJUajGkpa4ojv1xNnO3czkYDskwsg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:37 2025 by rpki-client