$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/608225be-ae26-3e19-b180-f76edb1c95af.roa File: 608225be-ae26-3e19-b180-f76edb1c95af.roa (raw, json) Hash identifier: Aob6i3yswFz0SVIaGyY7ZYgnOd1MGMQk9BdoJ0s8M4w= Subject key identifier: A7:DA:B5:54:F2:89:31:B9:13:68:D6:7D:64:42:63:25:5E:F0:A5:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374BAB719E98C572C1AF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/608225be-ae26-3e19-b180-f76edb1c95af.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4b:ab:71:9e:98:c5:72:c1:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5a592a01-a1a7-44e2-b880-984c5bf9951d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:21:80:e1:08:17:b3:1d:57:cb:fa:a9:89: 1f:0f:a4:2f:73:1c:18:dc:49:58:ec:c9:36:5b:06: 87:1a:a9:3d:db:ea:4c:9f:5b:0a:a4:0e:fa:35:6b: 28:0c:95:97:51:45:27:ba:a4:73:68:d8:ff:86:0c: b3:08:0b:34:b1:22:f4:90:ab:51:f3:23:82:c5:0a: 61:39:3b:d8:23:c5:f6:68:d6:e9:01:71:b1:8c:5f: b0:b7:50:b9:ce:fb:35:2d:8a:83:8d:07:b8:35:e7: e9:16:8a:ec:62:ff:a1:99:95:e3:08:0b:da:e5:7d: 97:92:e0:e1:6f:52:10:1d:1c:cb:5d:11:9b:25:f7: 45:e4:4b:b9:f2:06:f4:f6:f5:e7:19:f5:cd:e9:8c: 5a:31:77:30:ef:e6:ca:6a:5d:d9:d3:aa:4d:3d:1d: d7:4a:db:90:d5:3f:02:22:fe:a6:25:4a:50:c5:0a: 37:13:9b:55:79:15:f5:d2:13:a9:15:29:74:74:11: 0e:3c:9c:bd:b5:ca:8c:18:75:ac:61:f9:27:dc:2f: a9:00:81:dc:83:24:6c:17:08:14:ca:8a:9f:32:79: de:4f:e3:82:be:6d:ed:96:ef:bc:ba:7b:62:c0:fc: 4f:80:35:55:6a:56:27:2c:e0:50:1a:cd:66:91:ff: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DA:B5:54:F2:89:31:B9:13:68:D6:7D:64:42:63:25:5E:F0:A5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/608225be-ae26-3e19-b180-f76edb1c95af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f3:e9:e9:1a:b3:6f:83:f0:38:0b:d4:20:0b:9c:69:f7:80: 1b:de:36:37:f0:ff:ec:a6:04:39:0e:16:0d:25:8a:7b:2f:70: 63:60:d9:e4:48:15:ba:ca:79:17:aa:07:bc:e8:a6:b6:dd:aa: 5e:c8:b7:9d:1c:d9:91:53:7c:dd:fb:36:a4:e4:58:52:65:d3: 75:90:b7:f3:02:1d:4d:5d:e7:4b:f2:13:a3:75:72:af:73:a4: 67:8e:c7:35:57:af:25:d2:a7:ed:83:62:30:4a:a7:99:8e:cd: e0:44:ea:68:c4:91:94:73:92:3c:87:41:de:4c:58:b0:11:95: 08:70:ed:73:fc:52:9b:fe:fd:ab:9a:fe:ec:d6:1c:5f:d9:ab: bb:01:85:5d:3b:1f:f9:d8:08:20:1a:aa:55:b6:37:fe:c1:34: cc:28:a5:5d:97:35:5d:ec:b0:42:8c:bc:0b:00:0e:59:bc:7b: 55:83:27:13:70:29:7b:c6:6a:d8:3f:a7:45:08:d1:b5:5d:e4: 96:a2:27:93:91:0f:24:46:24:d4:6c:41:52:4d:9c:73:3c:b2: f3:2b:7b:d9:5e:52:20:5f:03:e1:55:da:32:f2:a8:9f:b3:13: 17:dc:f2:b0:66:19:38:cc:ac:4d:42:84:62:d3:95:16:ed:2a: 1a:a1:6f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0urcZ6YxXLBr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWE1OTJhMDEtYTFhNy00NGUyLWI4ODAtOTg0YzViZjk5NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq4hgOEIF7MdV8v6qYkfD6QvcxwY3ElY7Mk2 WwaHGqk92+pMn1sKpA76NWsoDJWXUUUnuqRzaNj/hgyzCAs0sSL0kKtR8yOCxQph OTvYI8X2aNbpAXGxjF+wt1C5zvs1LYqDjQe4NefpForsYv+hmZXjCAva5X2XkuDh b1IQHRzLXRGbJfdF5Eu58gb09vXnGfXN6YxaMXcw7+bKal3Z06pNPR3XStuQ1T8C Iv6mJUpQxQo3E5tVeRX10hOpFSl0dBEOPJy9tcqMGHWsYfkn3C+pAIHcgyRsFwgU yoqfMnneT+OCvm3tlu+8untiwPxPgDVValYnLOBQGs1mkf/5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfatVTyiTG5E2jWfWRCYyVe8KXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjA4MjI1YmUtYWUyNi0z ZTE5LWIxODAtZjc2ZWRiMWM5NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7z6ekas2+D8DgL1CALnGn3gBveNjfw/+ymBDkOFg0linsvcGNg2eRI FbrKeReqB7zoprbdql7It50c2ZFTfN37NqTkWFJl03WQt/MCHU1d50vyE6N1cq9z pGeOxzVXryXSp+2DYjBKp5mOzeBE6mjEkZRzkjyHQd5MWLARlQhw7XP8Upv+/aua /uzWHF/Zq7sBhV07H/nYCCAaqlW2N/7BNMwopV2XNV3ssEKMvAsADlm8e1WDJxNw KXvGatg/p0UI0bVd5JaiJ5ORDyRGJNRsQVJNnHM8svMre9leUiBfA+FV2jLyqJ+z Exfc8rBmGTjMrE1ChGLTlRbtKhqhb28= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:04 2025 by rpki-client