$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61bec5e9-5210-3192-ad4b-6bf5b78ba095.roa File: 61bec5e9-5210-3192-ad4b-6bf5b78ba095.roa (raw, json) Hash identifier: 2bAGxRs6LPDGPdBI4tFL9y1NwaCMOH/OwmPnvwqj7rM= Subject key identifier: E0:9C:15:3A:4A:57:02:55:F9:B6:B2:AE:A8:FC:24:43:64:9D:47:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4AB1A67BBD67413EA2F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61bec5e9-5210-3192-ad4b-6bf5b78ba095.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.227.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4a:b1:a6:7b:bd:67:41:3e:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=752c3b47-d94b-4892-bd9e-0dfbd1ee1780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:c5:18:cb:eb:3d:12:29:92:ae:3d:d8:83: 6b:d2:a0:4c:f7:0e:85:cb:bf:97:5f:ac:fb:dc:b0: 34:32:6f:ac:8e:e9:f2:f2:85:43:5d:eb:55:ac:00: 1a:39:81:69:21:01:19:f9:d8:b2:48:37:5e:6f:58: 47:0f:0b:93:3e:19:1e:8e:37:76:c3:77:dd:b8:47: 8f:cb:2f:57:50:f3:1b:46:44:db:0c:8d:1a:ac:d0: ea:3b:5c:6f:a2:1d:de:28:d8:f6:70:31:39:ca:d5: 06:f1:e1:85:c4:fc:b8:5d:82:dc:95:36:53:cf:5e: 86:6e:d1:65:b5:e2:49:36:cf:2e:9d:e4:25:dc:08: b7:4f:ad:4b:c7:d7:de:73:78:59:3d:6d:d1:62:6e: ba:05:f1:b1:40:28:21:6a:0d:5a:54:3a:f1:3b:5b: 5f:c2:68:c4:7e:bf:82:18:f8:7a:32:22:8a:36:ee: e4:4b:5c:ba:b2:da:06:de:4d:4d:c5:f1:e6:97:47: 74:63:66:36:bc:70:c1:1e:50:f1:f9:be:d7:48:2f: c7:19:dd:f6:ba:fb:ec:d0:50:ad:63:fb:7c:4a:e8: 61:97:d3:c4:db:1f:00:9c:51:91:f7:9f:9f:cc:9c: 7b:e1:58:e4:2e:ef:47:63:86:c4:b7:b2:1a:b8:c4: 8a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9C:15:3A:4A:57:02:55:F9:B6:B2:AE:A8:FC:24:43:64:9D:47:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61bec5e9-5210-3192-ad4b-6bf5b78ba095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:48:c0:34:84:2a:f9:b1:3e:da:a5:19:e4:c8:79:8f:a7:e2: ed:e9:59:4a:19:a0:2e:94:c4:d3:c0:6f:9e:09:90:3f:38:eb: 01:8d:c4:93:ff:7a:3f:69:1f:1b:f9:0c:af:06:06:be:e1:0c: bb:a2:24:19:b6:06:69:e0:b8:0f:ab:4d:3d:cc:b1:f7:04:24: 2f:29:a8:a2:ff:96:a8:af:93:07:ce:bc:66:69:4f:44:a1:42: 49:b8:bb:04:2c:b4:90:a3:5d:1b:65:7a:1a:7a:9d:34:53:c3: 2e:a3:83:10:51:b6:6f:0a:89:d1:01:e5:b1:eb:2c:d7:10:6a: f4:18:1b:ad:9a:c8:0a:72:5c:06:ba:30:7f:4c:fc:ea:1e:6c: cd:64:aa:40:5c:ef:65:10:8a:87:0a:10:c2:c9:28:26:ef:2f: 64:51:ac:2b:6c:d9:bc:ce:01:70:e2:00:64:e2:1f:da:6e:23: ed:55:51:ff:1b:55:33:b6:8c:9b:83:52:9b:ef:a4:41:26:74: 86:d2:68:4f:f4:0a:d5:53:7a:60:ba:59:7d:0c:d4:54:00:ad: 48:95:fb:a6:f5:39:51:6a:44:5d:fa:dc:2c:48:41:94:a9:76: d8:6e:4d:b3:0a:22:38:d9:d6:3b:33:d4:22:a7:f7:d5:77:c4: 0f:e1:9f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEqxpnu9Z0E+ovAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NzUyYzNiNDctZDk0Yi00ODkyLWJkOWUtMGRmYmQxZWUxNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6jFGMvrPRIpkq492INr0qBM9w6Fy7+XX6z7 3LA0Mm+sjuny8oVDXetVrAAaOYFpIQEZ+diySDdeb1hHDwuTPhkejjd2w3fduEeP yy9XUPMbRkTbDI0arNDqO1xvoh3eKNj2cDE5ytUG8eGFxPy4XYLclTZTz16GbtFl teJJNs8uneQl3Ai3T61Lx9fec3hZPW3RYm66BfGxQCghag1aVDrxO1tfwmjEfr+C GPh6MiKKNu7kS1y6stoG3k1NxfHml0d0Y2Y2vHDBHlDx+b7XSC/HGd32uvvs0FCt Y/t8Suhhl9PE2x8AnFGR95+fzJx74VjkLu9HY4bEt7IauMSKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCcFTpKVwJV+bayrqj8JENknUfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjFiZWM1ZTktNTIxMC0z MTkyLWFkNGItNmJmNWI3OGJhMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtIwDSEKvmxPtqlGeTIeY+n4u3pWUoZoC6UxNPAb54JkD846wGNxJP/ ej9pHxv5DK8GBr7hDLuiJBm2BmnguA+rTT3MsfcEJC8pqKL/lqivkwfOvGZpT0Sh Qkm4uwQstJCjXRtlehp6nTRTwy6jgxBRtm8KidEB5bHrLNcQavQYG62ayApyXAa6 MH9M/OoebM1kqkBc72UQiocKEMLJKCbvL2RRrCts2bzOAXDiAGTiH9puI+1VUf8b VTO2jJuDUpvvpEEmdIbSaE/0CtVTemC6WX0M1FQArUiV+6b1OVFqRF363CxIQZSp dthuTbMKIjjZ1jsz1CKn99V3xA/hn0k= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:15 2025 by rpki-client