$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63673b78-7089-3a7a-8fca-b86ea8d7f125.roa File: 63673b78-7089-3a7a-8fca-b86ea8d7f125.roa (raw, json) Hash identifier: 3YyfGN6auyTEqvNwEeA1xWEEq3Ucz6b4+reQTS9+1oE= Subject key identifier: 9F:9F:C7:2E:7A:1E:0A:EE:85:83:DB:16:2E:C6:A6:B3:23:CF:17:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C37465FAAA37316D53BDF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63673b78-7089-3a7a-8fca-b86ea8d7f125.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:46:5f:aa:a3:73:16:d5:3b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3cdd98b6-04ad-4622-9c63-898e9e7bf23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6d:50:31:e6:f3:21:ed:5c:24:ee:37:32:dd: 17:47:78:94:c8:ac:d8:6f:55:40:a9:86:09:8d:4d: f4:43:05:2f:71:a2:11:b8:01:02:55:7d:08:38:62: 36:c0:8a:33:7c:e9:8a:83:50:f5:f8:1f:eb:a8:6a: c5:0c:3f:e8:df:39:37:29:5e:6a:aa:15:2c:7d:15: fa:9d:5a:17:83:70:ee:61:c9:ab:ce:e7:10:80:39: 9b:17:2d:b6:ac:58:08:42:9e:2e:66:0e:a9:5d:c2: 4d:1a:e9:f0:e0:4b:66:ed:66:ce:c2:72:19:09:90: ea:4b:31:da:60:81:6c:da:7b:29:5c:79:38:91:ef: 73:7e:16:4d:92:1d:75:35:49:6f:10:c4:4f:aa:a5: 7a:4c:8f:c3:f1:6d:aa:a8:c8:d4:b3:27:27:27:72: 0f:74:19:3d:92:19:8f:b7:bd:7c:3b:83:15:28:67: 75:b3:fe:c9:5d:b4:1e:fd:74:f5:07:24:0d:55:14: 2c:ed:a6:2d:57:f7:c0:6a:84:1d:4c:18:d7:19:da: da:1d:60:8f:e3:89:6e:79:3e:aa:01:5f:99:c1:e3: 3a:c7:ad:ce:6d:3d:47:a1:12:dc:2c:3c:06:04:17: 59:ad:6e:a5:3d:64:0f:94:84:5f:97:00:33:f4:4e: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:C7:2E:7A:1E:0A:EE:85:83:DB:16:2E:C6:A6:B3:23:CF:17:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/63673b78-7089-3a7a-8fca-b86ea8d7f125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:02:88:f1:00:7f:37:0e:21:be:89:9c:3c:b9:c3:0d:4c:92: 8b:52:1d:83:45:04:54:88:5d:33:ce:ef:85:3a:45:14:6a:d3: c1:ad:e8:3a:b2:05:5d:42:bc:66:3e:30:5f:cc:b3:a5:d3:be: ca:56:7b:16:3a:58:97:d4:61:35:8f:6c:cd:27:f3:ad:c3:72: 85:ad:37:60:ce:ea:48:58:ad:37:df:9c:fd:cb:1d:00:82:c1: 1e:09:66:6f:a6:3b:b2:f7:32:e3:b5:00:28:57:6f:5f:57:dc: 8a:ec:72:35:82:04:95:26:b4:1d:6e:be:50:f3:72:c3:a4:1f: ea:b6:20:87:00:10:7b:6b:bd:dd:b0:59:10:d7:5b:5e:36:70: c6:11:52:a3:44:ac:47:a3:cc:92:d5:ae:7a:97:43:3a:5c:c2: 8a:ba:11:15:6d:4b:f4:ba:64:e2:90:c4:4d:6c:a8:f0:34:2a: 86:96:88:e2:a9:86:b9:d8:7c:54:9f:80:34:15:1f:8e:cb:42: 78:38:b6:d4:b0:a0:04:f5:7e:59:73:18:75:1b:13:25:49:42: 1a:5c:ff:af:ba:b3:6f:2b:33:bf:6e:ff:20:2d:c5:48:bb:30: 9d:b8:23:5b:02:45:45:8f:24:1d:aa:0d:35:03:56:c7:4e:f9: 6b:7a:f4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0ZfqqNzFtU73wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2NkZDk4YjYtMDRhZC00NjIyLTljNjMtODk4ZTllN2JmMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm1QMebzIe1cJO43Mt0XR3iUyKzYb1VAqYYJ jU30QwUvcaIRuAECVX0IOGI2wIozfOmKg1D1+B/rqGrFDD/o3zk3KV5qqhUsfRX6 nVoXg3DuYcmrzucQgDmbFy22rFgIQp4uZg6pXcJNGunw4Etm7WbOwnIZCZDqSzHa YIFs2nspXHk4ke9zfhZNkh11NUlvEMRPqqV6TI/D8W2qqMjUsycnJ3IPdBk9khmP t718O4MVKGd1s/7JXbQe/XT1ByQNVRQs7aYtV/fAaoQdTBjXGdraHWCP44lueT6q AV+ZweM6x63ObT1HoRLcLDwGBBdZrW6lPWQPlIRflwAz9E5qMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+fxy56HgruhYPbFi7GprMjzxdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjM2NzNiNzgtNzA4OS0z YTdhLThmY2EtYjg2ZWE4ZDdmMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUCiPEAfzcOIb6JnDy5ww1MkotSHYNFBFSIXTPO74U6RRRq08Gt6Dqy BV1CvGY+MF/Ms6XTvspWexY6WJfUYTWPbM0n863DcoWtN2DO6khYrTffnP3LHQCC wR4JZm+mO7L3MuO1AChXb19X3IrscjWCBJUmtB1uvlDzcsOkH+q2IIcAEHtrvd2w WRDXW142cMYRUqNErEejzJLVrnqXQzpcwoq6ERVtS/S6ZOKQxE1sqPA0KoaWiOKp hrnYfFSfgDQVH47LQng4ttSwoAT1fllzGHUbEyVJQhpc/6+6s28rM79u/yAtxUi7 MJ24I1sCRUWPJB2qDTUDVsdO+Wt69Jw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:09 2025 by rpki-client