$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/769ce047-788c-3a09-9dde-64d33f309823.roa File: 769ce047-788c-3a09-9dde-64d33f309823.roa (raw, json) Hash identifier: VtUmeajB8lK1YVG9Jna08rxMZvwH7MqjvVczQNEMBJE= Subject key identifier: 42:D3:E1:90:A9:C0:8E:51:1B:3A:F3:82:C6:06:5E:6A:FC:3E:7B:C2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4C90DEBCBEA123533A50 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/769ce047-788c-3a09-9dde-64d33f309823.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.228.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4c:90:de:bc:be:a1:23:53:3a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=574f81c0-66af-4fa0-98b9-38150031ea9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:d9:89:bf:58:14:57:a3:16:e3:d7:04:05: a5:10:93:b0:d8:c9:05:92:8c:fe:34:7a:a3:92:06: 35:a7:22:54:14:1c:c9:c6:53:c3:c8:17:f4:17:ef: af:e6:8e:48:a3:9e:d8:29:e1:30:fe:90:fe:dd:8d: 4f:ed:9c:9d:d5:c7:75:a2:6c:f0:01:8a:62:c4:e6: a8:b3:97:3c:17:22:a8:22:45:72:28:f9:b9:19:1c: e2:57:e9:c3:51:15:7a:a6:a1:f2:d0:a1:38:2e:b1: 89:48:85:ca:ad:10:6c:2d:2a:2a:92:eb:14:f8:cf: 84:4a:b2:05:a2:6c:88:de:36:6f:e2:98:85:43:09: 8c:ba:48:ac:2f:2b:8f:53:10:eb:2f:c9:57:8f:c0: a4:b0:7c:55:15:92:05:3c:8d:50:c1:60:d4:72:8c: 4a:b7:4f:f7:89:b8:d5:25:b1:67:b7:b9:65:8d:2b: e7:b5:b3:70:69:6d:63:bb:83:20:fc:8c:55:6b:79: 93:2a:b4:5d:0f:75:50:ff:55:a2:bf:c9:fc:90:c3: 79:e3:d4:09:57:9a:67:56:38:01:70:42:55:ef:3b: 52:4c:5d:9f:fb:58:8f:a2:28:0f:3a:a2:c1:7b:2c: ec:22:bb:bd:dd:8f:aa:f4:53:97:2e:bd:fc:9f:d9: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D3:E1:90:A9:C0:8E:51:1B:3A:F3:82:C6:06:5E:6A:FC:3E:7B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/769ce047-788c-3a09-9dde-64d33f309823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:17:1b:a4:db:fd:5e:2c:f5:44:57:19:df:a2:b7:45:39:7c: 13:50:0c:f9:fa:a2:c8:fe:e5:f9:4b:f5:2c:37:63:39:a5:8b: 36:c4:c8:a4:6d:3e:85:5e:67:7a:87:88:e0:ef:21:b4:dc:83: 87:ed:ab:86:da:96:f4:2c:4c:e1:c2:85:3f:ac:c3:64:bc:23: 50:ab:28:b8:34:e4:f4:6a:9c:70:1b:9b:47:75:14:51:ed:83: 8d:7d:84:2b:c4:4e:86:ae:c6:27:19:de:cc:df:e2:b1:08:21: 6b:8a:27:21:8e:a7:38:af:49:9d:bf:ba:fd:a8:c2:e5:46:ab: 03:e1:61:29:8c:db:57:95:18:ef:10:18:e8:ec:47:1c:d2:c7: 68:5a:b7:92:b5:66:c7:d1:19:3c:3e:73:ea:cc:41:f3:06:b2: e7:73:f7:7f:f3:5e:3a:d7:93:61:ca:22:22:ff:88:41:fb:66: 66:69:5a:ab:0d:e7:05:88:f8:6a:0d:28:dd:00:3a:c3:0b:4f: f2:7c:f6:14:e3:8d:61:77:10:d2:f7:40:12:06:fd:c9:64:62: b0:40:c2:c2:cb:ec:14:d8:5f:75:67:b5:1f:04:5c:0e:56:43: b8:43:ad:24:70:84:61:bb:47:a3:0f:9e:71:7e:d4:3c:95:36: 73:8d:72:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEyQ3ry+oSNTOlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTc0ZjgxYzAtNjZhZi00ZmEwLTk4YjktMzgxNTAwMzFlYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/TZib9YFFejFuPXBAWlEJOw2MkFkoz+NHqj kgY1pyJUFBzJxlPDyBf0F++v5o5Io57YKeEw/pD+3Y1P7Zyd1cd1omzwAYpixOao s5c8FyKoIkVyKPm5GRziV+nDURV6pqHy0KE4LrGJSIXKrRBsLSoqkusU+M+ESrIF omyI3jZv4piFQwmMukisLyuPUxDrL8lXj8CksHxVFZIFPI1QwWDUcoxKt0/3ibjV JbFnt7lljSvntbNwaW1ju4Mg/IxVa3mTKrRdD3VQ/1Wiv8n8kMN549QJV5pnVjgB cEJV7ztSTF2f+1iPoigPOqLBeyzsIru93Y+q9FOXLr38n9m8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELT4ZCpwI5RGzrzgsYGXmr8PnvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzY5Y2UwNDctNzg4Yy0z YTA5LTlkZGUtNjRkMzNmMzA5ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROTGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQXG6Tb/V4s9URXGd+it0U5fBNQDPn6osj+5flL9Sw3YzmlizbEyKRt PoVeZ3qHiODvIbTcg4ftq4balvQsTOHChT+sw2S8I1CrKLg05PRqnHAbm0d1FFHt g419hCvEToauxicZ3szf4rEIIWuKJyGOpzivSZ2/uv2owuVGqwPhYSmM21eVGO8Q GOjsRxzSx2hat5K1ZsfRGTw+c+rMQfMGsudz93/zXjrXk2HKIiL/iEH7ZmZpWqsN 5wWI+GoNKN0AOsMLT/J89hTjjWF3ENL3QBIG/clkYrBAwsLL7BTYX3VntR8EXA5W Q7hDrSRwhGG7R6MPnnF+1DyVNnONcsY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:28 2025 by rpki-client