$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b5b3bb2-7ce3-347d-aead-f9875906a13a.roa File: 7b5b3bb2-7ce3-347d-aead-f9875906a13a.roa (raw, json) Hash identifier: iQeomf/K5i+aGyWj9wEeQ2Lk87ZEcR9hoTwb7tbnXlU= Subject key identifier: 63:98:04:3B:D1:4E:DD:A5:1D:5E:74:51:5F:86:C3:6A:CA:7A:18:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373FF96ABFE46D1C59BB40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b5b3bb2-7ce3-347d-aead-f9875906a13a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3f:f9:6a:bf:e4:6d:1c:59:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0f82e02d-6b13-4f9e-962b-3d8425faed84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5c:0e:91:58:0d:bd:98:92:7b:e7:2b:a7:42: b6:e1:8a:8d:ec:96:85:70:40:1f:17:5b:9b:07:4b: de:49:5c:1c:64:c9:50:56:de:9b:81:f3:81:6e:6a: 41:81:73:fb:66:46:43:90:28:8e:7a:9e:e4:34:ae: 6a:7f:8e:7f:6e:59:b3:a8:86:bf:a7:5b:5d:db:db: 49:07:12:04:92:78:52:cf:74:5e:cb:53:22:d0:aa: 74:55:3f:ea:88:a7:e2:22:f6:08:8c:bb:65:bf:6c: df:d0:6e:0d:76:18:13:e9:b2:9d:a7:ea:2a:11:35: fe:30:9c:fb:3a:83:f2:ef:0f:3e:02:70:41:e5:4a: b2:0a:14:f4:c0:70:05:33:2a:49:cb:d5:23:e4:8a: 9d:b1:37:86:7f:7c:fc:cd:f9:1a:b5:54:4f:5e:b8: 4e:3d:d2:1a:0f:e8:be:53:0c:d3:0c:07:c1:86:43: 84:32:74:3e:be:ba:de:81:4e:98:12:65:8f:42:29: ab:c1:73:d7:b6:98:e0:51:a9:10:29:78:c3:aa:24: c2:45:58:68:ed:2d:21:6d:94:10:a5:e6:ed:8e:71: 65:bc:03:21:ce:94:9a:59:63:56:51:3a:e2:eb:8a: 83:59:ac:c1:73:b6:62:e0:47:23:a1:1e:68:21:29: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:04:3B:D1:4E:DD:A5:1D:5E:74:51:5F:86:C3:6A:CA:7A:18:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b5b3bb2-7ce3-347d-aead-f9875906a13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ad:d5:88:ec:e0:48:c0:a1:ad:ee:76:e9:f2:74:2b:a9:18: 3e:68:b7:ee:63:8b:79:c2:05:eb:d6:78:c2:31:38:49:73:9b: 6e:fe:1e:7b:4f:62:9d:51:03:8b:5e:ec:44:3c:ec:90:4a:0b: 9f:53:c3:d6:ee:01:c2:51:5e:31:33:10:94:71:89:58:a1:77: 1a:75:9a:0e:94:82:30:09:7c:a1:e0:b2:67:6d:e6:45:64:e0: 20:75:47:76:2d:ae:eb:bf:78:9a:d3:9d:a9:cb:10:be:21:46: 2f:c1:06:83:f7:2a:1a:c3:14:8f:30:d0:76:61:df:44:b5:ad: a0:e4:78:8d:fa:49:1d:04:28:f3:d8:46:63:e4:c5:fc:23:f2: cc:bd:ab:e6:c9:36:fd:a2:0e:86:e9:d4:a8:2c:78:3b:8a:95: 3d:58:ed:1c:d0:c1:bb:2f:ef:78:69:65:66:d6:a6:a1:84:7b: b4:8d:50:7d:42:3d:09:35:01:3b:6d:b1:c2:7b:55:e7:94:65: 1e:2b:25:4a:65:dd:dd:da:3d:cb:55:a5:5f:cd:31:47:81:36: d3:7b:8d:a1:89:39:c4:fa:23:eb:b0:8d:9c:31:c9:90:98:3d: 02:26:ef:da:bd:aa:a3:d5:5c:7a:19:9b:1d:d2:f5:11:89:e4: ee:48:4c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNz/5ar/kbRxZu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGY4MmUwMmQtNmIxMy00ZjllLTk2MmItM2Q4NDI1ZmFlZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVwOkVgNvZiSe+crp0K24YqN7JaFcEAfF1ub B0veSVwcZMlQVt6bgfOBbmpBgXP7ZkZDkCiOep7kNK5qf45/blmzqIa/p1td29tJ BxIEknhSz3Rey1Mi0Kp0VT/qiKfiIvYIjLtlv2zf0G4NdhgT6bKdp+oqETX+MJz7 OoPy7w8+AnBB5UqyChT0wHAFMypJy9Uj5IqdsTeGf3z8zfkatVRPXrhOPdIaD+i+ UwzTDAfBhkOEMnQ+vrregU6YEmWPQimrwXPXtpjgUakQKXjDqiTCRVho7S0hbZQQ pebtjnFlvAMhzpSaWWNWUTri64qDWazBc7Zi4EcjoR5oISn9WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOYBDvRTt2lHV50UV+Gw2rKehiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2I1YjNiYjItN2NlMy0z NDdkLWFlYWQtZjk4NzU5MDZhMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARANmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyt1Yjs4EjAoa3udunydCupGD5ot+5ji3nCBevWeMIxOElzm27+HntP Yp1RA4te7EQ87JBKC59Tw9buAcJRXjEzEJRxiVihdxp1mg6UgjAJfKHgsmdt5kVk 4CB1R3Ytruu/eJrTnanLEL4hRi/BBoP3KhrDFI8w0HZh30S1raDkeI36SR0EKPPY RmPkxfwj8sy9q+bJNv2iDobp1KgseDuKlT1Y7RzQwbsv73hpZWbWpqGEe7SNUH1C PQk1ATttscJ7VeeUZR4rJUpl3d3aPctVpV/NMUeBNtN7jaGJOcT6I+uwjZwxyZCY PQIm79q9qqPVXHoZmx3S9RGJ5O5ITHo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:12 2025 by rpki-client