$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b9cf934-0256-3a55-b5a7-74500673d20a.roa File: 7b9cf934-0256-3a55-b5a7-74500673d20a.roa (raw, json) Hash identifier: Gpaj0vbdD5tPIn4DMykHbD+wn9N4TRZCSJoDaarvRqc= Subject key identifier: D8:C1:20:05:9C:E0:11:86:49:3B:70:D1:1A:62:1F:4D:5A:0B:75:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4F99BEA0D90947B7B200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b9cf934-0256-3a55-b5a7-74500673d20a.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4f:99:be:a0:d9:09:47:b7:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=a33a0930-228d-4171-80cd-476e303e2361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:d3:08:2c:41:ad:46:25:f1:69:f9:2c:05: 27:94:ed:be:33:e9:5c:65:f4:8c:cf:59:50:2a:2b: 38:2a:19:35:b8:61:5b:6b:3e:c7:f5:73:5c:e8:fa: 9b:f7:19:ed:8f:fe:e7:f3:b3:b2:d6:3a:4b:59:14: fd:a7:4a:a5:e2:6f:fe:0e:a6:ac:e6:47:fa:1a:3c: 64:8d:1f:e8:7e:ea:dc:bd:bd:b2:21:ce:d0:91:8f: a4:49:ff:66:eb:4c:cc:00:9c:03:44:35:62:4b:14: 76:cc:08:68:e7:36:0e:e8:e9:76:6d:78:1b:c7:45: c3:95:4d:66:4e:d1:3e:ea:ba:cc:79:ad:a3:c2:b8: 85:37:81:0c:ec:11:56:b1:bb:d1:80:69:60:c6:30: 69:6a:3d:ca:4d:9e:9a:c6:67:6c:6f:9f:b8:61:3d: 68:10:43:02:7c:81:84:87:6b:c0:22:d9:7d:4e:87: c5:3d:53:7f:d9:63:71:bd:09:95:5e:6f:0e:f6:d2: 64:e7:dd:7c:2c:5b:be:b8:d8:de:f3:b5:f1:9c:bd: 0f:b7:ad:39:7a:df:82:30:86:77:8a:20:24:83:8c: d3:8b:45:da:e3:c2:1c:db:41:20:4b:64:d0:5c:f8: 0b:85:71:00:23:bf:c6:31:04:ea:74:96:84:37:60: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:20:05:9C:E0:11:86:49:3B:70:D1:1A:62:1F:4D:5A:0B:75:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b9cf934-0256-3a55-b5a7-74500673d20a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:99:7c:20:23:41:cc:39:3a:61:2b:29:3d:f3:77:31:c4:d1: 55:d4:77:6d:ac:6d:0e:2f:7b:10:30:a5:e6:99:b6:24:e1:4a: ee:49:80:e0:93:54:50:ac:37:d5:5b:85:e5:a0:a3:ba:4c:8e: 01:be:f5:1d:15:f1:85:9d:c3:70:b7:18:aa:09:5d:65:e9:d8: 8f:7c:da:72:fc:2e:15:e6:3a:de:e5:1d:c4:70:0b:a7:ad:7c: c1:36:bc:52:46:54:05:b5:dc:5a:f1:13:73:ea:66:b4:69:47: c1:3b:14:08:57:0d:86:c8:a2:84:b0:c1:8e:4c:4c:93:2e:05: ef:a1:aa:cc:45:21:46:92:d2:7a:44:a3:40:c7:6b:e5:ba:99: 3a:bc:cb:00:04:50:ea:5b:d0:17:98:c9:74:ec:04:eb:d4:ea: 84:6b:bb:2c:65:da:94:c2:15:11:81:5d:7e:61:b7:ea:75:49: fa:77:1d:ea:ee:e6:4c:b6:10:23:6a:c1:27:ee:d2:2a:1e:2b: 39:fc:1a:98:f5:b6:d7:4d:67:d2:ec:36:16:3b:68:5c:75:ac: 6c:0c:9b:6e:98:e8:d2:34:0b:13:08:d2:b6:e5:8a:cb:3f:05: cc:da:ff:ef:e0:e4:ad:9f:48:ab:4e:6e:cc:ff:70:f8:3e:28: 9c:c4:a0:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnE+ZvqDZCUe3sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YTMzYTA5MzAtMjI4ZC00MTcxLTgwY2QtNDc2ZTMwM2UyMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJbTCCxBrUYl8Wn5LAUnlO2+M+lcZfSMz1lQ Kis4Khk1uGFbaz7H9XNc6Pqb9xntj/7n87Oy1jpLWRT9p0ql4m/+Dqas5kf6Gjxk jR/ofurcvb2yIc7QkY+kSf9m60zMAJwDRDViSxR2zAho5zYO6Ol2bXgbx0XDlU1m TtE+6rrMea2jwriFN4EM7BFWsbvRgGlgxjBpaj3KTZ6axmdsb5+4YT1oEEMCfIGE h2vAItl9TofFPVN/2WNxvQmVXm8O9tJk5918LFu+uNje87XxnL0Pt605et+CMIZ3 iiAkg4zTi0Xa48Ic20EgS2TQXPgLhXEAI7/GMQTqdJaEN2D/OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjBIAWc4BGGSTtw0RpiH01aC3VsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2I5Y2Y5MzQtMDI1Ni0z YTU1LWI1YTctNzQ1MDA2NzNkMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROYaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuZfCAjQcw5OmErKT3zdzHE0VXUd22sbQ4vexAwpeaZtiThSu5JgOCT VFCsN9VbheWgo7pMjgG+9R0V8YWdw3C3GKoJXWXp2I982nL8LhXmOt7lHcRwC6et fME2vFJGVAW13FrxE3PqZrRpR8E7FAhXDYbIooSwwY5MTJMuBe+hqsxFIUaS0npE o0DHa+W6mTq8ywAEUOpb0BeYyXTsBOvU6oRruyxl2pTCFRGBXX5ht+p1Sfp3Heru 5ky2ECNqwSfu0ioeKzn8Gpj1ttdNZ9LsNhY7aFx1rGwMm26Y6NI0CxMI0rbliss/ Bcza/+/g5K2fSKtObsz/cPg+KJzEoC8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:53 2025 by rpki-client