$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/800ecaa7-b3f1-3043-86e3-18c2488250b0.roa File: 800ecaa7-b3f1-3043-86e3-18c2488250b0.roa (raw, json) Hash identifier: njqpUlm8LUdl2YE5PCwSPP3VNOPooQaJZWAnFtZc2H0= Subject key identifier: A0:7B:97:19:B1:BC:0E:EF:33:07:C9:01:E7:E4:79:06:F9:C6:C6:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374BBD565DF83D028D9A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/800ecaa7-b3f1-3043-86e3-18c2488250b0.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4b:bd:56:5d:f8:3d:02:8d:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3c1165a7-236f-419c-8a5c-284576000ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:cf:9a:62:7e:86:54:59:59:65:15:76:90: c6:b0:54:e0:c4:ef:47:c9:a1:82:69:af:a6:e0:fe: 81:55:e6:38:09:e2:31:dc:b7:86:26:13:99:ac:6a: d8:64:a7:30:6a:31:fc:e1:75:30:3b:6e:d1:9c:da: 77:51:66:52:85:87:fe:ab:2f:2f:f1:c3:72:6f:ef: db:8e:89:71:5b:dc:5f:f6:bc:31:c7:0c:f7:6c:1e: 21:52:4a:49:7d:cd:46:44:c4:f5:f9:05:06:d6:30: 75:64:86:e2:b2:28:72:6a:b8:71:fb:e3:ed:0a:d5: a6:e6:e8:03:a6:05:89:46:a5:ed:26:f2:b2:a0:01: b2:96:b2:ba:8a:7b:7f:78:7e:58:99:f7:d8:b5:6c: 4e:07:15:96:e5:6b:95:0f:a4:72:88:86:e0:34:66: 25:f5:14:ef:2a:b3:87:1f:4f:2b:9a:04:a0:ca:1b: 88:ac:7b:43:cf:c3:7b:3d:9c:98:d1:49:91:d5:60: 65:d8:cd:ed:08:1e:5c:59:ba:19:95:51:78:74:3f: 0a:66:43:86:6b:a9:8f:09:d2:8a:d7:73:90:a8:43: 46:af:20:e1:bd:e8:a2:a3:61:0e:71:ea:84:3f:5d: 19:67:bb:ee:83:81:b0:45:03:b5:bf:c1:d7:35:6a: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7B:97:19:B1:BC:0E:EF:33:07:C9:01:E7:E4:79:06:F9:C6:C6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/800ecaa7-b3f1-3043-86e3-18c2488250b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2b:6e:cc:7c:28:69:c8:a3:61:08:36:d2:1d:de:ba:e7:92: 2b:42:96:c0:a1:1b:23:ca:e2:33:3f:44:d9:d5:b9:f7:28:52: fe:75:99:4c:28:ec:d9:46:15:8c:5d:6d:85:07:3f:da:f1:14: 72:7d:97:2f:19:d1:c0:81:b8:6a:ce:71:20:82:b9:ee:88:ef: 99:96:a6:5a:2d:c4:cd:4f:7e:49:bc:bc:d1:cb:23:a0:ed:af: eb:a2:90:b9:06:08:03:b7:9d:ca:7e:4c:7e:18:54:15:34:35: ed:5f:36:3e:a2:7c:e0:2a:7d:20:57:d5:82:2f:cb:3a:9b:cf: c3:00:20:1d:34:37:81:71:37:5d:99:e9:1f:84:4c:76:24:0d: 0e:21:d8:e6:10:b4:39:f0:35:04:35:45:89:44:a8:6b:f7:f2: 2a:cf:66:7b:4f:d8:fd:08:85:5f:fa:27:92:96:4f:07:55:bb: 51:d9:d7:56:4b:ed:c2:25:84:54:4f:fe:25:61:92:a0:06:85: 75:a3:29:d6:60:f4:46:b5:7f:43:a6:ae:b8:b0:d7:f7:66:ac: 10:18:07:22:36:b7:00:1c:59:ab:f0:26:e0:20:15:95:b7:81: 83:3e:3e:1e:e6:b4:a3:c9:0c:7a:fe:08:d3:1a:9a:fc:0a:9f: 9c:f0:02:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0u9Vl34PQKNmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2MxMTY1YTctMjM2Zi00MTljLThhNWMtMjg0NTc2MDAwZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBHPmmJ+hlRZWWUVdpDGsFTgxO9HyaGCaa+m 4P6BVeY4CeIx3LeGJhOZrGrYZKcwajH84XUwO27RnNp3UWZShYf+qy8v8cNyb+/b jolxW9xf9rwxxwz3bB4hUkpJfc1GRMT1+QUG1jB1ZIbisihyarhx++PtCtWm5ugD pgWJRqXtJvKyoAGylrK6int/eH5YmffYtWxOBxWW5WuVD6RyiIbgNGYl9RTvKrOH H08rmgSgyhuIrHtDz8N7PZyY0UmR1WBl2M3tCB5cWboZlVF4dD8KZkOGa6mPCdKK 13OQqENGryDhveiio2EOceqEP10ZZ7vug4GwRQO1v8HXNWqQzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB7lxmxvA7vMwfJAefkeQb5xsZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODAwZWNhYTctYjNmMS0z MDQzLTg2ZTMtMThjMjQ4ODI1MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0rbsx8KGnIo2EINtId3rrnkitClsChGyPK4jM/RNnVufcoUv51mUwo 7NlGFYxdbYUHP9rxFHJ9ly8Z0cCBuGrOcSCCue6I75mWplotxM1Pfkm8vNHLI6Dt r+uikLkGCAO3ncp+TH4YVBU0Ne1fNj6ifOAqfSBX1YIvyzqbz8MAIB00N4FxN12Z 6R+ETHYkDQ4h2OYQtDnwNQQ1RYlEqGv38irPZntP2P0IhV/6J5KWTwdVu1HZ11ZL 7cIlhFRP/iVhkqAGhXWjKdZg9Ea1f0Omrriw1/dmrBAYByI2twAcWavwJuAgFZW3 gYM+Ph7mtKPJDHr+CNMamvwKn5zwAlY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:15 2025 by rpki-client