$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86d3aacc-6968-334c-99b7-2db9d7311cb9.roa File: 86d3aacc-6968-334c-99b7-2db9d7311cb9.roa (raw, json) Hash identifier: TYZwxr7+blLrVmeO71S2CjR1bVWWCsZExA0cKqMACIw= Subject key identifier: AC:E8:49:68:3D:57:E6:92:35:DB:88:25:7C:A6:A1:65:9F:CB:B9:66 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4393AAA1CE48EE3F6EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86d3aacc-6968-334c-99b7-2db9d7311cb9.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.109.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:43:93:aa:a1:ce:48:ee:3f:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=37a4ae16-f289-42f8-bfe1-fc48a80403c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:26:4b:2b:cc:5e:1f:c6:ab:96:52:19:59: 25:87:91:0a:b5:29:ed:de:7e:4c:91:5d:6e:d9:2a: b5:85:b2:c7:b1:b7:f0:e0:62:82:bd:23:e9:ed:3b: 81:8f:e1:4f:89:9c:f1:74:ef:c1:8f:b0:2f:ab:56: 50:bb:8e:09:75:2e:d4:33:42:c3:34:15:ee:35:67: b0:11:b1:11:0a:c1:54:6c:87:98:fe:b8:4d:dc:f7: 44:ae:65:55:e6:c3:61:d1:57:84:19:ec:49:e1:59: f8:d5:35:49:77:2a:0e:87:27:e9:4a:a7:4f:ab:dd: ad:16:63:3f:1a:5b:59:7e:19:0e:25:0d:83:bd:84: 5a:52:f2:6d:26:29:27:ec:f3:15:c4:71:22:5e:c5: d0:1c:de:61:04:50:41:95:02:44:29:84:2b:f1:21: 93:c0:ff:3e:6e:ef:66:85:7b:6c:1c:12:59:3c:d3: 9f:19:e3:87:69:4e:22:05:9c:ff:e2:f1:ce:e2:9e: 2a:90:31:e6:28:34:10:e5:43:98:b8:60:73:e9:a2: 3c:5c:15:cf:07:20:6a:fc:09:20:d5:78:46:43:77: c8:a8:8e:e9:af:3c:7f:23:3b:52:15:d3:21:64:00: 77:4b:c7:20:93:92:5c:e4:6a:bc:2a:36:cd:ff:ff: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E8:49:68:3D:57:E6:92:35:DB:88:25:7C:A6:A1:65:9F:CB:B9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86d3aacc-6968-334c-99b7-2db9d7311cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d9:0e:2d:eb:bb:10:01:8e:45:b3:d2:07:db:0c:0b:c1:24: 9f:e6:d5:c2:e8:0b:c1:68:83:f2:03:82:f4:fa:ef:38:f1:00: 8e:fd:92:3c:b2:be:c5:38:d8:5c:b5:0f:ed:28:6c:30:fc:92: cc:e7:38:a5:99:cb:78:36:c4:98:dd:24:32:41:21:a3:bb:65: ea:53:0b:62:8e:8c:9d:84:6e:1e:0c:f2:82:48:0e:a2:01:6a: da:db:ca:19:b1:55:50:e2:9d:a6:57:c6:b4:f5:15:37:61:7e: 22:1a:32:1e:9e:5e:32:eb:88:5c:3d:f1:c2:f1:62:91:96:f5: 75:6a:1f:81:12:90:8d:76:66:27:fe:2b:e6:0d:37:77:ec:da: a3:c8:e5:5e:ba:8f:02:ed:6f:f8:0d:a9:b9:59:d7:df:37:ee: 03:ee:90:94:a3:da:5f:b4:a4:d6:95:69:75:b1:c8:08:c6:cb: 18:2f:ca:24:6d:a2:e8:cb:45:af:f3:fc:64:2d:df:f6:b0:b8: ad:5b:61:7c:d9:94:bb:db:cb:52:67:18:f1:d0:2a:28:e8:00: 9c:5a:da:71:14:65:14:be:24:5c:ae:63:ee:ae:4a:ba:4e:65: 18:4c:a7:1f:1e:b5:52:9b:3d:b2:9f:6b:68:a3:04:3c:87:c8: 51:18:d2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEOTqqHOSO4/bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MzdhNGFlMTYtZjI4OS00MmY4LWJmZTEtZmM0OGE4MDQwM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY8mSyvMXh/Gq5ZSGVklh5EKtSnt3n5MkV1u 2Sq1hbLHsbfw4GKCvSPp7TuBj+FPiZzxdO/Bj7Avq1ZQu44JdS7UM0LDNBXuNWew EbERCsFUbIeY/rhN3PdErmVV5sNh0VeEGexJ4Vn41TVJdyoOhyfpSqdPq92tFmM/ GltZfhkOJQ2DvYRaUvJtJikn7PMVxHEiXsXQHN5hBFBBlQJEKYQr8SGTwP8+bu9m hXtsHBJZPNOfGeOHaU4iBZz/4vHO4p4qkDHmKDQQ5UOYuGBz6aI8XBXPByBq/Akg 1XhGQ3fIqI7przx/IztSFdMhZAB3S8cgk5Jc5Gq8KjbN//9omQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzoSWg9V+aSNduIJXymoWWfy7lmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZkM2FhY2MtNjk2OC0z MzRjLTk5YjctMmRiOWQ3MzExY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG2+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDZDi3ruxABjkWz0gfbDAvBJJ/m1cLoC8Fog/IDgvT67zjxAI79kjyy vsU42Fy1D+0obDD8ksznOKWZy3g2xJjdJDJBIaO7ZepTC2KOjJ2Ebh4M8oJIDqIB atrbyhmxVVDinaZXxrT1FTdhfiIaMh6eXjLriFw98cLxYpGW9XVqH4ESkI12Zif+ K+YNN3fs2qPI5V66jwLtb/gNqblZ19837gPukJSj2l+0pNaVaXWxyAjGyxgvyiRt oujLRa/z/GQt3/awuK1bYXzZlLvby1JnGPHQKijoAJxa2nEUZRS+JFyuY+6uSrpO ZRhMpx8etVKbPbKfa2ijBDyHyFEY0nw= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:16 2025 by rpki-client