$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/903cf6e5-a1ea-3fd7-a9a0-c41acbaede28.roa File: 903cf6e5-a1ea-3fd7-a9a0-c41acbaede28.roa (raw, json) Hash identifier: Ob1gsocXWDtBlrkQrqvifOTamvwn6NVruYLfk5DZ8Vk= Subject key identifier: 20:AE:FB:A4:0D:9E:4B:07:94:F3:6B:D0:C3:BF:11:F1:7F:D3:AE:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FF143FB813F9C5ED6990 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/903cf6e5-a1ea-3fd7-a9a0-c41acbaede28.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ff:14:3f:b8:13:f9:c5:ed:69:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=54c76e9f-1df7-48f5-ac6f-8b5b994b548f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:47:1f:9f:43:92:cd:62:71:0d:b9:a3:e3: 9f:da:ef:be:bd:45:6e:f9:a2:a0:f5:b6:30:7e:bf: 6b:4b:e1:b0:f8:a7:8a:24:46:79:ec:77:9d:04:e9: ff:f7:9d:bf:76:5f:31:b9:67:18:e1:dc:69:38:22: 55:f7:3f:29:4b:8c:42:dd:05:a2:56:88:6c:a3:9a: 6e:58:ed:33:ac:f2:16:b9:7f:f4:3b:db:97:9d:62: 7b:59:4c:e3:cc:09:cb:97:13:6b:a1:8a:89:0d:da: 57:bb:7e:d4:c4:33:4b:4b:fb:1f:cb:fe:41:b6:65: 11:b0:7d:dc:eb:ae:68:20:a8:58:48:d5:54:7e:ce: 8e:86:3b:10:8c:51:46:53:03:c9:84:02:97:d0:f3: 99:44:f4:6d:92:38:b4:03:f4:9e:c8:8f:cd:ad:4c: b9:49:c9:ea:69:48:5c:ce:8c:9b:ed:09:b1:54:11: 03:76:ec:6e:1c:e3:3c:44:88:a6:31:46:86:e1:79: 36:88:d8:00:05:87:95:27:13:9a:33:a1:42:5c:c5: 07:c9:99:a4:31:26:55:a1:66:8a:27:22:49:42:f5: cc:c2:87:cc:84:ce:a1:2b:b3:c1:b9:25:97:57:8d: f9:f3:e6:7a:82:dc:81:97:99:8a:f8:d7:08:b3:7b: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:FB:A4:0D:9E:4B:07:94:F3:6B:D0:C3:BF:11:F1:7F:D3:AE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/903cf6e5-a1ea-3fd7-a9a0-c41acbaede28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:13:0b:31:c5:eb:25:c9:65:27:05:59:03:b7:96:6f:52:6a: 85:44:c8:86:91:e8:01:13:ad:f5:65:2c:00:79:c9:ca:35:97: c2:53:a2:82:54:4c:45:f7:74:49:de:15:b1:93:5f:ca:0e:0b: 92:6f:8a:19:c4:52:b7:7e:64:b0:5d:23:41:9f:64:ee:10:0f: 3a:18:c5:2b:94:3e:cb:e6:e6:60:13:3d:3d:93:0c:03:4d:51: 1a:23:b0:e6:e0:18:34:d2:26:91:35:7f:37:59:ef:21:2e:2b: 87:50:88:e3:ac:e5:fa:d4:48:d2:4f:76:11:e8:ac:03:a8:b3: 58:6e:fa:0a:c3:cb:de:77:96:88:e6:32:fc:45:21:ae:9c:32: 6a:d1:03:d6:96:d6:75:b4:32:66:93:ae:62:b0:31:44:6e:50: 6b:39:23:f3:9a:29:5d:14:4e:fa:d2:da:94:ac:50:38:05:ed: 9f:f4:d1:88:ec:05:b3:7b:a8:29:4c:b7:02:40:1f:1f:a4:90: 75:11:92:32:0c:14:65:10:a1:3a:c8:f8:91:5c:a9:b9:98:0f: 2e:da:1d:a1:19:88:a9:dc:e8:ea:a5:a9:cb:a3:b5:3a:40:bf: 59:61:94:a0:34:6a:31:13:68:ad:1e:85:ed:05:26:99:1a:23: 31:2b:d5:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZv8UP7gT+cXtaZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTRjNzZlOWYtMWRmNy00OGY1LWFjNmYtOGI1Yjk5NGI1NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha9HH59Dks1icQ25o+Of2u++vUVu+aKg9bYw fr9rS+Gw+KeKJEZ57HedBOn/952/dl8xuWcY4dxpOCJV9z8pS4xC3QWiVohso5pu WO0zrPIWuX/0O9uXnWJ7WUzjzAnLlxNroYqJDdpXu37UxDNLS/sfy/5BtmURsH3c 665oIKhYSNVUfs6OhjsQjFFGUwPJhAKX0POZRPRtkji0A/SeyI/NrUy5ScnqaUhc zoyb7QmxVBEDduxuHOM8RIimMUaG4Xk2iNgABYeVJxOaM6FCXMUHyZmkMSZVoWaK JyJJQvXMwofMhM6hK7PBuSWXV4358+Z6gtyBl5mK+NcIs3usJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCu+6QNnksHlPNr0MO/EfF/067PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTAzY2Y2ZTUtYTFlYS0z ZmQ3LWE5YTAtYzQxYWNiYWVkZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcTCzHF6yXJZScFWQO3lm9SaoVEyIaR6AETrfVlLAB5yco1l8JTooJU TEX3dEneFbGTX8oOC5JvihnEUrd+ZLBdI0GfZO4QDzoYxSuUPsvm5mATPT2TDANN URojsObgGDTSJpE1fzdZ7yEuK4dQiOOs5frUSNJPdhHorAOos1hu+grDy953lojm MvxFIa6cMmrRA9aW1nW0MmaTrmKwMURuUGs5I/OaKV0UTvrS2pSsUDgF7Z/00Yjs BbN7qClMtwJAHx+kkHURkjIMFGUQoTrI+JFcqbmYDy7aHaEZiKnc6OqlqcujtTpA v1lhlKA0ajETaK0ehe0FJpkaIzEr1Wg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:27 2025 by rpki-client