$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92923cfc-a587-34bb-b9aa-b34fd25e931a.roa File: 92923cfc-a587-34bb-b9aa-b34fd25e931a.roa (raw, json) Hash identifier: 2YHD1OM7lER1ZsoU2nCSqVU8CYns4n4lVUnwgIlxEHY= Subject key identifier: A2:6B:AA:8D:7A:98:B8:C7:50:87:34:19:B2:45:E2:C0:23:A5:F8:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C24D10424DBFAFB5C6CD0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92923cfc-a587-34bb-b9aa-b34fd25e931a.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:24:d1:04:24:db:fa:fb:5c:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=b969a806-dd61-4344-8ed6-1ab2b35d530d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:52:3b:1b:d1:74:38:54:e2:fb:28:5a:4e: 1c:e3:16:24:26:3b:60:a8:45:25:ab:31:9c:3c:f6: 65:80:62:cb:04:ee:02:27:3b:16:b6:ab:48:b4:7a: a2:5e:1f:47:32:24:ed:5e:d6:0d:da:ce:b4:08:11: f8:4b:a8:c5:8a:70:76:4c:e4:06:b9:53:49:57:41: 1b:05:d0:b8:70:d2:de:af:07:47:62:41:83:f8:f4: 9a:0a:b4:9c:ab:46:89:8a:98:2a:1f:ab:ed:e5:49: 2a:ac:23:59:f0:cf:33:16:2e:44:70:86:9b:df:83: 66:70:87:df:f9:73:45:05:14:8b:ec:2f:ef:ee:27: 42:61:98:7d:0f:11:a3:80:d8:6b:f2:7d:86:22:62: c4:08:67:93:3b:50:de:52:2b:72:c4:07:d0:95:20: e3:bf:3e:c1:fe:3d:f4:4e:47:72:14:1b:dc:a3:b1: d9:4d:c8:15:bb:75:be:01:18:9f:6f:4d:b1:2c:06: 37:3c:f9:da:89:a2:8a:2b:11:5c:3a:33:f4:79:7d: 16:6b:ff:55:bb:72:ab:ba:6f:2f:f8:56:ac:1c:6a: e6:b0:ec:e0:7e:40:91:17:38:e3:44:a9:b7:59:4f: 10:90:03:20:af:3c:ef:dc:c7:db:f0:52:05:ab:a1: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6B:AA:8D:7A:98:B8:C7:50:87:34:19:B2:45:E2:C0:23:A5:F8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92923cfc-a587-34bb-b9aa-b34fd25e931a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:96:1c:e1:f0:30:cb:e4:37:05:44:af:2c:b0:f5:a3:37:3a: bf:83:3f:6d:8d:0a:09:a6:b0:c9:e5:67:94:18:01:02:26:4b: 60:42:04:85:d1:e0:39:01:ca:77:e7:cb:67:c7:59:28:35:f7: 85:2b:fd:b9:96:cd:17:57:86:40:8e:56:52:dd:10:e6:0e:8d: 8c:25:ee:c9:c6:22:d1:26:b1:14:58:55:eb:26:a4:68:39:7d: 74:84:2e:5e:c8:ff:a4:22:96:05:03:89:db:0a:25:10:98:3f: 7e:e0:a2:52:32:d9:2e:d7:09:f1:31:08:47:9f:0e:77:76:7f: ba:f7:ba:fe:b6:cd:d6:2f:f1:0a:77:a9:3c:05:8c:33:41:92: 20:cb:3d:bc:0d:80:93:2b:a8:07:27:c3:ce:e4:bd:b0:cf:8b: 38:3d:46:c8:36:93:07:dd:91:ad:5a:e2:53:64:d2:c8:b2:92: c2:a1:62:0e:4f:cd:a7:d5:d0:82:97:c6:1f:77:c7:cd:c1:f7: 7a:74:fb:c4:60:af:53:28:52:06:e3:75:3d:47:7f:ff:4d:2c: ae:99:68:93:af:4f:c8:75:16:7b:bb:2a:90:c0:d6:3d:de:16: fd:6e:49:5e:8c:4e:bd:c0:e3:3f:1b:0f:e9:ba:34:6f:25:76: ac:86:82:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCTRBCTb+vtcbNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk Yjk2OWE4MDYtZGQ2MS00MzQ0LThlZDYtMWFiMmIzNWQ1MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqARSOxvRdDhU4vsoWk4c4xYkJjtgqEUlqzGc PPZlgGLLBO4CJzsWtqtItHqiXh9HMiTtXtYN2s60CBH4S6jFinB2TOQGuVNJV0Eb BdC4cNLerwdHYkGD+PSaCrScq0aJipgqH6vt5UkqrCNZ8M8zFi5EcIab34NmcIff +XNFBRSL7C/v7idCYZh9DxGjgNhr8n2GImLECGeTO1DeUityxAfQlSDjvz7B/j30 TkdyFBvco7HZTcgVu3W+ARifb02xLAY3PPnaiaKKKxFcOjP0eX0Wa/9Vu3Krum8v +FasHGrmsOzgfkCRFzjjRKm3WU8QkAMgrzzv3Mfb8FIFq6HQbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJrqo16mLjHUIc0GbJF4sAjpfj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTI5MjNjZmMtYTU4Ny0z NGJiLWI5YWEtYjM0ZmQyNWU5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqWHOHwMMvkNwVEryyw9aM3Or+DP22NCgmmsMnlZ5QYAQImS2BCBIXR 4DkBynfny2fHWSg194Ur/bmWzRdXhkCOVlLdEOYOjYwl7snGItEmsRRYVesmpGg5 fXSELl7I/6QilgUDidsKJRCYP37golIy2S7XCfExCEefDnd2f7r3uv62zdYv8Qp3 qTwFjDNBkiDLPbwNgJMrqAcnw87kvbDPizg9Rsg2kwfdka1a4lNk0siyksKhYg5P zafV0IKXxh93x83B93p0+8Rgr1MoUgbjdT1Hf/9NLK6ZaJOvT8h1Fnu7KpDA1j3e Fv1uSV6MTr3A4z8bD+m6NG8ldqyGghw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:47:54 2025 by rpki-client