$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/944c6c3f-1fe4-36f5-9d53-28969e40dbfa.roa File: 944c6c3f-1fe4-36f5-9d53-28969e40dbfa.roa (raw, json) Hash identifier: v2aF0nv+uwRq0c7Hfh2P8Gp9CwQbMsLP4Tjfek6LIUw= Subject key identifier: 9F:18:E6:FC:BE:C4:0D:EC:FF:F6:1A:44:21:9D:6C:57:16:C3:36:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C256E3A85F69379A69820 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/944c6c3f-1fe4-36f5-9d53-28969e40dbfa.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:25:6e:3a:85:f6:93:79:a6:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=a05ae132-4b50-40e6-aba7-436450dc21ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:8a:aa:9d:da:76:99:89:82:fc:f8:5f:d0: db:be:d1:0c:34:97:1f:47:77:38:61:56:3b:17:ce: a5:26:29:51:5b:34:79:3c:e5:c6:51:2d:22:89:14: 7d:9d:c6:1f:49:6a:37:cc:e6:71:b1:c3:d9:c4:a3: 05:db:6e:86:c4:56:6e:3e:7c:0e:e7:30:34:98:f4: df:14:6c:ea:23:f0:db:9e:b6:47:26:e5:28:40:97: 76:c0:36:ce:63:81:c2:fc:a2:d0:b8:ae:80:d7:22: bf:e7:d1:e0:50:5b:76:19:6c:c0:70:33:30:5c:a3: fa:ba:4e:8b:95:b7:a6:7a:bb:dd:8d:34:02:8e:e4: 55:75:a8:44:ef:25:ff:59:c8:12:52:59:0e:16:90: 5f:db:33:a2:98:db:62:36:a6:aa:ac:7b:f2:05:9c: 68:d8:e0:e4:43:b2:6a:4c:6b:35:a7:3d:54:b7:25: 84:bb:ef:c5:7f:84:d2:82:c3:84:a8:16:bf:c9:76: 67:fc:b6:21:8b:bd:5c:1c:94:60:48:83:45:88:d5: ed:d5:3d:da:87:af:a0:ae:26:21:5b:e6:c6:e9:66: 81:b7:81:65:f0:31:87:a0:1a:0a:8b:fc:11:fa:cf: d1:4d:77:c8:e1:9d:fc:b0:de:6e:9f:05:4b:45:b2: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:18:E6:FC:BE:C4:0D:EC:FF:F6:1A:44:21:9D:6C:57:16:C3:36:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/944c6c3f-1fe4-36f5-9d53-28969e40dbfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7e:cc:61:81:07:8e:56:4a:a9:86:e8:00:f0:09:8b:71:c3: 62:9b:30:aa:c9:6d:c0:c1:99:9c:5d:e6:8c:c1:ac:dc:d4:7f: ca:d2:9e:15:87:b4:17:a4:ae:0f:da:bf:8a:4c:0a:7b:48:cf: f1:cd:0c:1d:24:fb:34:91:08:32:77:6a:de:8f:ad:24:38:6f: d7:3f:46:64:05:53:0f:f3:32:27:6f:c8:bf:49:52:cc:cb:68: 62:ed:d6:ff:56:f0:cc:dd:57:42:2d:39:09:8b:3a:65:9c:77: 6d:04:a9:46:d1:59:fc:ee:e8:4e:ca:f0:fe:7c:11:d6:31:43: 94:66:f6:32:7c:ea:82:e6:d6:fa:a9:df:b4:bd:54:1a:70:90: 79:cb:4f:e3:45:00:a8:35:25:63:e6:24:d5:e1:f9:5c:bd:ba: 63:92:6d:bc:94:ae:c7:75:1f:4e:8a:a1:01:41:a9:69:7c:ab: b5:3c:cd:81:77:23:0d:ef:74:d4:54:8c:6e:a7:64:14:a2:d3: 69:c1:df:58:f5:e1:07:34:35:c8:d4:cf:36:4e:6a:e2:ec:41: 5d:34:39:9b:7a:7b:f1:2f:9d:74:69:94:ad:5a:1e:74:84:74: cf:89:d5:a9:46:32:10:d5:ee:4e:6d:b0:3c:f6:2b:6c:74:69: 0d:ba:42:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCVuOoX2k3mmmCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YTA1YWUxMzItNGI1MC00MGU2LWFiYTctNDM2NDUwZGMyMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFWKqp3adpmJgvz4X9DbvtEMNJcfR3c4YVY7 F86lJilRWzR5POXGUS0iiRR9ncYfSWo3zOZxscPZxKMF226GxFZuPnwO5zA0mPTf FGzqI/DbnrZHJuUoQJd2wDbOY4HC/KLQuK6A1yK/59HgUFt2GWzAcDMwXKP6uk6L lbemervdjTQCjuRVdahE7yX/WcgSUlkOFpBf2zOimNtiNqaqrHvyBZxo2ODkQ7Jq TGs1pz1UtyWEu+/Ff4TSgsOEqBa/yXZn/LYhi71cHJRgSINFiNXt1T3ah6+griYh W+bG6WaBt4Fl8DGHoBoKi/wR+s/RTXfI4Z38sN5unwVLRbKNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8Y5vy+xA3s//YaRCGdbFcWwza6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQ0YzZjM2YtMWZlNC0z NmY1LTlkNTMtMjg5NjllNDBkYmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5+zGGBB45WSqmG6ADwCYtxw2KbMKrJbcDBmZxd5ozBrNzUf8rSnhWH tBekrg/av4pMCntIz/HNDB0k+zSRCDJ3at6PrSQ4b9c/RmQFUw/zMidvyL9JUszL aGLt1v9W8MzdV0ItOQmLOmWcd20EqUbRWfzu6E7K8P58EdYxQ5Rm9jJ86oLm1vqp 37S9VBpwkHnLT+NFAKg1JWPmJNXh+Vy9umOSbbyUrsd1H06KoQFBqWl8q7U8zYF3 Iw3vdNRUjG6nZBSi02nB31j14Qc0NcjUzzZOauLsQV00OZt6e/EvnXRplK1aHnSE dM+J1alGMhDV7k5tsDz2K2x0aQ26Qrc= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:58 2025 by rpki-client