$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/949bdcfa-fe90-33ef-9929-d01a601a9f8b.roa File: 949bdcfa-fe90-33ef-9929-d01a601a9f8b.roa (raw, json) Hash identifier: wtDkqCghvirDpmhZzFiMjBwkLHVQ99c/1iIKwCqMoNU= Subject key identifier: 16:F6:D9:21:BE:DB:BA:07:D8:3F:06:DD:D0:69:8B:F7:E7:97:F4:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373F83C47CB29110CBBF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/949bdcfa-fe90-33ef-9929-d01a601a9f8b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3f:83:c4:7c:b2:91:10:cb:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=aee4360f-5584-4108-8ddd-3f90366fe0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:41:18:9d:61:6d:c8:fa:4f:3f:da:1d:c5: 0d:38:fa:59:71:fb:2f:19:d7:8c:0e:83:07:e4:f3: 62:08:9a:95:24:07:b9:aa:20:f1:b6:59:3e:d3:2d: 4a:2a:36:28:75:fd:29:97:09:36:08:7f:91:5d:4d: 03:76:8a:48:ee:c6:d9:81:dd:e1:be:b1:4c:f6:17: 3c:30:e5:8c:10:84:7c:b8:64:b9:0d:9a:df:19:f9: 1e:d1:6e:cf:a2:dd:ca:11:b8:9a:40:55:4b:31:5a: ba:90:f4:a4:7c:a6:95:2b:93:e9:c7:1e:55:b4:30: 74:af:3c:f7:39:b0:6e:ca:b4:0d:0d:d7:51:98:f0: b8:3d:01:d6:ac:1a:a5:48:32:77:89:db:7e:f9:55: a3:c6:0a:9a:bf:c1:c1:a7:20:5f:a7:bb:ee:12:dc: cf:8e:53:3f:41:39:b4:81:78:43:9d:7b:59:a2:07: 24:22:c4:a8:21:ba:67:3b:0d:be:66:68:2d:a9:a2: 74:6d:37:6c:9b:a3:7d:04:d7:e4:ac:67:be:2a:95: ef:b4:e5:80:f2:80:3b:26:44:08:59:fe:95:5a:91: e0:e9:c3:81:0a:b9:32:b5:c0:96:79:04:72:3d:3b: b1:06:91:63:41:7b:5a:31:31:7c:a6:5f:04:28:e2: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F6:D9:21:BE:DB:BA:07:D8:3F:06:DD:D0:69:8B:F7:E7:97:F4:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/949bdcfa-fe90-33ef-9929-d01a601a9f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ac:ee:d0:70:5e:bd:3d:90:8c:4c:48:44:ec:4c:b3:ce:b8: ed:37:90:24:e7:e9:2d:80:75:48:36:91:c8:aa:29:3c:da:85: ea:a2:65:9b:75:e6:fc:19:f1:fc:6e:27:04:20:ae:fb:5c:7e: aa:96:f0:f1:52:84:bc:75:39:12:c6:bf:5c:e4:36:12:55:2a: fe:05:b3:6d:65:ea:46:f1:9e:b7:c3:45:15:4c:8c:25:d0:a6: 80:77:bb:4c:82:fa:8b:d9:02:69:de:65:a0:12:b8:bc:76:96: 59:59:ad:cb:eb:cb:e9:64:d9:18:b0:ec:66:7f:c1:5c:5e:00: 1b:ba:a5:6c:18:13:1a:f2:40:62:bc:40:4f:ef:f4:46:1f:26: 4d:1f:0e:78:47:b7:6b:99:5e:d4:24:52:ca:54:7e:2b:9f:16: f7:76:13:21:9d:f9:04:71:04:0c:7f:a2:9f:3a:58:a6:52:b9: 84:e8:43:15:bd:0a:3f:f4:d2:1d:a0:c1:b0:b4:16:db:8f:49: 26:fd:1c:d3:19:7f:20:2e:f1:9e:88:77:64:64:f4:4f:29:ea: 5c:92:69:40:d5:91:c9:cc:b4:10:81:e0:23:10:4d:92:8a:9d: 00:71:60:ef:9d:ab:62:26:82:e6:61:06:e1:76:0c:c1:a4:17: 35:4d:26:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNz+DxHyykRDLv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YWVlNDM2MGYtNTU4NC00MTA4LThkZGQtM2Y5MDM2NmZlMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpFBGJ1hbcj6Tz/aHcUNOPpZcfsvGdeMDoMH 5PNiCJqVJAe5qiDxtlk+0y1KKjYodf0plwk2CH+RXU0DdopI7sbZgd3hvrFM9hc8 MOWMEIR8uGS5DZrfGfke0W7Pot3KEbiaQFVLMVq6kPSkfKaVK5Ppxx5VtDB0rzz3 ObBuyrQNDddRmPC4PQHWrBqlSDJ3idt++VWjxgqav8HBpyBfp7vuEtzPjlM/QTm0 gXhDnXtZogckIsSoIbpnOw2+ZmgtqaJ0bTdsm6N9BNfkrGe+KpXvtOWA8oA7JkQI Wf6VWpHg6cOBCrkytcCWeQRyPTuxBpFjQXtaMTF8pl8EKOLsOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb22SG+27oH2D8G3dBpi/fnl/TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQ5YmRjZmEtZmU5MC0z M2VmLTk5MjktZDAxYTYwMWE5ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARANaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKs7tBwXr09kIxMSETsTLPOuO03kCTn6S2AdUg2kciqKTzaheqiZZt1 5vwZ8fxuJwQgrvtcfqqW8PFShLx1ORLGv1zkNhJVKv4Fs21l6kbxnrfDRRVMjCXQ poB3u0yC+ovZAmneZaASuLx2lllZrcvry+lk2Riw7GZ/wVxeABu6pWwYExryQGK8 QE/v9EYfJk0fDnhHt2uZXtQkUspUfiufFvd2EyGd+QRxBAx/op86WKZSuYToQxW9 Cj/00h2gwbC0FtuPSSb9HNMZfyAu8Z6Id2Rk9E8p6lySaUDVkcnMtBCB4CMQTZKK nQBxYO+dq2ImguZhBuF2DMGkFzVNJpI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:13 2025 by rpki-client