$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa File: 960859cb-73ca-3008-baa2-e54721f1fd07.roa (raw, json) Hash identifier: rDQMHMymf+KeMnQtPoS3S19YRC2OjlCGuh59foACc4c= Subject key identifier: 2A:B8:73:24:31:CA:0E:D9:FF:39:FD:65:E2:5C:2A:95:1E:CB:E3:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374D94F5B5FC5F1A1CBB40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4d:94:f5:b5:fc:5f:1a:1c:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=04efa32a-7218-4a5d-9bed-c76a92c25139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:26:74:a4:bd:0d:a9:34:aa:d8:ac:7e:da: 11:d3:43:50:bb:2a:71:66:2e:08:62:19:30:99:c4: ce:4d:b1:1e:a1:3e:18:15:e5:25:db:ec:2e:df:35: 06:7f:bb:99:12:6f:1a:15:0b:16:1e:65:28:15:a5: c3:ee:53:8e:88:eb:53:db:49:bd:62:63:9a:de:45: 1a:2d:0a:11:de:f3:cb:c8:d4:5d:6a:47:41:27:cf: 3c:08:6a:f0:78:44:26:a9:b4:f8:1a:d7:50:0d:25: 91:53:e1:47:cf:94:f7:ff:c5:9d:5a:26:7b:0e:ac: a2:fc:1a:f2:d3:23:69:d4:b9:eb:46:8a:7c:6e:88: 80:08:9c:e1:51:c5:1c:ae:9b:cf:5f:38:2c:0a:84: 8a:d4:05:10:96:19:13:60:eb:a1:27:0a:da:ac:f5: 5a:d7:a0:bd:d1:95:ab:d0:4c:67:18:09:c7:e4:55: ac:4a:68:ef:42:d3:49:34:3c:a3:0b:15:d3:2f:fe: 57:3c:16:7f:95:74:39:08:a7:ce:ee:c6:38:f1:5e: 99:ee:5a:d0:59:bf:5e:94:ed:05:d3:cf:14:3d:f6: 12:59:ae:d3:ce:dc:1d:3c:60:d1:dc:41:d4:27:15: 58:8c:61:2b:24:63:54:49:5d:60:60:14:23:59:b2: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B8:73:24:31:CA:0E:D9:FF:39:FD:65:E2:5C:2A:95:1E:CB:E3:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:73:93:66:d2:01:60:b0:48:b4:1c:dd:c0:6d:0f:38:cf:11: 78:1c:fd:7b:7d:2f:8c:db:6a:04:a4:6a:52:b4:f4:81:6e:14: b5:5b:a7:b7:1a:5a:71:b5:ea:09:a5:67:3d:7b:6f:f3:88:49: bc:a1:c8:b8:04:bb:58:21:bf:ea:bb:ac:2d:d1:81:13:2f:06: 78:e8:c0:65:39:42:4e:82:97:bd:2f:91:10:15:1e:d1:aa:dc: 94:c0:87:2d:c4:34:53:7b:6d:b4:46:68:fd:c2:2c:52:b3:ee: 84:f9:39:79:8a:8a:26:4c:66:44:93:f7:cc:17:e9:c5:58:b2: 89:66:65:96:b9:b4:d3:08:b4:7c:41:c4:14:fa:a2:d7:df:87: 77:a9:2e:c0:fe:2f:72:63:98:e6:fe:eb:e7:58:1b:27:bc:50: 44:9c:2a:76:d5:31:e7:9e:8b:44:d5:9f:04:e1:b0:45:0e:4d: 33:13:8a:29:11:40:0d:55:ea:a7:0f:b0:64:c4:a4:a8:16:fc: a2:f2:0d:c2:14:13:67:d4:96:95:62:fd:51:c2:b5:fe:7f:f5: 4c:de:40:f9:21:a7:65:99:14:77:d0:59:fe:14:5c:f9:86:dc: 5e:39:64:47:ff:98:e7:32:cf:f9:5f:c5:79:46:90:1b:02:8e: c7:0c:73:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN02U9bX8Xxocu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDRlZmEzMmEtNzIxOC00YTVkLTliZWQtYzc2YTkyYzI1MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA034mdKS9Dak0qtisftoR00NQuypxZi4IYhkw mcTOTbEeoT4YFeUl2+wu3zUGf7uZEm8aFQsWHmUoFaXD7lOOiOtT20m9YmOa3kUa LQoR3vPLyNRdakdBJ888CGrweEQmqbT4GtdQDSWRU+FHz5T3/8WdWiZ7Dqyi/Bry 0yNp1LnrRop8boiACJzhUcUcrpvPXzgsCoSK1AUQlhkTYOuhJwrarPVa16C90ZWr 0ExnGAnH5FWsSmjvQtNJNDyjCxXTL/5XPBZ/lXQ5CKfO7sY48V6Z7lrQWb9elO0F 088UPfYSWa7TztwdPGDR3EHUJxVYjGErJGNUSV1gYBQjWbILQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq4cyQxyg7Z/zn9ZeJcKpUey+N/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTYwODU5Y2ItNzNjYS0z MDA4LWJhYTItZTU0NzIxZjFmZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9zk2bSAWCwSLQc3cBtDzjPEXgc/Xt9L4zbagSkalK09IFuFLVbp7ca WnG16gmlZz17b/OISbyhyLgEu1ghv+q7rC3RgRMvBnjowGU5Qk6Cl70vkRAVHtGq 3JTAhy3ENFN7bbRGaP3CLFKz7oT5OXmKiiZMZkST98wX6cVYsolmZZa5tNMItHxB xBT6otffh3epLsD+L3JjmOb+6+dYGye8UEScKnbVMeeei0TVnwThsEUOTTMTiikR QA1V6qcPsGTEpKgW/KLyDcIUE2fUlpVi/VHCtf5/9UzeQPkhp2WZFHfQWf4UXPmG 3F45ZEf/mOcyz/lfxXlGkBsCjscMc4Y= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:54 2025 by rpki-client