$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d8dba86-7d0e-3b53-900d-32c5c55d9e87.roa File: 9d8dba86-7d0e-3b53-900d-32c5c55d9e87.roa (raw, json) Hash identifier: Z3NSlKoTw4HsG4zAzV6cEbxfHUeKX02a4AATPDBfKeM= Subject key identifier: AD:47:64:A6:82:96:52:7D:F1:AC:D0:08:F3:48:70:EC:93:60:E7:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F3DA0C0D898F58AA9180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d8dba86-7d0e-3b53-900d-32c5c55d9e87.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f3:da:0c:0d:89:8f:58:aa:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=20f8fd1b-58b9-479c-9102-cc50ba087b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:12:c9:c0:db:90:8b:ce:91:9f:22:0b:d4:b6: c1:c1:75:8a:a9:ce:dc:73:53:02:38:0c:18:dc:cd: a3:02:e7:88:6e:f6:35:c2:97:b3:cd:42:21:c3:07: c4:45:6a:d2:d5:58:e2:fd:b3:54:c5:ad:c2:33:4f: 7e:80:da:36:c9:65:16:15:0e:31:f1:80:c1:cc:66: 9d:9e:fc:b4:c4:7a:38:2f:57:60:23:a9:e5:91:2e: 38:a5:e7:f7:55:39:d5:08:51:96:df:d4:89:ef:ed: fd:f8:9f:9c:a3:a2:93:82:39:74:cb:6a:5b:be:e7: ed:46:15:66:69:f7:e0:64:eb:73:dc:4d:17:a2:b0: aa:05:46:14:3c:27:67:eb:5e:cf:c5:f9:b6:92:4a: e8:f4:ec:77:b1:ea:b9:d3:84:7c:60:7a:3f:be:45: 53:4e:9c:ba:73:da:89:17:3d:5a:e8:e3:9a:6c:51: 23:dc:d8:3d:76:b7:dc:67:f3:08:91:ec:00:c5:fb: 8d:21:c8:4d:13:e7:4d:45:2d:d9:cb:d7:ec:94:f2: 45:45:b9:30:aa:76:de:d1:91:91:75:1d:a2:f9:a1: 04:ce:34:a1:97:d5:16:0f:54:9d:bc:9b:fc:59:a9: 39:82:77:4a:36:18:b0:77:a7:a4:73:dc:59:6a:e6: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:47:64:A6:82:96:52:7D:F1:AC:D0:08:F3:48:70:EC:93:60:E7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d8dba86-7d0e-3b53-900d-32c5c55d9e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e4:2e:b6:a7:5e:31:aa:6c:b7:49:30:56:91:74:25:3a:b9: 25:80:4a:62:58:4e:45:0a:e9:97:b8:4e:0b:ff:47:b1:cc:d7: a0:70:d8:5c:a4:60:49:93:ee:07:62:ff:5d:06:57:e5:f4:5c: e8:58:dd:75:84:21:ea:16:d5:36:fd:43:1b:8e:92:11:d5:d3: c9:d9:a4:8b:dc:93:c3:b0:93:98:7f:de:06:c4:fd:0b:c6:e5: 56:04:ba:f0:a8:4a:a2:d9:ca:d1:77:9f:0f:7f:f4:13:e6:84: b7:f0:f1:49:f3:87:81:ff:48:5e:ac:8a:3e:ac:c1:56:ae:0e: d1:52:bb:1b:63:b1:3a:7f:36:a5:d6:2a:bc:5e:ef:b2:fe:6d: 01:26:b1:f9:ee:af:1c:d2:fa:7a:e5:bb:56:c0:c9:f5:30:39: cd:8c:b2:ad:2b:05:a9:f5:d3:19:5b:b5:10:a4:88:3d:b0:a2: 12:d0:7a:f5:3a:b0:08:1c:e7:c5:40:e8:0c:77:c4:60:a8:44: 96:79:9c:44:02:e1:f2:17:d7:16:c1:5b:43:52:3a:fc:c3:49: 42:15:10:ce:15:77:d0:23:7b:48:20:ae:e6:0f:c2:f3:42:01: 62:48:ed:cf:89:a5:7c:88:00:b5:ef:fb:8d:19:1a:25:89:db: d5:a5:8f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvPaDA2Jj1iqkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjBmOGZkMWItNThiOS00NzljLTkxMDItY2M1MGJhMDg3YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixLJwNuQi86RnyIL1LbBwXWKqc7cc1MCOAwY 3M2jAueIbvY1wpezzUIhwwfERWrS1Vji/bNUxa3CM09+gNo2yWUWFQ4x8YDBzGad nvy0xHo4L1dgI6nlkS44pef3VTnVCFGW39SJ7+39+J+co6KTgjl0y2pbvuftRhVm affgZOtz3E0XorCqBUYUPCdn617Pxfm2kkro9Ox3seq504R8YHo/vkVTTpy6c9qJ Fz1a6OOabFEj3Ng9drfcZ/MIkewAxfuNIchNE+dNRS3Zy9fslPJFRbkwqnbe0ZGR dR2i+aEEzjShl9UWD1SdvJv8Wak5gndKNhiwd6ekc9xZauZ+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1HZKaCllJ98azQCPNIcOyTYOcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWQ4ZGJhODYtN2QwZS0z YjUzLTkwMGQtMzJjNWM1NWQ5ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbkLranXjGqbLdJMFaRdCU6uSWASmJYTkUK6Ze4Tgv/R7HM16Bw2Fyk YEmT7gdi/10GV+X0XOhY3XWEIeoW1Tb9QxuOkhHV08nZpIvck8Owk5h/3gbE/QvG 5VYEuvCoSqLZytF3nw9/9BPmhLfw8Unzh4H/SF6sij6swVauDtFSuxtjsTp/NqXW Krxe77L+bQEmsfnurxzS+nrlu1bAyfUwOc2Msq0rBan10xlbtRCkiD2wohLQevU6 sAgc58VA6Ax3xGCoRJZ5nEQC4fIX1xbBW0NSOvzDSUIVEM4Vd9Aje0ggruYPwvNC AWJI7c+JpXyIALXv+40ZGiWJ29Wlj1I= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:20 2025 by rpki-client