$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa File: a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa (raw, json) Hash identifier: NidTZrkbSWWdFSCPzWC5JY8Wh+rnIG2kiRknsDecICU= Subject key identifier: 24:A8:DB:C7:8B:8E:72:D2:97:89:32:55:11:56:1C:C2:0D:6B:D5:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4B1B5C9AE4C5AC8BCB70 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.227.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:4b:1b:5c:9a:e4:c5:ac:8b:cb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=fa64f927-4e41-47df-90ee-6a81e900433a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:ee:b0:14:22:d5:cb:75:67:96:86:d5:56: bb:fa:cc:cc:8e:0c:1c:da:d0:c3:b1:ef:56:55:6a: 79:5c:ff:bf:51:d0:0e:d7:d3:cb:0d:d1:e1:c8:20: 21:67:34:53:52:02:73:72:1e:ff:3c:5e:4e:1e:46: 53:df:98:80:d2:f2:3d:0a:86:a3:76:14:0d:96:12: bf:ac:8b:c9:3f:2a:84:1e:3a:18:85:21:28:70:17: b1:c0:f0:c9:2c:f2:aa:39:eb:aa:1d:b7:41:e1:e1: 73:51:cd:ce:63:58:51:43:0a:68:bf:54:37:b3:32: a8:61:d2:1e:f9:02:4e:a9:40:f7:59:40:29:15:65: b5:34:6c:b1:e3:eb:5d:3e:fb:4d:0c:be:8c:36:cd: b2:82:38:6d:2a:0a:83:d7:a3:53:32:47:79:79:6b: 00:23:ed:e3:4e:a6:b1:56:2d:bd:c4:18:12:b2:d7: 31:a5:8f:37:34:92:92:46:04:99:e9:a3:d1:55:95: 68:e6:ab:14:bd:b6:cc:50:dc:39:58:24:31:39:9c: 3d:73:61:0a:bf:cb:85:8d:e4:ec:62:86:09:f6:f9: b7:93:3b:90:88:8f:db:38:7f:9d:d5:54:12:f9:fb: 5e:ae:d1:3a:fb:6c:57:36:5a:40:1d:f4:0c:a7:38: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A8:DB:C7:8B:8E:72:D2:97:89:32:55:11:56:1C:C2:0D:6B:D5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a224dc5f-b9e4-3f53-a05b-88c0a0e8a429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a6:56:b9:55:a5:de:21:b7:7d:7f:dd:de:14:2e:64:f5:12: 71:30:4b:9f:b7:46:c3:19:9a:df:5a:ba:b5:56:a9:93:bf:4c: fc:5a:8b:01:dc:2f:7d:dd:eb:82:58:b8:76:5e:1c:9a:84:b4: 51:f3:38:9d:8a:69:7b:bb:53:a5:8e:c9:27:08:e4:fd:88:c6: 07:c7:47:b2:f3:4c:63:43:d2:d8:39:56:82:3f:a8:bc:35:06: de:79:3f:31:c3:83:90:a0:3e:dc:c7:8a:09:5c:d8:53:e3:6b: f8:d6:09:18:c5:a6:3b:6a:3a:22:0e:d6:23:13:60:fc:7d:5f: 3d:fe:83:11:96:ef:9d:c0:a9:32:37:9b:73:0d:66:38:28:cf: 8c:f9:11:5f:01:5a:47:f6:db:80:bf:5b:1a:73:bc:3d:d9:e3: af:3a:e4:79:63:e0:f0:38:00:4b:5c:52:d2:8e:25:ab:32:97: 59:fb:78:49:e5:e5:90:0f:c7:8c:25:ec:2b:61:95:7e:52:ff: 28:87:55:45:48:e0:86:1d:22:43:11:ea:ec:3c:a3:0d:42:97: c4:03:4c:20:29:fa:7a:69:f0:bd:61:05:67:c9:13:8d:c2:2d: d3:99:47:f7:0c:c7:c1:f8:97:32:1a:1a:3b:3f:41:31:d3:b1: a6:be:e2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEsbXJrkxayLy3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmE2NGY5MjctNGU0MS00N2RmLTkwZWUtNmE4MWU5MDA0MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h/usBQi1ct1Z5aG1Va7+szMjgwc2tDDse9W VWp5XP+/UdAO19PLDdHhyCAhZzRTUgJzch7/PF5OHkZT35iA0vI9CoajdhQNlhK/ rIvJPyqEHjoYhSEocBexwPDJLPKqOeuqHbdB4eFzUc3OY1hRQwpov1Q3szKoYdIe +QJOqUD3WUApFWW1NGyx4+tdPvtNDL6MNs2ygjhtKgqD16NTMkd5eWsAI+3jTqax Vi29xBgSstcxpY83NJKSRgSZ6aPRVZVo5qsUvbbMUNw5WCQxOZw9c2EKv8uFjeTs YoYJ9vm3kzuQiI/bOH+d1VQS+ftertE6+2xXNlpAHfQMpzhxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSo28eLjnLSl4kyVRFWHMINa9WhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTIyNGRjNWYtYjllNC0z ZjUzLWEwNWItODhjMGEwZThhNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqmVrlVpd4ht31/3d4ULmT1EnEwS5+3RsMZmt9aurVWqZO/TPxaiwHc L33d64JYuHZeHJqEtFHzOJ2KaXu7U6WOyScI5P2IxgfHR7LzTGND0tg5VoI/qLw1 Bt55PzHDg5CgPtzHiglc2FPja/jWCRjFpjtqOiIO1iMTYPx9Xz3+gxGW753AqTI3 m3MNZjgoz4z5EV8BWkf224C/WxpzvD3Z46865Hlj4PA4AEtcUtKOJasyl1n7eEnl 5ZAPx4wl7CthlX5S/yiHVUVI4IYdIkMR6uw8ow1Cl8QDTCAp+npp8L1hBWfJE43C LdOZR/cMx8H4lzIaGjs/QTHTsaa+4v0= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:44 2025 by rpki-client