$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3c73870-89f9-3ca0-90a1-10c4754a175c.roa File: a3c73870-89f9-3ca0-90a1-10c4754a175c.roa (raw, json) Hash identifier: BK0kTIyKYZBKg17vMZI/LaIyVlzYZUzUdBBTsoImZ+w= Subject key identifier: ED:FA:0B:2C:6C:41:4C:1F:36:0F:5B:20:6A:04:02:C8:F5:D9:32:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374FCDA19F9AE6DDC3AF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3c73870-89f9-3ca0-90a1-10c4754a175c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.99.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4f:cd:a1:9f:9a:e6:dd:c3:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=349f74e7-0950-4822-9949-31baee83ba1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:2e:b5:72:2f:e6:b0:d8:4d:64:cf:3d:e6: dd:75:0b:78:ec:ad:18:97:9a:2e:68:4d:b4:b2:bb: a8:4f:78:24:51:7f:fb:93:ec:ef:c4:55:59:7b:aa: f4:93:31:a5:51:49:52:7f:7f:91:1b:4e:9a:5f:16: fb:db:fc:b4:ea:10:8d:6b:91:a5:47:8f:be:a4:95: 2e:32:0b:ba:2c:af:9c:3c:90:7d:35:69:a7:df:c9: 88:c1:fe:f3:6b:58:ad:84:c1:92:bd:fd:45:89:14: da:4d:b4:b7:42:a9:e4:99:e7:95:e9:4c:7f:38:ac: f6:a7:97:2a:81:07:46:1f:b5:ef:86:02:37:7e:79: c1:5d:c5:e7:52:31:7e:d8:4f:a9:f8:34:91:e3:f2: e2:de:a0:4e:3f:42:9a:21:e7:bb:81:05:93:7f:c6: 43:61:ad:ae:9f:c2:d0:82:2e:f9:03:b8:36:3c:cf: 8e:37:ac:36:18:b6:37:e9:d1:6e:3b:d1:b2:e9:db: fe:21:f1:35:e0:20:2a:04:bb:24:51:7a:f0:7f:2c: 00:f3:9e:f5:7d:da:62:36:58:69:65:ec:e9:fc:ed: ea:ac:56:b1:be:81:19:6c:76:0d:71:78:9b:f8:e7: 80:07:9b:b9:21:ae:3a:fa:f8:18:9a:6f:64:d2:6d: fc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FA:0B:2C:6C:41:4C:1F:36:0F:5B:20:6A:04:02:C8:F5:D9:32:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3c73870-89f9-3ca0-90a1-10c4754a175c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:64:9e:14:75:5b:71:a8:8a:9b:43:7e:c4:d4:ad:ed:2a:bb: b2:76:20:c1:37:72:36:6a:e6:91:0c:ef:8a:b4:5a:3a:e2:fe: 4b:11:94:fb:3e:26:0d:23:3d:4c:31:13:5f:ae:83:4b:ca:ce: d7:21:02:74:f8:83:b1:9b:a0:d7:96:5e:3d:38:c0:1a:9c:18: f8:18:8b:6c:76:70:16:03:ea:e6:e4:6e:18:24:2c:c2:30:e9: a4:3f:f3:09:39:60:ee:a9:60:79:51:e2:50:48:d1:be:b8:fb: 01:a4:ae:48:03:6d:5c:59:8f:67:44:ff:4c:ea:ec:86:4e:d2: 46:b7:5a:8a:fa:b9:2a:f5:c2:95:93:35:19:09:97:57:2a:fa: 0c:14:5a:00:4d:24:88:6c:0e:56:43:9d:aa:42:50:8e:cf:85: ac:81:5b:12:76:5f:0a:03:ea:72:fa:82:df:35:2b:c7:5d:42: 6c:84:a4:68:8d:21:6c:6e:55:f5:39:1c:ac:f7:93:51:87:5a: 19:b2:f5:5f:d8:e8:d6:4e:67:1b:c7:3e:21:cc:20:0e:58:da: 22:9a:6d:9c:82:0d:59:44:7e:c1:eb:2c:3a:10:fb:38:d9:ad: c9:0c:d9:88:d5:11:a6:b8:c1:f1:a0:15:65:a5:be:d7:15:a2: e4:56:d9:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0/NoZ+a5t3Dr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzQ5Zjc0ZTctMDk1MC00ODIyLTk5NDktMzFiYWVlODNiYTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtAutXIv5rDYTWTPPebddQt47K0Yl5ouaE20 sruoT3gkUX/7k+zvxFVZe6r0kzGlUUlSf3+RG06aXxb72/y06hCNa5GlR4++pJUu Mgu6LK+cPJB9NWmn38mIwf7za1ithMGSvf1FiRTaTbS3QqnkmeeV6Ux/OKz2p5cq gQdGH7XvhgI3fnnBXcXnUjF+2E+p+DSR4/Li3qBOP0KaIee7gQWTf8ZDYa2un8LQ gi75A7g2PM+ON6w2GLY36dFuO9Gy6dv+IfE14CAqBLskUXrwfywA8571fdpiNlhp Zezp/O3qrFaxvoEZbHYNcXib+OeAB5u5Ia46+vgYmm9k0m38UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO36CyxsQUwfNg9bIGoEAsj12TLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNjNzM4NzAtODlmOS0z Y2EwLTkwYTEtMTBjNDc1NGExNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9knhR1W3GoiptDfsTUre0qu7J2IME3cjZq5pEM74q0Wjri/ksRlPs+ Jg0jPUwxE1+ug0vKztchAnT4g7GboNeWXj04wBqcGPgYi2x2cBYD6ubkbhgkLMIw 6aQ/8wk5YO6pYHlR4lBI0b64+wGkrkgDbVxZj2dE/0zq7IZO0ka3Wor6uSr1wpWT NRkJl1cq+gwUWgBNJIhsDlZDnapCUI7PhayBWxJ2XwoD6nL6gt81K8ddQmyEpGiN IWxuVfU5HKz3k1GHWhmy9V/Y6NZOZxvHPiHMIA5Y2iKabZyCDVlEfsHrLDoQ+zjZ rckM2YjVEaa4wfGgFWWlvtcVouRW2ZQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:39 2025 by rpki-client