$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4dc9f63-cf05-3583-b884-79110ec61bcf.roa File: a4dc9f63-cf05-3583-b884-79110ec61bcf.roa (raw, json) Hash identifier: TijPm51SNX7/V9VuJc147klPf/8MTK5SFW+am1wx5uM= Subject key identifier: E5:4E:31:9E:D7:DB:6D:C4:98:BA:1F:D6:D4:1E:8C:43:D2:A7:58:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066EA2E43F99C661F18DAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4dc9f63-cf05-3583-b884-79110ec61bcf.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.96.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ea:2e:43:f9:9c:66:1f:18:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=0b2cbe8d-d920-4e63-a691-2290785822bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:fa:a2:05:d3:67:71:b1:d2:a7:82:d0:fe: cf:45:d3:76:63:ff:e2:e4:ae:f1:ab:04:74:76:5f: 96:b9:94:50:f9:1d:ad:78:97:69:5b:9c:cf:3c:1b: d3:60:d5:36:fa:c5:e3:c7:81:df:a7:f1:c2:dd:7c: 1c:97:cd:15:3c:f7:71:1a:d0:8c:32:cf:52:fe:27: 5c:98:3b:7e:a7:d4:76:3c:12:88:9b:a6:0b:5d:73: ee:7a:8f:e0:66:f7:2a:bc:4e:f0:50:72:75:53:a0: 00:c1:ff:3b:82:12:bb:cc:23:f0:72:52:10:f0:e2: 68:fa:68:c3:80:1d:ce:50:3e:b0:61:aa:87:9e:2a: bb:43:e6:1c:35:31:37:11:dc:22:13:09:23:19:4c: 58:4e:34:6a:57:04:46:29:33:ed:68:0c:24:fd:df: a9:5c:06:db:86:8c:bc:20:29:71:cb:63:c2:97:86: fd:55:c9:be:f6:9b:44:cd:e2:1d:90:14:e7:58:3a: 52:93:ab:07:e0:dd:41:f0:72:be:6f:b5:23:e8:60: 22:b4:32:05:08:27:15:8d:62:9e:8b:c6:58:26:d0: c4:5e:96:c4:5b:1e:11:2d:bd:10:80:ae:e7:ab:4a: cf:7b:1e:f0:1c:60:c2:a9:1c:cd:de:49:f6:a6:90: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:31:9E:D7:DB:6D:C4:98:BA:1F:D6:D4:1E:8C:43:D2:A7:58:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4dc9f63-cf05-3583-b884-79110ec61bcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:11:6f:6f:43:c3:18:0c:50:f7:a4:28:fa:c5:26:fa:22:4e: f5:f7:d2:84:b8:6d:8c:cb:b4:3c:73:c3:4e:fd:bd:5f:a9:c2: da:ee:f4:66:9c:43:96:7b:aa:01:79:3c:3e:d8:4b:90:26:9b: 4d:0a:8e:dd:ed:6d:dd:ed:05:84:10:99:28:46:7b:ec:2e:f7: 2e:b1:73:35:d7:4d:d5:d0:80:5a:ae:2b:9e:79:50:b3:ad:0a: e7:07:12:ce:be:b2:d8:2f:cc:eb:11:e7:84:e6:31:c7:e9:bc: 69:d0:a7:64:84:8a:5c:a2:1d:7d:b8:17:12:61:7a:d9:08:5a: fb:73:d8:5e:55:ee:bc:aa:0d:73:36:de:f7:d1:70:6b:fb:23: 71:21:54:a9:85:e9:62:75:5b:e0:d7:44:51:a0:49:75:26:4f: 8e:dd:d0:d1:26:0d:0d:2b:7a:25:83:f6:fb:af:71:1e:e7:8e: 20:34:6e:65:f3:16:25:31:d6:98:e2:3f:df:60:a1:5d:4f:4b: 52:2f:ef:80:53:8c:6a:41:71:8a:63:e1:99:72:fe:38:50:a1: 4c:7c:ff:40:13:96:ff:c1:36:63:54:61:d4:d5:d0:5b:4e:b7: 87:01:bd:d5:cd:41:d7:4b:0e:e3:e6:6d:0d:47:32:68:ed:12: d8:2c:83:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuouQ/mcZh8Y2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGIyY2JlOGQtZDkyMC00ZTYzLWE2OTEtMjI5MDc4NTgyMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9H6ogXTZ3Gx0qeC0P7PRdN2Y//i5K7xqwR0 dl+WuZRQ+R2teJdpW5zPPBvTYNU2+sXjx4Hfp/HC3Xwcl80VPPdxGtCMMs9S/idc mDt+p9R2PBKIm6YLXXPueo/gZvcqvE7wUHJ1U6AAwf87ghK7zCPwclIQ8OJo+mjD gB3OUD6wYaqHniq7Q+YcNTE3EdwiEwkjGUxYTjRqVwRGKTPtaAwk/d+pXAbbhoy8 IClxy2PCl4b9Vcm+9ptEzeIdkBTnWDpSk6sH4N1B8HK+b7Uj6GAitDIFCCcVjWKe i8ZYJtDEXpbEWx4RLb0QgK7nq0rPex7wHGDCqRzN3kn2ppAhEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVOMZ7X223EmLof1tQejEPSp1jyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTRkYzlmNjMtY2YwNS0z NTgzLWI4ODQtNzkxMTBlYzYxYmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8Rb29DwxgMUPekKPrFJvoiTvX30oS4bYzLtDxzw079vV+pwtru9Gac Q5Z7qgF5PD7YS5Amm00Kjt3tbd3tBYQQmShGe+wu9y6xczXXTdXQgFquK555ULOt CucHEs6+stgvzOsR54TmMcfpvGnQp2SEilyiHX24FxJhetkIWvtz2F5V7ryqDXM2 3vfRcGv7I3EhVKmF6WJ1W+DXRFGgSXUmT47d0NEmDQ0reiWD9vuvcR7njiA0bmXz FiUx1pjiP99goV1PS1Iv74BTjGpBcYpj4Zly/jhQoUx8/0ATlv/BNmNUYdTV0FtO t4cBvdXNQddLDuPmbQ1HMmjtEtgsgxs= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:20 2025 by rpki-client