$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa33096b-44f4-3f8a-b1b1-4f668b14af2e.roa File: aa33096b-44f4-3f8a-b1b1-4f668b14af2e.roa (raw, json) Hash identifier: e43TJEJQKZmiwym2G8LZC3neZRp13L6lx/j+6rYF5lk= Subject key identifier: 11:4D:0B:52:EA:44:CB:C9:74:93:EF:AF:19:A0:EC:92:D7:D8:37:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FA48F12AB90D909EA7E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa33096b-44f4-3f8a-b1b1-4f668b14af2e.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fa:48:f1:2a:b9:0d:90:9e:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=4b7eb4c2-b9f1-4cb7-90d8-eae21b681434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:83:c7:56:3e:63:b8:13:c7:92:b2:c7:57: a2:9e:ee:73:83:f1:7c:6c:52:10:27:5d:db:c9:1d: 9b:29:2f:81:b5:b6:58:8d:9d:f7:3c:87:74:32:0c: b9:53:40:d8:da:74:97:ef:9b:e5:6c:8a:cf:7f:34: 79:16:4e:18:11:08:21:58:8b:69:32:83:29:5f:5e: 58:e6:a0:c0:bc:06:c7:b1:ff:2b:c3:dd:64:67:7a: c0:e6:b0:c4:96:1d:fa:62:5b:a0:09:a1:a4:fc:cc: 7e:73:ea:bd:48:05:38:f5:c4:24:04:7d:f4:8a:69: 28:fe:fc:63:9f:2c:c6:af:54:be:9b:b9:c4:c4:cd: 27:bf:c1:17:11:56:b4:2e:f3:ee:b6:5b:8e:be:b5: 5b:c8:f9:ce:04:ff:f1:1e:76:c8:84:80:7a:f6:0d: 09:7d:3c:65:23:cf:a1:80:29:41:fc:5c:0a:f4:06: be:a6:05:fe:4e:37:c0:07:58:5e:6b:5c:54:10:28: 40:3f:9a:23:fd:88:55:78:e9:62:21:37:28:cb:b7: 1a:de:e1:1a:f6:4a:ce:fe:ea:0d:9a:1c:78:fd:54: 22:92:2d:4f:0f:d7:49:99:55:98:07:29:3d:74:9d: 81:fd:6f:39:36:a2:6a:fb:a0:a4:d5:9e:81:cb:04: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:0B:52:EA:44:CB:C9:74:93:EF:AF:19:A0:EC:92:D7:D8:37:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa33096b-44f4-3f8a-b1b1-4f668b14af2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b8:bc:d0:13:75:f3:9a:36:7a:44:d1:29:c1:4a:bd:b5:f9: d3:d4:c0:23:47:bd:f6:f7:83:34:2c:ef:fd:17:14:26:a9:12: 5b:00:b5:24:71:a4:ef:d8:ba:f8:d1:d0:7a:a3:f3:4a:81:9f: 21:aa:63:ca:1b:5d:96:77:74:63:73:c9:4e:7b:4a:37:84:41: 56:8c:7b:a2:e1:e0:d0:59:1d:f8:08:c7:88:6d:5e:78:d9:d5: be:31:46:ab:d6:ce:87:d0:16:6f:58:8b:64:f4:5c:c8:63:4a: 7b:0b:4d:2f:4e:10:3d:84:2e:03:bd:e7:ed:b3:fe:51:bc:a7: 84:47:d0:e6:64:41:d0:33:0a:cd:49:ad:66:7c:ce:05:61:52: fc:65:32:12:60:8c:3f:f3:f0:6d:7a:b1:fe:00:a5:09:1c:95: 3c:63:84:94:e3:f9:48:3a:13:82:51:7e:16:42:48:0d:4c:f8: 0c:f2:d8:6d:65:96:c9:4a:2c:e0:21:a3:40:e3:f8:8d:d5:20: 10:fa:a5:92:dc:9b:7a:21:78:8b:23:b2:f9:b0:8d:c0:b1:34: 87:06:5e:20:cb:95:00:46:85:ba:f2:a9:19:5b:7d:86:a0:fe: 29:9c:8b:b0:c1:0f:48:1e:de:94:d3:a4:5b:3f:60:81:4d:9b: 02:6f:10:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvpI8Sq5DZCep+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NGI3ZWI0YzItYjlmMS00Y2I3LTkwZDgtZWFlMjFiNjgxNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jKDx1Y+Y7gTx5Kyx1einu5zg/F8bFIQJ13b yR2bKS+BtbZYjZ33PId0Mgy5U0DY2nSX75vlbIrPfzR5Fk4YEQghWItpMoMpX15Y 5qDAvAbHsf8rw91kZ3rA5rDElh36YlugCaGk/Mx+c+q9SAU49cQkBH30imko/vxj nyzGr1S+m7nExM0nv8EXEVa0LvPutluOvrVbyPnOBP/xHnbIhIB69g0JfTxlI8+h gClB/FwK9Aa+pgX+TjfAB1hea1xUEChAP5oj/YhVeOliITcoy7ca3uEa9krO/uoN mhx4/VQiki1PD9dJmVWYByk9dJ2B/W85NqJq+6Ck1Z6BywTSUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFNC1LqRMvJdJPvrxmg7JLX2DepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWEzMzA5NmItNDRmNC0z ZjhhLWIxYjEtNGY2NjhiMTRhZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROAWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa4vNATdfOaNnpE0SnBSr21+dPUwCNHvfb3gzQs7/0XFCapElsAtSRx pO/YuvjR0Hqj80qBnyGqY8obXZZ3dGNzyU57SjeEQVaMe6Lh4NBZHfgIx4htXnjZ 1b4xRqvWzofQFm9Yi2T0XMhjSnsLTS9OED2ELgO95+2z/lG8p4RH0OZkQdAzCs1J rWZ8zgVhUvxlMhJgjD/z8G16sf4ApQkclTxjhJTj+Ug6E4JRfhZCSA1M+Azy2G1l lslKLOAho0Dj+I3VIBD6pZLcm3oheIsjsvmwjcCxNIcGXiDLlQBGhbryqRlbfYag /imci7DBD0ge3pTTpFs/YIFNmwJvEPg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:35 2025 by rpki-client