$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3d02dc7-45e5-3019-9e43-6150d31fa0c7.roa File: b3d02dc7-45e5-3019-9e43-6150d31fa0c7.roa (raw, json) Hash identifier: czoKgkJ7J2cbPA/sdKq0nhgWAmmX8kD5vD5VDBW10Pg= Subject key identifier: 97:06:31:B8:01:40:6C:0A:71:18:F2:A0:B4:82:AE:21:73:D6:EC:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3746510B461D7BE1DD4580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3d02dc7-45e5-3019-9e43-6150d31fa0c7.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:46:51:0b:46:1d:7b:e1:dd:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=ce336b03-cbd2-4eb9-aba3-daa9e5fdc139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:75:b4:01:e3:3c:09:7b:9c:7b:50:cb:74:a3: 82:78:1d:26:f4:0f:28:7f:fd:7d:39:3f:f2:a9:84: 73:c5:c4:34:71:c3:83:1e:ee:0d:0b:2d:f9:fd:6c: 2b:7d:25:ca:f3:77:b2:9a:55:f4:2b:13:9a:f8:59: dc:95:b1:7a:ce:07:48:9e:14:23:7c:8d:d6:fd:d7: 27:cc:56:74:0a:9b:36:27:73:9f:43:6f:05:6c:b3: af:9f:b0:47:da:1c:18:07:ff:5a:0b:05:65:39:22: 11:e3:0b:1b:60:36:0e:91:fb:c1:4d:c2:5c:c2:67: 29:68:0f:f9:a1:98:d1:74:de:40:c6:1d:b5:da:ae: b3:52:f2:2d:25:44:9d:f2:31:64:22:f9:f5:a3:48: 7a:80:46:10:a0:59:45:a6:19:99:8d:12:9d:a7:d2: 6f:65:bc:c9:7c:54:14:76:35:90:4b:65:cc:73:88: 46:fc:7d:17:cb:28:a6:81:30:13:d5:42:3a:15:19: 96:ec:bb:91:90:a4:f6:ba:e9:07:bb:a0:d8:6f:8d: 05:2a:fa:73:88:9e:06:f7:72:ef:0e:22:03:7e:09: a1:32:96:d2:80:6f:2c:a1:18:21:8b:29:d1:80:67: 59:51:14:a6:40:94:f7:41:53:8e:d1:0b:fe:e3:79: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:06:31:B8:01:40:6C:0A:71:18:F2:A0:B4:82:AE:21:73:D6:EC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3d02dc7-45e5-3019-9e43-6150d31fa0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9b:8d:30:1a:15:40:02:68:2c:5c:e1:63:a6:c8:1c:bc:fc: e5:a6:bd:40:66:54:f9:44:31:de:05:02:60:83:c7:76:5b:31: 5c:44:8a:5a:5f:ef:40:5c:48:a7:81:84:f0:ef:88:80:fa:a2: 13:31:ea:f2:4a:d5:13:5f:67:d7:89:c3:f5:84:fc:11:b4:09: cf:96:a6:58:41:e1:38:8f:e4:5c:1b:6d:1b:87:0a:45:cf:2e: 0c:14:e7:0f:70:d8:7b:25:56:3b:c4:e7:87:3a:c6:09:5a:28: d7:03:07:a4:11:cc:8d:7e:83:c3:92:2c:fc:80:67:b7:be:95: 19:4b:67:fe:97:a7:41:e3:ae:23:77:cd:d7:8b:73:b4:25:f5: 7f:d8:3e:c4:4f:b8:00:3d:78:53:14:5d:56:02:66:3f:1a:53: 37:67:a2:4a:86:32:ea:8d:a0:7f:1c:18:b0:12:6b:ca:04:49: a4:e4:cb:18:60:52:87:32:90:96:69:90:bf:23:c8:38:dc:3d: 1c:53:9e:f8:29:41:5a:03:34:b1:5c:3a:87:e7:f0:ec:20:c1: 33:1f:6a:15:a3:c0:5b:cb:36:dd:44:8f:f6:21:9f:84:8f:8b: 6b:e8:3c:84:56:9d:94:ba:78:86:79:e3:2b:59:f4:ea:36:d4: 42:fd:b6:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0ZRC0Yde+HdRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2UzMzZiMDMtY2JkMi00ZWI5LWFiYTMtZGFhOWU1ZmRjMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnW0AeM8CXuce1DLdKOCeB0m9A8of/19OT/y qYRzxcQ0ccODHu4NCy35/WwrfSXK83eymlX0KxOa+FnclbF6zgdInhQjfI3W/dcn zFZ0Cps2J3OfQ28FbLOvn7BH2hwYB/9aCwVlOSIR4wsbYDYOkfvBTcJcwmcpaA/5 oZjRdN5Axh212q6zUvItJUSd8jFkIvn1o0h6gEYQoFlFphmZjRKdp9JvZbzJfFQU djWQS2XMc4hG/H0XyyimgTAT1UI6FRmW7LuRkKT2uukHu6DYb40FKvpziJ4G93Lv DiIDfgmhMpbSgG8soRghiynRgGdZURSmQJT3QVOO0Qv+43nCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcGMbgBQGwKcRjyoLSCriFz1uwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjNkMDJkYzctNDVlNS0z MDE5LTllNDMtNjE1MGQzMWZhMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGybjTAaFUACaCxc4WOmyBy8/OWmvUBmVPlEMd4FAmCDx3ZbMVxEilpf 70BcSKeBhPDviID6ohMx6vJK1RNfZ9eJw/WE/BG0Cc+WplhB4TiP5FwbbRuHCkXP LgwU5w9w2HslVjvE54c6xglaKNcDB6QRzI1+g8OSLPyAZ7e+lRlLZ/6Xp0HjriN3 zdeLc7Ql9X/YPsRPuAA9eFMUXVYCZj8aUzdnokqGMuqNoH8cGLASa8oESaTkyxhg UocykJZpkL8jyDjcPRxTnvgpQVoDNLFcOofn8OwgwTMfahWjwFvLNt1Ej/Yhn4SP i2voPIRWnZS6eIZ54ytZ9Oo21EL9tgI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:10 2025 by rpki-client