$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b72444ed-0378-3541-b410-76f51430945a.roa File: b72444ed-0378-3541-b410-76f51430945a.roa (raw, json) Hash identifier: eWw1+Gh7FaNuX84m64ztZ9IzgsAGWvh4OompP4Iz79Y= Subject key identifier: 94:DF:42:73:1D:5D:D5:E2:98:82:E5:8D:00:74:FC:7B:02:8A:A5:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3743260A0E9BD0F886E4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b72444ed-0378-3541-b410-76f51430945a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:43:26:0a:0e:9b:d0:f8:86:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=fcfeba89-33af-4114-a580-8a275e38e16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:1a:48:c0:e4:6e:03:fe:52:fd:5b:21:8e: 28:99:d7:03:20:b1:92:b8:98:b4:4c:a6:87:bf:5e: 50:d4:77:e9:ab:29:2b:31:c0:d1:b1:20:02:62:65: 5a:21:8d:4d:47:54:93:b7:69:ab:29:af:d6:4b:7f: 63:cd:68:24:25:90:82:30:f4:fc:58:60:fe:f6:3d: 59:b0:03:6e:0e:6f:73:3c:3f:aa:d0:ab:5c:66:dc: cd:f5:a4:71:61:2a:6a:26:a6:0a:58:e4:37:37:c5: 91:95:8c:6b:4b:1a:f0:17:df:ba:5a:c1:af:41:fc: 9f:14:aa:a7:95:5a:1a:c6:ab:ea:a6:dd:b7:54:c4: 39:7d:94:03:82:23:2b:c0:b5:be:17:41:5c:80:5a: 2f:a3:50:99:8f:af:c1:06:11:67:bd:91:d3:49:99: 39:87:28:ae:44:0c:ac:34:3b:62:68:b3:31:4e:2d: 11:fb:2c:15:80:67:e1:54:cb:14:14:81:53:a2:0b: 89:ff:38:e0:97:78:4c:fe:59:4e:fc:19:d5:82:c4: 04:7a:69:ed:bd:a2:79:4b:a2:f4:ce:9e:63:1e:ab: 1c:6a:12:96:c7:74:5f:74:9b:e9:75:cb:5f:1e:a9: d3:61:7e:75:96:bd:05:d9:4f:c5:04:b6:03:bd:6e: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DF:42:73:1D:5D:D5:E2:98:82:E5:8D:00:74:FC:7B:02:8A:A5:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b72444ed-0378-3541-b410-76f51430945a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:bc:13:1a:ac:d3:e5:23:9e:95:56:92:5a:4d:e6:86:bb:6e: fa:1b:ea:de:74:e5:77:87:ed:80:f2:de:f6:c0:0e:44:3d:69: 42:32:d7:ca:9d:b7:dd:a5:b0:ad:d6:8b:e7:5b:c8:1a:97:92: a6:cb:36:4a:92:6a:ea:fc:1e:f6:f4:0f:b0:ec:1f:14:0a:8e: 6b:a1:f6:be:36:f2:d7:bc:5e:a6:ef:03:7f:8d:41:56:52:f1: b1:19:d6:56:37:19:a5:29:d4:98:41:40:c5:f4:b3:af:9b:ab: af:12:45:6e:71:c9:6f:30:72:c5:96:55:2d:8e:e6:0d:17:2b: 00:a8:32:a5:2d:f4:05:3a:67:cf:ed:b2:64:2c:31:05:e2:63: 15:d1:dc:82:f0:a8:fe:97:65:52:2b:70:0b:f5:25:79:6d:68: ae:5e:24:37:97:5c:7e:0d:1e:80:cb:81:33:5d:bb:15:2b:55: 9e:69:a1:0a:38:c4:5e:e8:f8:d2:75:8b:38:9d:d1:04:9b:b4: 29:09:ec:83:78:35:e6:76:16:67:a2:5d:6d:e1:08:93:49:ae: 0b:83:ae:75:91:af:76:3a:52:18:c2:f0:65:23:3b:95:3a:c8: c5:c2:12:92:b7:be:cd:37:fc:bb:da:a2:8a:f2:8f:53:b2:61: 7c:9d:28:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0MmCg6b0PiG5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmNmZWJhODktMzNhZi00MTE0LWE1ODAtOGEyNzVlMzhlMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/IaSMDkbgP+Uv1bIY4omdcDILGSuJi0TKaH v15Q1HfpqykrMcDRsSACYmVaIY1NR1STt2mrKa/WS39jzWgkJZCCMPT8WGD+9j1Z sANuDm9zPD+q0KtcZtzN9aRxYSpqJqYKWOQ3N8WRlYxrSxrwF9+6WsGvQfyfFKqn lVoaxqvqpt23VMQ5fZQDgiMrwLW+F0FcgFovo1CZj6/BBhFnvZHTSZk5hyiuRAys NDtiaLMxTi0R+ywVgGfhVMsUFIFToguJ/zjgl3hM/llO/BnVgsQEemntvaJ5S6L0 zp5jHqscahKWx3RfdJvpdctfHqnTYX51lr0F2U/FBLYDvW5RMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTfQnMdXdXimILljQB0/HsCiqWcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjcyNDQ0ZWQtMDM3OC0z NTQxLWI0MTAtNzZmNTE0MzA5NDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC8Exqs0+UjnpVWklpN5oa7bvob6t505XeH7YDy3vbADkQ9aUIy18qd t92lsK3Wi+dbyBqXkqbLNkqSaur8Hvb0D7DsHxQKjmuh9r428te8XqbvA3+NQVZS 8bEZ1lY3GaUp1JhBQMX0s6+bq68SRW5xyW8wcsWWVS2O5g0XKwCoMqUt9AU6Z8/t smQsMQXiYxXR3ILwqP6XZVIrcAv1JXltaK5eJDeXXH4NHoDLgTNduxUrVZ5poQo4 xF7o+NJ1izid0QSbtCkJ7IN4NeZ2FmeiXW3hCJNJrguDrnWRr3Y6UhjC8GUjO5U6 yMXCEpK3vs03/Lvaooryj1OyYXydKBQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:07 2025 by rpki-client