$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbf842c6-aeee-3932-8c93-7f8a99a035ef.roa File: bbf842c6-aeee-3932-8c93-7f8a99a035ef.roa (raw, json) Hash identifier: 99zi+Ezd6fQmnmAVXE3Mww5lROePPgAwKPOMkcmF0WE= Subject key identifier: 3E:F5:FC:F2:EB:13:9B:5F:0B:06:AE:DB:CE:13:64:5C:99:92:BE:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F6637CCC74DAC32BC800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbf842c6-aeee-3932-8c93-7f8a99a035ef.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f6:63:7c:cc:74:da:c3:2b:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=942dd2fa-58fa-413d-a762-dd90b73a6e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:05:88:ae:62:3c:7d:1d:0d:50:7c:49:ab: cd:a2:f6:4c:45:e3:fb:39:5b:4d:3f:b5:25:b0:db: 9a:92:27:49:07:a1:01:f9:86:79:05:ba:4f:55:9f: 88:f9:fc:b5:2e:ea:f0:e4:ea:c7:d1:98:93:5f:fb: 72:e6:5b:ea:50:91:df:a1:4d:2e:ac:42:5c:c6:92: 67:26:af:e8:5b:d8:74:df:77:69:08:d8:fc:4a:d0: a6:93:69:a5:b5:50:4d:24:a4:a1:08:f1:c4:81:fc: fc:2f:b1:be:71:8e:e6:37:e2:18:32:30:a2:e3:d9: 70:88:60:f4:f3:93:67:5d:44:2a:d3:70:a7:15:e8: ec:70:a9:a0:5b:b5:8f:9e:96:ee:59:69:cc:6a:73: 44:0f:6a:7a:e6:21:d1:d8:22:14:d3:b7:58:86:df: 73:31:e5:94:25:12:43:ae:80:3f:1d:e6:ed:2b:41: b0:59:cd:da:41:58:f8:c0:30:02:1d:16:8b:6b:8d: c4:46:aa:a6:9b:69:27:1d:85:bf:c2:5f:5c:db:e2: ed:69:d6:df:49:25:c3:91:78:dd:7a:e0:b7:9a:03: 9c:af:f4:3a:38:0c:98:8f:14:5a:dd:5a:a8:e6:22: 65:97:c5:2d:36:b3:1f:31:5b:7e:7f:c3:5e:61:36: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F5:FC:F2:EB:13:9B:5F:0B:06:AE:DB:CE:13:64:5C:99:92:BE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbf842c6-aeee-3932-8c93-7f8a99a035ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:71:fa:58:95:62:4a:a9:b2:0c:d5:a3:3a:5b:ba:d4:33:e3: e4:a0:97:7c:a9:d4:04:6f:36:72:57:49:f0:c0:75:86:48:e4: 32:3c:af:b5:2d:bb:e1:2b:4c:57:54:ec:5e:98:d3:92:3e:48: 37:7e:0e:00:a5:00:6c:d4:9e:3c:5f:10:64:0a:d2:2b:a4:e8: a8:e7:ac:78:28:43:59:25:4d:83:32:28:ca:ff:ec:a2:77:39: db:6d:a6:4b:5e:ba:82:19:c7:ef:5f:cd:e5:e4:52:bd:5f:86: 36:06:b7:bc:18:06:28:ec:30:06:c8:27:d3:e1:64:dc:e1:88: ed:a9:02:d4:19:25:e2:b3:3e:ea:8a:6e:dc:47:84:49:82:a1: 5e:8c:69:b5:5f:ef:76:72:93:a0:a0:e7:58:0e:38:b1:55:89: 16:bb:bb:85:b6:f2:b7:b5:c1:80:d8:58:82:98:9b:77:c6:c9: 73:98:23:fc:de:7d:fe:85:86:70:26:d8:d8:21:52:34:7c:1d: b0:b3:7b:dc:fa:2a:1c:8f:c5:ab:4d:4c:9b:39:e4:a9:96:03: 57:50:b6:11:d0:1f:2a:f8:16:8c:4e:f4:5c:21:14:47:ff:44: 23:1e:0a:bb:45:11:71:bc:c0:95:af:92:02:d2:87:d0:db:f1: c6:8c:1a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvZjfMx02sMryAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTQyZGQyZmEtNThmYS00MTNkLWE3NjItZGQ5MGI3M2E2ZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBkFiK5iPH0dDVB8SavNovZMReP7OVtNP7Ul sNuakidJB6EB+YZ5BbpPVZ+I+fy1Lurw5OrH0ZiTX/ty5lvqUJHfoU0urEJcxpJn Jq/oW9h033dpCNj8StCmk2mltVBNJKShCPHEgfz8L7G+cY7mN+IYMjCi49lwiGD0 85NnXUQq03CnFejscKmgW7WPnpbuWWnManNED2p65iHR2CIU07dYht9zMeWUJRJD roA/HebtK0GwWc3aQVj4wDACHRaLa43ERqqmm2knHYW/wl9c2+LtadbfSSXDkXjd euC3mgOcr/Q6OAyYjxRa3Vqo5iJll8UtNrMfMVt+f8NeYTYrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD71/PLrE5tfCwau284TZFyZkr7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmJmODQyYzYtYWVlZS0z OTMyLThjOTMtN2Y4YTk5YTAzNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFx+liVYkqpsgzVozpbutQz4+Sgl3yp1ARvNnJXSfDAdYZI5DI8r7Ut u+ErTFdU7F6Y05I+SDd+DgClAGzUnjxfEGQK0iuk6KjnrHgoQ1klTYMyKMr/7KJ3 OdttpkteuoIZx+9fzeXkUr1fhjYGt7wYBijsMAbIJ9PhZNzhiO2pAtQZJeKzPuqK btxHhEmCoV6MabVf73Zyk6Cg51gOOLFViRa7u4W28re1wYDYWIKYm3fGyXOYI/ze ff6FhnAm2NghUjR8HbCze9z6KhyPxatNTJs55KmWA1dQthHQHyr4FoxO9FwhFEf/ RCMeCrtFEXG8wJWvkgLSh9Db8caMGr4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:54 2025 by rpki-client