$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0cf01d1-90a5-3d78-891a-293b463682fb.roa File: c0cf01d1-90a5-3d78-891a-293b463682fb.roa (raw, json) Hash identifier: xqPEyOZw8FwpYMIoD8MOJVl+LR+0u5uPUkJMSgVohmw= Subject key identifier: 95:E9:A7:C1:28:32:E5:CA:CB:EC:C8:2E:6E:7A:41:41:BF:F5:F1:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C37317CE258209E672E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0cf01d1-90a5-3d78-891a-293b463682fb.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:37:31:7c:e2:58:20:9e:67:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=b65c9fac-4659-4b73-8148-3136a072ff97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:05:87:30:d4:45:2d:73:52:3c:8a:6d:98: 3b:ed:2c:0e:ee:24:16:30:03:21:69:c2:c3:87:38: 4b:8b:b3:94:d7:87:a7:4b:41:a5:f3:72:e4:76:af: f0:17:64:1b:7b:17:79:17:66:00:4c:01:d3:d7:f8: 3a:1b:09:ca:b3:12:91:e8:c6:f1:82:ce:b8:80:94: 08:72:66:ef:fc:63:a6:c3:2e:32:57:a2:3f:60:2e: 3b:96:e3:23:8d:40:ab:9d:fc:7b:79:2e:06:85:bd: 1b:54:e0:aa:23:a0:aa:50:94:dd:bc:ee:e9:e5:19: c7:60:73:9c:65:08:5e:b6:65:ea:3f:6f:ae:f6:2f: b9:3d:1e:e8:f1:be:5e:8a:5d:24:7e:a4:ba:c3:c6: ff:4b:86:33:0c:8e:51:e0:1a:89:95:1f:5a:62:94: 3c:a1:0c:28:08:8e:17:7d:ac:39:66:e0:1a:42:04: 1d:68:41:75:40:59:63:bb:d2:a6:42:ed:14:a3:9f: 09:63:33:2d:1b:7c:47:72:80:14:26:d1:c5:64:9a: b1:ee:53:c6:e5:a0:b9:5d:a1:f7:e3:c3:dc:d3:69: 7e:8e:48:04:0a:18:09:aa:f7:e0:e5:2a:f9:9a:ff: 0c:fb:9b:13:b2:0f:b0:5e:53:bc:53:b3:f0:56:e6: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E9:A7:C1:28:32:E5:CA:CB:EC:C8:2E:6E:7A:41:41:BF:F5:F1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0cf01d1-90a5-3d78-891a-293b463682fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9d:88:ba:f5:dc:80:18:da:88:ee:cb:5e:4d:16:29:2c:ee: 2e:e3:2a:71:e9:d8:1c:59:75:f2:5b:99:9f:9c:37:52:53:46: 40:15:84:62:fc:29:5f:f9:7c:dc:5b:81:43:1e:28:d5:7c:b4: 50:9e:6e:bc:0c:21:e0:fb:b6:2f:fa:ea:0a:16:46:d5:82:43: 7d:f1:86:a8:57:b4:55:90:78:77:31:c6:76:58:fc:8f:92:9a: 5d:11:98:bd:44:ff:93:91:81:7b:e8:97:1c:1a:0c:c7:9b:5d: b5:7a:4b:5c:47:92:85:06:e4:cf:be:3f:a3:01:ff:af:c5:20: 26:1b:a5:65:9d:eb:66:16:4b:ef:8e:06:52:10:84:33:48:75: f9:9e:c5:dd:8b:26:9c:41:98:f1:4e:2f:32:d5:42:08:82:8c: 41:09:a3:16:65:e4:e9:af:1d:9e:16:11:41:4b:a1:27:9b:26: 0d:b7:37:ec:d6:d0:08:bc:0e:f8:f3:8c:96:93:e2:20:a9:c6: b3:37:29:a5:8c:11:74:3c:77:0e:f8:e6:8d:9c:e6:71:0f:96: 06:ae:83:a0:0f:b1:8f:ad:38:b2:e9:23:10:8b:5d:8f:f1:9c: b5:05:26:57:a9:31:99:68:4e:a2:a3:db:59:b8:23:76:25:9b: 60:7c:ff:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDcxfOJYIJ5nLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YjY1YzlmYWMtNDY1OS00YjczLTgxNDgtMzEzNmEwNzJmZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOgFhzDURS1zUjyKbZg77SwO7iQWMAMhacLD hzhLi7OU14enS0Gl83Lkdq/wF2Qbexd5F2YATAHT1/g6GwnKsxKR6Mbxgs64gJQI cmbv/GOmwy4yV6I/YC47luMjjUCrnfx7eS4Ghb0bVOCqI6CqUJTdvO7p5RnHYHOc ZQhetmXqP2+u9i+5PR7o8b5eil0kfqS6w8b/S4YzDI5R4BqJlR9aYpQ8oQwoCI4X faw5ZuAaQgQdaEF1QFlju9KmQu0Uo58JYzMtG3xHcoAUJtHFZJqx7lPG5aC5XaH3 48Pc02l+jkgEChgJqvfg5Sr5mv8M+5sTsg+wXlO8U7PwVuatDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXpp8EoMuXKy+zILm56QUG/9fHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzBjZjAxZDEtOTBhNS0z ZDc4LTg5MWEtMjkzYjQ2MzY4MmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGiyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmdiLr13IAY2ojuy15NFiks7i7jKnHp2BxZdfJbmZ+cN1JTRkAVhGL8 KV/5fNxbgUMeKNV8tFCebrwMIeD7ti/66goWRtWCQ33xhqhXtFWQeHcxxnZY/I+S ml0RmL1E/5ORgXvolxwaDMebXbV6S1xHkoUG5M++P6MB/6/FICYbpWWd62YWS++O BlIQhDNIdfmexd2LJpxBmPFOLzLVQgiCjEEJoxZl5OmvHZ4WEUFLoSebJg23N+zW 0Ai8DvjzjJaT4iCpxrM3KaWMEXQ8dw745o2c5nEPlgaug6APsY+tOLLpIxCLXY/x nLUFJlepMZloTqKj21m4I3Ylm2B8/6U= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:31 2025 by rpki-client