$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1cd3e87-c201-3adc-b7e1-e079739b0930.roa File: c1cd3e87-c201-3adc-b7e1-e079739b0930.roa (raw, json) Hash identifier: P3uDqpKOV3UNZ1+1DikRJcn4o8acuxSStQ6WgqoBtq8= Subject key identifier: B7:54:C1:4E:04:64:0C:53:0F:EC:26:67:83:4B:38:A6:E6:12:FD:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C40DEE160F2A84DAAF600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1cd3e87-c201-3adc-b7e1-e079739b0930.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:40:de:e1:60:f2:a8:4d:aa:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e2227269-c0bb-4580-bb82-3aedf55fd411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:49:32:ce:40:c2:20:9a:14:de:36:e7:10: 08:5f:45:64:74:75:0e:10:3f:a7:f8:bd:ae:12:56: c0:9e:09:69:65:04:05:cf:0e:be:df:d4:89:0f:3a: 0b:bd:cd:7b:56:78:49:10:50:b7:25:c2:19:b3:b2: 52:99:05:84:3a:f7:18:4e:2f:6a:01:5b:12:0d:46: 76:0b:f4:c1:0b:e9:c9:80:93:5b:6a:49:20:b3:94: e9:f8:4d:5b:6b:9a:32:52:2b:1a:aa:72:ae:bc:23: 4f:88:89:b9:d4:3e:fc:42:fc:50:32:04:e0:b7:44: b5:3c:d5:08:4d:30:04:ca:dc:61:22:49:0e:58:dc: 00:6c:0f:b2:8e:14:96:03:24:62:ef:95:23:e9:e3: 86:81:c0:31:c1:8d:05:59:bf:7f:f8:6e:f2:e3:1c: f2:ca:d8:14:d2:cc:06:c8:89:39:24:66:ed:3a:46: ed:f9:3b:9e:5c:8e:ad:d9:e4:02:50:4e:e5:02:d0: cc:e8:9a:e4:49:d9:19:43:4a:0e:c3:30:12:d8:69: 5a:d7:4f:4f:a1:53:80:dd:14:39:7d:1e:60:7e:3d: 2c:d9:3f:5e:3c:17:b8:18:dd:41:f7:77:39:fb:08: 97:7d:d5:85:da:25:02:78:16:a6:25:ca:65:9b:c9: c3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:54:C1:4E:04:64:0C:53:0F:EC:26:67:83:4B:38:A6:E6:12:FD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1cd3e87-c201-3adc-b7e1-e079739b0930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:89:d1:7c:2d:76:3a:3f:ec:b2:4b:29:23:93:0d:15:94:ed: 9b:27:01:f1:72:56:80:fa:6a:27:fa:e1:ec:3c:92:aa:4f:ed: a0:7c:bd:d8:38:48:6e:9c:55:19:e6:16:c5:0f:fa:3b:20:d6: 28:35:a2:f9:2b:10:88:f7:88:27:3e:8c:11:b2:c8:64:be:2e: 41:66:0f:a7:a4:d7:2d:fa:4f:c1:41:76:da:73:a1:c5:a7:4c: 7f:27:5e:9b:a5:c2:98:81:60:2b:e7:ae:95:d6:2c:b2:c6:ef: 7e:19:2e:61:b4:4c:b2:eb:ee:fc:76:c2:1d:58:7d:0c:28:5a: 8e:5d:cd:01:a5:b8:c9:05:8d:ad:cf:03:47:17:df:12:93:c5: 8b:82:28:00:68:1f:d1:88:da:a9:8c:dc:93:f7:9d:05:8c:29: 0a:34:2b:fb:7f:99:6c:43:b8:16:ce:3e:97:08:72:01:f1:e1: e2:be:f7:b7:55:b4:8b:7a:ad:93:2d:09:1f:24:b0:c3:8f:00: c0:86:00:69:da:34:80:f1:45:07:d0:f3:dd:4d:4c:a3:58:48: bb:57:64:47:f6:37:9f:3b:57:8a:b8:cc:9c:cd:af:f6:73:62: 3b:dd:12:fc:92:59:96:95:ff:c8:04:8b:34:f6:7a:1d:44:87: 1f:01:3a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEDe4WDyqE2q9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTIyMjcyNjktYzBiYi00NTgwLWJiODItM2FlZGY1NWZkNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjZJMs5AwiCaFN425xAIX0VkdHUOED+n+L2u ElbAnglpZQQFzw6+39SJDzoLvc17VnhJEFC3JcIZs7JSmQWEOvcYTi9qAVsSDUZ2 C/TBC+nJgJNbakkgs5Tp+E1ba5oyUisaqnKuvCNPiIm51D78QvxQMgTgt0S1PNUI TTAEytxhIkkOWNwAbA+yjhSWAyRi75Uj6eOGgcAxwY0FWb9/+G7y4xzyytgU0swG yIk5JGbtOkbt+TueXI6t2eQCUE7lAtDM6JrkSdkZQ0oOwzAS2Gla109PoVOA3RQ5 fR5gfj0s2T9ePBe4GN1B93c5+wiXfdWF2iUCeBamJcplm8nDZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdUwU4EZAxTD+wmZ4NLOKbmEv0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFjZDNlODctYzIwMS0z YWRjLWI3ZTEtZTA3OTczOWIwOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGzPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSJ0Xwtdjo/7LJLKSOTDRWU7ZsnAfFyVoD6aif64ew8kqpP7aB8vdg4 SG6cVRnmFsUP+jsg1ig1ovkrEIj3iCc+jBGyyGS+LkFmD6ek1y36T8FBdtpzocWn TH8nXpulwpiBYCvnrpXWLLLG734ZLmG0TLLr7vx2wh1YfQwoWo5dzQGluMkFja3P A0cX3xKTxYuCKABoH9GI2qmM3JP3nQWMKQo0K/t/mWxDuBbOPpcIcgHx4eK+97dV tIt6rZMtCR8ksMOPAMCGAGnaNIDxRQfQ891NTKNYSLtXZEf2N587V4q4zJzNr/Zz YjvdEvySWZaV/8gEizT2eh1Ehx8BOqk= -----END CERTIFICATE-----Generated at Thu Oct 16 01:30:41 2025 by rpki-client