$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c449ed31-271e-3763-9daf-e79a4a09c69b.roa File: c449ed31-271e-3763-9daf-e79a4a09c69b.roa (raw, json) Hash identifier: C9uxS6xE60uSppKIJqqWylZO6fbwurZta2nEyZphU34= Subject key identifier: BD:01:55:92:91:44:0A:B6:4C:6A:EB:B1:9A:23:2D:26:7E:03:D8:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C3834973DCEB6191CEC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c449ed31-271e-3763-9daf-e79a4a09c69b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:38:34:97:3d:ce:b6:19:1c:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=c0c24557-b7d7-4085-a9fd-fc51f5b432a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0e:fe:b8:8f:7f:56:e8:d5:97:51:62:2c:1a: 39:a0:53:29:94:31:c6:0a:14:7a:42:eb:89:0e:89: 90:c5:5e:eb:88:01:f2:1c:aa:59:ec:ba:92:c3:37: 6b:e4:49:98:f7:5a:d0:5a:70:03:f7:79:55:ed:1e: 41:b5:83:f0:46:26:59:92:4f:75:fb:2b:c3:13:70: 98:53:55:9a:da:ed:44:34:98:8f:30:1a:ae:dd:e0: 56:b5:1a:b0:22:49:8b:f6:27:b3:21:9b:d5:89:c6: b3:67:3d:47:c2:6e:7e:59:f9:60:7d:e2:8b:40:c6: cc:7f:b9:5c:af:16:8e:ad:29:d3:6a:76:da:05:77: 31:d9:c2:f4:19:a3:2d:8c:63:80:4c:a2:02:c0:c9: 3a:77:01:7b:39:8c:04:07:6d:ce:43:d4:e9:89:c2: 0c:9f:29:7d:17:d8:30:20:dc:f5:6b:6c:ab:04:7c: 8f:c7:05:d8:1a:8a:8b:c4:c3:89:38:a6:94:2e:4e: 86:37:96:ce:a8:df:a8:08:50:2b:7d:ff:36:de:c6: 1a:05:97:9c:99:5a:4f:e1:1e:64:d9:7b:f1:f8:07: b0:6a:53:2b:59:9a:88:3b:9b:69:cb:ac:59:a6:74: 9e:c8:c7:7c:b5:33:23:75:67:73:ed:bb:c2:86:82: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:55:92:91:44:0A:B6:4C:6A:EB:B1:9A:23:2D:26:7E:03:D8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c449ed31-271e-3763-9daf-e79a4a09c69b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c7:8d:7f:08:d9:9d:f3:9c:c2:f0:e7:3d:94:d0:40:3f:7b: 80:b0:df:ca:4e:0f:09:5d:82:0c:a8:81:06:d4:de:c2:60:12: bd:40:bf:4a:77:8c:23:37:39:9a:80:8c:0a:a0:25:53:a0:a6: 76:c0:64:d9:76:05:3d:6a:0e:4e:f2:b1:b2:c3:4a:8e:63:16: 41:09:9f:bf:7c:33:3a:53:dc:b5:1b:37:e6:e2:47:be:85:17: 8c:5c:d7:6b:66:4a:18:be:45:c2:12:30:eb:7e:d4:30:77:09: 64:48:84:b8:73:12:0a:82:d9:5f:55:3d:a6:e7:b2:fa:55:65: 35:46:43:55:2d:85:76:5b:c8:85:16:51:44:f7:51:dc:db:70: ff:13:01:26:36:1b:47:6f:ca:ea:87:08:5f:84:db:e7:dc:22: 28:de:3d:03:c6:79:ed:c4:ae:56:86:38:49:e1:c5:19:6e:fd: c0:65:34:b1:76:22:0e:44:77:12:92:74:af:72:41:95:5e:9b: b0:ab:6d:bd:66:bf:fb:e3:8d:65:02:ce:f9:9a:13:4d:64:36: 75:93:7a:de:71:15:3e:cc:b7:83:15:d3:98:91:5e:18:a9:3f: 71:09:21:73:63:27:5a:e6:18:92:17:7c:6e:76:b2:bb:a4:7f: 08:66:6e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDg0lz3Othkc7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YzBjMjQ1NTctYjdkNy00MDg1LWE5ZmQtZmM1MWY1YjQzMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ7+uI9/VujVl1FiLBo5oFMplDHGChR6QuuJ DomQxV7riAHyHKpZ7LqSwzdr5EmY91rQWnAD93lV7R5BtYPwRiZZkk91+yvDE3CY U1Wa2u1ENJiPMBqu3eBWtRqwIkmL9iezIZvVicazZz1Hwm5+WflgfeKLQMbMf7lc rxaOrSnTanbaBXcx2cL0GaMtjGOATKICwMk6dwF7OYwEB23OQ9TpicIMnyl9F9gw INz1a2yrBHyPxwXYGoqLxMOJOKaULk6GN5bOqN+oCFArff823sYaBZecmVpP4R5k 2Xvx+AewalMrWZqIO5tpy6xZpnSeyMd8tTMjdWdz7bvChoIMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0BVZKRRAq2TGrrsZojLSZ+A9jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzQ0OWVkMzEtMjcxZS0z NzYzLTlkYWYtZTc5YTRhMDljNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPHjX8I2Z3znMLw5z2U0EA/e4Cw38pODwldggyogQbU3sJgEr1Av0p3 jCM3OZqAjAqgJVOgpnbAZNl2BT1qDk7ysbLDSo5jFkEJn798MzpT3LUbN+biR76F F4xc12tmShi+RcISMOt+1DB3CWRIhLhzEgqC2V9VPabnsvpVZTVGQ1UthXZbyIUW UUT3UdzbcP8TASY2G0dvyuqHCF+E2+fcIijePQPGee3ErlaGOEnhxRlu/cBlNLF2 Ig5EdxKSdK9yQZVem7Crbb1mv/vjjWUCzvmaE01kNnWTet5xFT7Mt4MV05iRXhip P3EJIXNjJ1rmGJIXfG52srukfwhmbkM= -----END CERTIFICATE-----Generated at Thu Oct 16 01:46:58 2025 by rpki-client