$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb220019-dded-3d3b-92f9-c63dfe96e81a.roa File: cb220019-dded-3d3b-92f9-c63dfe96e81a.roa (raw, json) Hash identifier: 2b7reTQE1LOPleVq8EMFQmoVbhd0aQAZN/sZ0ODtFpg= Subject key identifier: 2A:E3:83:C6:B7:A2:24:6C:3C:D4:2F:AB:82:EA:1D:1C:32:86:EE:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AFC7E43CD96C95D0B9D3E2800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb220019-dded-3d3b-92f9-c63dfe96e81a.roa Signing time: Tue 26 Aug 2025 16:18:52 +0000 ROA not before: Tue 26 Aug 2025 16:18:52 +0000 ROA not after: Mon 24 Nov 2025 17:18:52 +0000 asID: 22773 IP address blocks: 68.6.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:7e:43:cd:96:c9:5d:0b:9d:3e:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 26 16:18:52 2025 GMT Not After : Nov 24 17:18:52 2025 GMT Subject: CN=e6ded56f-2763-4242-99d3-e677c94db6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:be:81:0c:f9:ad:5b:70:83:f1:72:ad:62: 4e:27:4d:f5:c6:6e:a9:1a:30:d5:fa:d2:cb:9b:2a: 20:49:8c:1c:bc:0d:cc:b2:df:79:7b:8c:77:15:1a: f4:40:10:7c:19:e7:4d:cc:42:a7:16:69:31:63:8e: a2:88:07:88:a5:84:84:45:79:e5:75:98:c6:3f:f0: e2:67:4c:9a:6e:cf:ce:66:2a:12:82:41:05:50:93: 45:9f:6b:60:41:0c:5e:af:ba:58:aa:fb:01:28:e5: 01:8e:da:1c:91:fa:4f:0a:90:06:54:61:92:48:fb: a3:75:20:6f:96:46:c8:57:ed:38:1a:72:2f:16:ec: 79:0d:33:e3:2c:9d:3c:b1:81:dd:a0:bf:9e:fd:7a: b7:56:2f:45:b9:f6:97:47:18:d4:98:c4:d6:11:0d: 55:68:29:64:78:89:2c:80:51:b3:08:11:ab:00:8d: c9:09:ae:4a:cd:8b:b9:14:60:1b:e7:ab:44:4f:6a: 96:05:56:f8:0e:d8:61:82:3b:6c:45:da:b9:9d:f5: 82:ad:6c:9c:5e:a6:b9:af:4c:23:af:ce:f6:42:31: c2:63:a5:86:c7:58:25:a3:87:d7:c5:6c:20:54:d4: d4:8f:00:93:a8:fa:d5:18:b9:0b:f3:11:51:9f:d5: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E3:83:C6:B7:A2:24:6C:3C:D4:2F:AB:82:EA:1D:1C:32:86:EE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb220019-dded-3d3b-92f9-c63dfe96e81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:66:9a:04:e9:8e:ed:be:0e:48:fa:55:54:ae:68:d9:4e:91: 1d:92:82:8b:25:52:1f:20:6c:00:4c:68:ff:c9:c7:b4:b5:1d: c7:d8:3c:90:1f:8b:06:a1:11:4f:b2:f9:89:e1:c0:23:c8:13: 20:f7:6a:8f:94:f6:ba:e7:05:1f:25:eb:f9:0c:a9:eb:8f:7f: 07:99:5a:70:ec:9a:f0:bd:69:d8:99:b6:5b:7d:a7:09:eb:aa: d1:fd:f4:d7:13:44:7e:21:55:7b:8a:df:b6:fb:86:a9:a3:82: 4d:97:43:03:5a:cb:7b:a3:68:b2:70:2b:74:36:20:03:69:65: 7e:c3:0d:cc:e3:f9:e7:58:29:eb:34:b7:6a:e0:70:9d:f6:1d: 81:d4:25:49:c2:1f:88:a7:a8:f0:2a:a5:c3:0a:fd:34:44:07: cc:7b:89:2c:19:64:c0:2a:2d:db:8d:39:98:c8:f3:5c:a0:65: a1:05:bb:b0:dd:4c:c4:65:2e:d0:6c:69:3f:c7:28:aa:7e:16: bb:09:ea:37:7b:ce:10:9d:30:07:40:83:00:03:27:8f:6c:5b: d9:b4:b9:de:79:c6:4b:f5:bc:e8:4c:d7:1c:42:31:1b:e1:4c: b7:89:48:27:fa:ab:ba:e6:1e:b1:3e:84:1e:51:4d:7d:11:0e: b4:de:01:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8fkPNlsldC50+KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNjE2MTg1MloXDTI1MTEyNDE3MTg1MlowLzEtMCsGA1UEAxMk ZTZkZWQ1NmYtMjc2My00MjQyLTk5ZDMtZTY3N2M5NGRiNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZq+gQz5rVtwg/FyrWJOJ031xm6pGjDV+tLL myogSYwcvA3Mst95e4x3FRr0QBB8GedNzEKnFmkxY46iiAeIpYSERXnldZjGP/Di Z0yabs/OZioSgkEFUJNFn2tgQQxer7pYqvsBKOUBjtockfpPCpAGVGGSSPujdSBv lkbIV+04GnIvFux5DTPjLJ08sYHdoL+e/Xq3Vi9FufaXRxjUmMTWEQ1VaClkeIks gFGzCBGrAI3JCa5KzYu5FGAb56tET2qWBVb4DthhgjtsRdq5nfWCrWycXqa5r0wj r872QjHCY6WGx1glo4fXxWwgVNTUjwCTqPrVGLkL8xFRn9WmgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrjg8a3oiRsPNQvq4LqHRwyhu6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2IyMjAwMTktZGRlZC0z ZDNiLTkyZjktYzYzZGZlOTZlODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBmmgTpju2+Dkj6VVSuaNlOkR2SgoslUh8gbABMaP/Jx7S1HcfYPJAf iwahEU+y+YnhwCPIEyD3ao+U9rrnBR8l6/kMqeuPfweZWnDsmvC9adiZtlt9pwnr qtH99NcTRH4hVXuK37b7hqmjgk2XQwNay3ujaLJwK3Q2IANpZX7DDczj+edYKes0 t2rgcJ32HYHUJUnCH4inqPAqpcMK/TREB8x7iSwZZMAqLduNOZjI81ygZaEFu7Dd TMRlLtBsaT/HKKp+FrsJ6jd7zhCdMAdAgwADJ49sW9m0ud55xkv1vOhM1xxCMRvh TLeJSCf6q7rmHrE+hB5RTX0RDrTeAYc= -----END CERTIFICATE-----Generated at Mon Sep 15 06:12:34 2025 by rpki-client