$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc711993-938d-3c8e-81b8-95eee644ab63.roa File: cc711993-938d-3c8e-81b8-95eee644ab63.roa (raw, json) Hash identifier: wqAZd3uKkEm0hj5oZti1SssY1syMfe4s9vg8CAv3INQ= Subject key identifier: 4C:E7:9D:42:DA:2F:55:C0:B1:06:5D:A4:1D:65:AA:D3:10:E0:D2:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2364705B9A0FE0B1D3EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc711993-938d-3c8e-81b8-95eee644ab63.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.109.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:36:47:05:b9:a0:fe:0b:1d:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=708edad5-585d-4e29-af39-72db27110ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:cd:92:89:64:47:7f:cb:40:52:77:21:86: 36:38:cd:a5:49:35:8e:9c:2f:e8:12:0c:37:be:36: ad:55:d8:e9:51:1f:85:0f:f5:33:aa:e0:4f:85:2a: b5:6a:db:f2:e4:95:7f:08:b9:45:55:26:8e:2b:d6: 7c:01:35:1b:b8:39:d7:be:fa:39:ba:c0:34:c0:61: 85:b2:32:b7:33:22:d6:8b:f4:b9:3c:6b:13:7d:18: ab:36:6d:41:c9:61:1f:1f:3a:12:cf:3f:43:ed:96: 2f:71:f3:a3:c2:40:dc:e1:6e:31:98:6b:fc:16:5d: 5c:3b:71:15:52:c6:14:9e:02:e4:67:5d:17:b6:e1: 3e:08:56:be:7e:ee:19:6b:70:3e:68:10:d3:5c:b5: d3:da:35:0e:30:0e:55:b2:4a:7a:36:37:39:fb:98: 78:38:8f:c7:66:32:ca:7e:35:58:66:f1:e4:5a:cf: 39:9d:08:8a:cb:5c:13:a2:52:e4:32:31:ce:d2:95: 8f:7f:88:62:c2:db:42:b8:7b:e6:90:5f:ad:b4:e2: 28:ae:c6:85:a4:03:90:80:eb:9a:17:bc:29:08:19: 30:f8:36:48:a8:35:a0:18:00:c0:4e:0f:db:de:f2: cc:1d:b2:9a:a6:53:d7:c3:0a:1b:e0:92:53:65:35: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E7:9D:42:DA:2F:55:C0:B1:06:5D:A4:1D:65:AA:D3:10:E0:D2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc711993-938d-3c8e-81b8-95eee644ab63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:61:ad:a5:51:aa:16:be:d1:1f:5e:da:44:17:c5:1d:d3:56: 91:15:e0:ef:7c:5b:ab:92:9c:73:6c:64:be:7b:d8:e3:70:2f: 77:e4:d5:74:8e:50:e2:ae:9b:57:12:5f:33:f7:86:c3:73:a4: 6a:55:cb:7d:12:8e:b5:a5:0d:35:a5:f1:f7:74:53:7c:bf:ad: 67:26:be:95:77:29:2c:c1:fe:c3:cb:00:7f:2f:2a:b0:20:39: 7e:28:25:21:e9:52:12:b7:15:5f:0a:a7:42:4c:0d:a9:31:e6: c6:28:f1:8f:1c:6a:6b:92:a8:d5:d1:4d:e9:2b:74:0b:15:2d: 7e:5a:e1:1e:a3:b8:15:06:33:49:a1:2f:fb:f0:62:1a:62:82: 91:c7:f0:d2:21:07:df:36:63:b0:d2:f6:4f:ce:a9:83:54:3c: 0b:d3:f3:89:8b:03:2f:72:de:93:8d:50:55:75:47:5b:1f:26: f6:46:40:87:7a:89:2d:1b:37:39:27:06:9c:3e:9d:b4:d3:12: f9:6a:dc:0e:2f:26:11:43:2c:8c:5b:3a:47:e5:c5:b5:c3:2e: 53:d2:12:28:9c:f9:99:96:dc:0e:6b:69:b3:2e:06:fa:e4:0b: 12:e6:26:e0:57:52:55:39:f1:f6:0a:17:87:64:dd:25:98:6b: fa:be:b3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jZHBbmg/gsdPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzA4ZWRhZDUtNTg1ZC00ZTI5LWFmMzktNzJkYjI3MTEwZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0PNkolkR3/LQFJ3IYY2OM2lSTWOnC/oEgw3 vjatVdjpUR+FD/UzquBPhSq1atvy5JV/CLlFVSaOK9Z8ATUbuDnXvvo5usA0wGGF sjK3MyLWi/S5PGsTfRirNm1ByWEfHzoSzz9D7ZYvcfOjwkDc4W4xmGv8Fl1cO3EV UsYUngLkZ10XtuE+CFa+fu4Za3A+aBDTXLXT2jUOMA5Vskp6Njc5+5h4OI/HZjLK fjVYZvHkWs85nQiKy1wTolLkMjHO0pWPf4hiwttCuHvmkF+ttOIorsaFpAOQgOua F7wpCBkw+DZIqDWgGADATg/b3vLMHbKaplPXwwob4JJTZTW0LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEznnULaL1XAsQZdpB1lqtMQ4NK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2M3MTE5OTMtOTM4ZC0z YzhlLTgxYjgtOTVlZWU2NDRhYjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRhraVRqha+0R9e2kQXxR3TVpEV4O98W6uSnHNsZL572ONwL3fk1XSO UOKum1cSXzP3hsNzpGpVy30SjrWlDTWl8fd0U3y/rWcmvpV3KSzB/sPLAH8vKrAg OX4oJSHpUhK3FV8Kp0JMDakx5sYo8Y8camuSqNXRTekrdAsVLX5a4R6juBUGM0mh L/vwYhpigpHH8NIhB982Y7DS9k/OqYNUPAvT84mLAy9y3pONUFV1R1sfJvZGQId6 iS0bNzknBpw+nbTTEvlq3A4vJhFDLIxbOkflxbXDLlPSEiic+ZmW3A5rabMuBvrk CxLmJuBXUlU58fYKF4dk3SWYa/q+s7U= -----END CERTIFICATE-----Generated at Thu Oct 16 02:04:01 2025 by rpki-client