$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa File: ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa (raw, json) Hash identifier: uYxZdy8l1QZ7m1QInG7iHAbKoYfIUOv9Z25E8vBuC04= Subject key identifier: 96:E9:9A:F9:13:F1:6E:DD:41:B6:67:CC:72:13:87:9A:50:4F:06:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C23CCD40713D46AF20600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:23:cc:d4:07:13:d4:6a:f2:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=7991d023-b731-4a5d-b32c-247c20d14e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:6e:b5:27:a3:b8:90:b9:51:25:88:fd:c0: 99:b9:c7:17:a7:ef:b5:b0:0e:36:c0:9b:0d:7c:1b: 33:fb:24:77:54:65:81:d2:42:cb:1e:1b:30:6c:2e: cc:4b:ad:36:e2:d1:5f:d0:d4:3d:c0:d8:c2:0b:89: 38:d0:64:96:21:25:66:0c:e7:b2:c8:4e:0b:a2:a4: ff:2c:7d:71:dd:07:09:50:85:ac:c0:d8:aa:16:eb: ad:44:81:d2:d2:fd:7c:a5:1c:1f:3a:74:cf:29:df: e1:ec:99:a0:93:32:74:e6:cf:31:9c:41:a8:89:5c: ac:f4:f0:30:d8:ba:e6:bb:44:cf:76:78:4b:71:de: 23:c0:d5:44:d2:25:5e:70:09:74:63:43:f6:45:df: 0e:27:93:a8:d9:d5:f6:8b:9e:f0:50:a1:66:d9:09: 8f:17:a2:b4:0f:3a:64:45:a2:f1:c6:20:ef:2e:1f: 4c:17:f6:f5:2e:7d:a0:9a:63:64:cb:da:f7:b0:87: 5c:56:4f:ae:0f:ed:54:3e:4d:bd:6e:39:70:7e:95: 90:3a:fb:bc:dd:49:b1:84:18:69:d5:dc:0b:51:b5: 71:32:23:43:9d:3c:dc:69:a3:3f:8a:d5:d7:82:56: 86:04:fe:63:ac:43:2f:59:e5:74:cd:48:72:ad:de: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E9:9A:F9:13:F1:6E:DD:41:B6:67:CC:72:13:87:9A:50:4F:06:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6c:fa:dd:54:fd:a3:75:de:6e:b3:02:a4:70:1a:9f:6a:8f: b5:9f:3f:5e:5e:95:8a:32:fa:48:7d:a8:6d:19:3b:64:7a:da: b9:8a:f3:7b:56:ef:92:47:aa:de:1f:5c:01:da:a7:ac:fc:d0: 40:f0:2c:f2:bd:79:ec:a8:ec:9f:ec:44:04:02:ea:75:4f:49: d3:40:c5:71:07:c3:34:ad:74:d3:e3:13:0d:fa:ab:b5:36:c5: 59:82:af:74:4b:83:c4:e1:e7:8e:db:ab:a8:9c:91:1b:ed:e0: 9e:aa:6d:7a:8c:f8:3b:c6:0d:67:6e:fa:a3:88:8d:cb:2b:e2: 28:82:e5:a2:62:04:6c:ca:a8:d6:bc:89:5d:d7:fb:78:25:d0: 7b:8b:45:db:6f:68:75:51:fe:f5:78:61:d1:75:66:b6:2c:06: 1e:bc:cf:1f:e6:ca:6a:fe:0d:b6:34:7b:2f:cb:a4:af:b7:69: 3d:14:bb:fb:24:2b:a8:60:3c:af:0d:d2:52:d5:cf:65:93:11: 84:04:4d:71:4c:8e:a3:dd:c6:8b:c3:5b:ec:8c:24:69:3b:5a: 70:9a:4c:ab:5a:29:80:8f:25:86:93:b9:64:01:d9:bf:88:e8: 47:de:e9:c1:bf:fe:3b:5d:0b:27:df:f7:08:f5:69:41:2f:e6: d4:44:90:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCPM1AcT1GryBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk Nzk5MWQwMjMtYjczMS00YTVkLWIzMmMtMjQ3YzIwZDE0ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvVutSejuJC5USWI/cCZuccXp++1sA42wJsN fBsz+yR3VGWB0kLLHhswbC7MS6024tFf0NQ9wNjCC4k40GSWISVmDOeyyE4LoqT/ LH1x3QcJUIWswNiqFuutRIHS0v18pRwfOnTPKd/h7JmgkzJ05s8xnEGoiVys9PAw 2Lrmu0TPdnhLcd4jwNVE0iVecAl0Y0P2Rd8OJ5Oo2dX2i57wUKFm2QmPF6K0Dzpk RaLxxiDvLh9MF/b1Ln2gmmNky9r3sIdcVk+uD+1UPk29bjlwfpWQOvu83UmxhBhp 1dwLUbVxMiNDnTzcaaM/itXXglaGBP5jrEMvWeV0zUhyrd7oRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbpmvkT8W7dQbZnzHITh5pQTwYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2NmMzI0M2EtNDIzZi0z YTNmLTk4YjQtMTIxYWM0NWUwMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABps+t1U/aN13m6zAqRwGp9qj7WfP15elYoy+kh9qG0ZO2R62rmK83tW 75JHqt4fXAHap6z80EDwLPK9eeyo7J/sRAQC6nVPSdNAxXEHwzStdNPjEw36q7U2 xVmCr3RLg8Th547bq6ickRvt4J6qbXqM+DvGDWdu+qOIjcsr4iiC5aJiBGzKqNa8 iV3X+3gl0HuLRdtvaHVR/vV4YdF1ZrYsBh68zx/mymr+DbY0ey/LpK+3aT0Uu/sk K6hgPK8N0lLVz2WTEYQETXFMjqPdxovDW+yMJGk7WnCaTKtaKYCPJYaTuWQB2b+I 6Efe6cG//jtdCyff9wj1aUEv5tREkLY= -----END CERTIFICATE-----Generated at Thu Oct 16 01:57:20 2025 by rpki-client