$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa File: cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa (raw, json) Hash identifier: EZuGxCeTx/rDMkPIFZ7NVQpMwaqBPDn4KkHScCaJUsA= Subject key identifier: C1:22:C5:45:CB:FC:36:CC:59:9D:E0:81:43:EA:45:BC:77:96:8A:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FB08E23624A45CF71D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fb:08:e2:36:24:a4:5c:f7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=633bce16-510e-49fa-bf7b-f5cdafb5fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:a3:4e:ae:d2:20:aa:63:8c:8e:75:10:2b: 31:7e:60:c5:18:d9:ad:20:6c:7b:81:d4:33:3f:05: 33:ab:6e:e0:24:da:46:3c:4c:8e:11:78:d9:f7:5c: 85:30:6e:ec:dc:08:aa:4a:e4:53:a9:53:f8:bb:b0: d7:4d:97:99:d3:3b:7a:2c:50:80:89:60:54:4c:ee: 03:54:43:71:58:7f:d5:34:97:50:46:83:4c:ab:9d: b9:6b:29:93:b4:2d:38:b2:43:38:4e:54:4e:e9:7c: e5:0f:63:8e:df:03:ef:13:4f:2b:d7:62:ac:94:ba: 47:4b:a4:f7:b8:f7:2c:79:f7:31:45:a1:e9:fc:1b: d0:10:08:61:fb:e1:ef:c5:dc:69:2e:4c:10:68:2f: 39:8f:24:29:f8:f5:72:7b:75:bb:7c:25:41:4f:af: 9b:6a:91:d9:49:6e:60:9a:de:73:ef:c9:ed:53:65: 46:2a:21:2e:9c:dd:49:3a:eb:b0:9b:73:bf:14:96: 78:c8:3f:da:63:bc:53:bf:3a:c4:62:81:dd:49:42: 1a:04:b1:f5:32:fc:66:d3:88:71:11:71:c3:83:39: 94:3a:ce:a7:4c:d7:02:c2:67:c3:a1:9a:45:d5:56: ba:7a:20:48:fe:df:e4:9f:64:ed:6e:20:75:4d:c7: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:22:C5:45:CB:FC:36:CC:59:9D:E0:81:43:EA:45:BC:77:96:8A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2a:3d:e1:bb:c4:64:b4:a8:bc:fa:41:3b:eb:34:1a:f9:c9: 71:be:63:a2:a1:d5:79:7e:99:73:4d:28:e4:0e:66:b3:f6:05: 28:5e:e2:77:97:db:d0:09:ff:95:b6:c8:f6:c0:9f:5d:a3:9c: 40:fe:31:18:32:c7:82:6c:6f:d4:15:6a:8c:fb:3d:25:3d:e1: 14:7e:3f:7d:7c:ed:ba:1f:58:9a:a7:84:ac:21:04:62:ba:36: 92:d2:af:0f:49:4c:37:48:1f:38:d8:c9:5e:9f:bb:91:c6:78: ea:73:5b:dd:7e:f0:51:ad:bd:65:73:30:1d:4a:6f:88:65:19: b9:e4:21:37:98:0b:fb:a0:db:67:90:da:c9:c0:48:95:79:3b: 73:fb:62:ec:02:03:9c:b1:53:6b:cb:8d:ee:61:c6:c7:05:90: 6b:91:9c:fe:db:86:aa:fd:18:a9:fc:8c:08:09:b2:f2:c7:da: 5f:83:e8:c1:1c:c3:78:0e:7c:f1:f8:dc:ab:c3:f4:7e:e3:7f: 3d:7c:94:83:33:87:60:03:cd:3c:ac:b6:5a:8c:80:ea:1b:67: fc:07:e2:3d:48:09:d6:3b:0d:78:ef:ac:3a:51:62:bc:6b:c8: 68:49:a9:dc:9a:07:0e:83:26:67:b7:2d:5e:36:6f:9d:74:98: 4b:97:1c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvsI4jYkpFz3HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NjMzYmNlMTYtNTEwZS00OWZhLWJmN2ItZjVjZGFmYjVmYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiOjTq7SIKpjjI51ECsxfmDFGNmtIGx7gdQz PwUzq27gJNpGPEyOEXjZ91yFMG7s3AiqSuRTqVP4u7DXTZeZ0zt6LFCAiWBUTO4D VENxWH/VNJdQRoNMq525aymTtC04skM4TlRO6XzlD2OO3wPvE08r12KslLpHS6T3 uPcsefcxRaHp/BvQEAhh++HvxdxpLkwQaC85jyQp+PVye3W7fCVBT6+bapHZSW5g mt5z78ntU2VGKiEunN1JOuuwm3O/FJZ4yD/aY7xTvzrEYoHdSUIaBLH1Mvxm04hx EXHDgzmUOs6nTNcCwmfDoZpF1Va6eiBI/t/kn2TtbiB1TccNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEixUXL/DbMWZ3ggUPqRbx3lorSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q0M2ZlMGYtZDc4OS0z Y2NkLTgxOWItMzliOGEzM2ExOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUqPeG7xGS0qLz6QTvrNBr5yXG+Y6Kh1Xl+mXNNKOQOZrP2BShe4neX 29AJ/5W2yPbAn12jnED+MRgyx4Jsb9QVaoz7PSU94RR+P3187bofWJqnhKwhBGK6 NpLSrw9JTDdIHzjYyV6fu5HGeOpzW91+8FGtvWVzMB1Kb4hlGbnkITeYC/ug22eQ 2snASJV5O3P7YuwCA5yxU2vLje5hxscFkGuRnP7bhqr9GKn8jAgJsvLH2l+D6MEc w3gOfPH43KvD9H7jfz18lIMzh2ADzTystlqMgOobZ/wH4j1ICdY7DXjvrDpRYrxr yGhJqdyaBw6DJme3LV42b510mEuXHNE= -----END CERTIFICATE-----Generated at Thu Oct 16 04:56:42 2025 by rpki-client