$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d409d43c-065b-3ed3-9c42-17b5a97e6309.roa File: d409d43c-065b-3ed3-9c42-17b5a97e6309.roa (raw, json) Hash identifier: FZe82NSp+MratFmgcWagWqRRA9GNrMtt3gaZkanbVW4= Subject key identifier: E0:0E:F4:FB:1D:57:32:21:66:4A:0D:EB:4B:04:50:FB:45:71:E0:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FD29A64E632A56CF8440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d409d43c-065b-3ed3-9c42-17b5a97e6309.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fd:29:a6:4e:63:2a:56:cf:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=ee4321ad-2332-4474-adfc-066f71017f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:9e:b5:86:36:22:6b:41:92:05:8e:36:b2: 5f:f5:1c:47:06:02:61:61:91:2e:33:23:9b:e5:8b: 0d:af:7b:33:fc:1b:d4:e9:50:18:71:78:70:6a:29: 8a:47:43:31:d3:93:87:c1:29:fe:0c:6d:fe:f3:45: 68:e6:8f:2f:5c:62:46:7c:69:7e:27:ad:c1:2d:dc: a1:96:f8:ee:56:83:3e:1e:9b:ad:29:53:db:c1:87: e6:54:a5:eb:49:ca:14:7a:c3:d0:2d:50:f0:e8:64: e5:47:68:6a:78:3b:c2:2e:97:23:0d:27:bf:98:f1: 9c:bf:3a:e5:d8:f5:67:43:4b:c3:16:b7:8e:df:b9: b1:c3:04:24:c2:7a:e3:5a:62:3d:50:f3:dc:d9:4c: 7b:f6:5d:74:45:8d:af:09:11:c0:26:4e:da:41:0c: 2e:9e:36:f9:78:e4:1f:e5:db:11:80:61:9d:ac:b1: 29:f7:92:a7:e5:1f:82:64:28:08:d5:5d:e2:07:7f: 61:6d:61:94:0b:7e:9f:3f:40:e7:f4:25:a4:c4:50: 3e:36:32:10:30:ad:cd:9f:c5:89:05:7a:ca:43:2f: 6d:c2:2e:81:a8:8e:09:17:0e:81:90:2e:84:3d:17: 8f:df:aa:35:47:86:ba:0a:e6:b2:c9:4c:ff:ee:45: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0E:F4:FB:1D:57:32:21:66:4A:0D:EB:4B:04:50:FB:45:71:E0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d409d43c-065b-3ed3-9c42-17b5a97e6309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5a:b4:d6:9c:01:07:12:77:f8:96:34:9f:60:7a:79:3f:1f: 4d:71:eb:a1:2f:ed:8b:3e:ae:92:1b:e5:e5:3e:7c:16:87:93: 5c:53:5e:b6:26:26:89:11:10:91:d6:2d:f5:90:d6:50:8f:07: c0:62:01:e5:b6:0a:2c:27:ce:e0:fd:fd:0d:e7:00:f8:f7:a5: 94:48:d2:e5:ab:63:30:07:c0:47:32:98:14:d1:53:28:62:b0: f6:13:32:47:c9:db:59:d0:35:fd:b6:ea:2d:79:52:63:80:7d: 23:8b:33:2f:04:51:83:a6:c3:f6:b5:0c:70:2e:18:b7:de:31: a9:bd:1c:d3:39:6e:f5:d8:2e:46:c8:25:4b:20:fa:48:02:35: cc:9d:fb:51:d0:d1:a0:12:77:ff:bf:3c:f3:79:da:cd:57:12: 5b:54:03:d0:2b:06:ff:9c:77:63:94:1b:2b:6e:a8:c2:35:53: 22:f1:bd:05:8e:c5:f5:fc:37:5b:68:f5:69:4d:5d:d3:68:6f: fe:e3:36:30:6d:1c:0a:6b:d0:4f:f8:a1:6b:50:b7:c9:34:54: fd:62:1c:1d:39:7c:3e:bc:0c:c7:ad:f1:6c:a8:fd:4f:c0:5b: 18:0c:ba:aa:bf:c5:a6:db:8a:55:ef:54:b6:95:9f:2d:39:a7: 9d:6c:be:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZv0ppk5jKlbPhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWU0MzIxYWQtMjMzMi00NDc0LWFkZmMtMDY2ZjcxMDE3ZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRyetYY2ImtBkgWONrJf9RxHBgJhYZEuMyOb 5YsNr3sz/BvU6VAYcXhwaimKR0Mx05OHwSn+DG3+80Vo5o8vXGJGfGl+J63BLdyh lvjuVoM+HputKVPbwYfmVKXrScoUesPQLVDw6GTlR2hqeDvCLpcjDSe/mPGcvzrl 2PVnQ0vDFreO37mxwwQkwnrjWmI9UPPc2Ux79l10RY2vCRHAJk7aQQwunjb5eOQf 5dsRgGGdrLEp95Kn5R+CZCgI1V3iB39hbWGUC36fP0Dn9CWkxFA+NjIQMK3Nn8WJ BXrKQy9twi6BqI4JFw6BkC6EPReP36o1R4a6CuayyUz/7kUphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAO9PsdVzIhZkoN60sEUPtFceAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQwOWQ0M2MtMDY1Yi0z ZWQzLTljNDItMTdiNWE5N2U2MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1atNacAQcSd/iWNJ9genk/H01x66Ev7Ys+rpIb5eU+fBaHk1xTXrYm JokREJHWLfWQ1lCPB8BiAeW2CiwnzuD9/Q3nAPj3pZRI0uWrYzAHwEcymBTRUyhi sPYTMkfJ21nQNf226i15UmOAfSOLMy8EUYOmw/a1DHAuGLfeMam9HNM5bvXYLkbI JUsg+kgCNcyd+1HQ0aASd/+/PPN52s1XEltUA9ArBv+cd2OUGytuqMI1UyLxvQWO xfX8N1to9WlNXdNob/7jNjBtHApr0E/4oWtQt8k0VP1iHB05fD68DMet8Wyo/U/A WxgMuqq/xabbilXvVLaVny05p51svqI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:42 2025 by rpki-client