$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4944cf3-b58c-3367-83be-46fcde4b0dae.roa File: d4944cf3-b58c-3367-83be-46fcde4b0dae.roa (raw, json) Hash identifier: f9EQ32Fg32E3RAH91eRX7LY8pXRNljnHwRZOqR+WQrc= Subject key identifier: 1A:F7:21:26:0A:FE:1F:EF:66:0D:C3:52:60:A4:59:10:E0:51:13:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FF84768BF25F0DE986A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4944cf3-b58c-3367-83be-46fcde4b0dae.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:ff:84:76:8b:f2:5f:0d:e9:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=5f771ea1-10bf-4a2b-ad41-1feaf805b9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:4c:9a:70:d1:40:10:07:28:41:55:2d:46: 80:66:f8:8d:90:6c:85:03:bb:b3:dd:e4:ed:e8:41: 1a:be:26:6a:87:37:a8:9c:fd:bc:bb:18:10:ef:ce: 72:c7:e7:6c:0c:96:2c:67:39:ae:b3:53:48:f0:35: 44:2d:21:a2:70:ac:5d:47:54:b0:68:c5:4f:d6:d6: f0:46:11:b5:ac:80:1c:0e:0a:87:fc:bc:7a:61:a6: 8f:a7:53:9e:5e:3f:1b:ca:d4:f1:ac:2c:93:1c:e1: 81:8d:0f:f9:62:51:e5:d4:c9:9c:a8:34:2a:61:b8: fa:42:2c:be:ed:c5:52:48:52:d7:e4:cc:3a:6e:38: c2:43:0a:31:a6:a7:9b:32:f7:23:26:5a:24:e5:a3: 90:a3:36:4c:0a:28:ea:46:d9:bc:09:a8:15:9f:03: 0d:2a:ab:17:66:b2:d2:f6:e5:94:ad:82:c1:6e:78: 74:55:e7:0b:fc:f6:0d:51:f6:6f:7d:0e:14:a8:5d: ce:1e:f9:a3:5a:e8:4c:4b:b5:34:55:00:5a:e4:1a: 6e:b9:3a:d5:4e:9f:4b:74:ef:b9:a7:87:1c:dd:b0: 79:77:9f:7d:d1:57:54:bd:0a:97:d6:47:43:87:25: 74:81:6c:04:95:0a:10:92:a8:3d:97:b7:93:c5:0d: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F7:21:26:0A:FE:1F:EF:66:0D:C3:52:60:A4:59:10:E0:51:13:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4944cf3-b58c-3367-83be-46fcde4b0dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f7:04:d4:e0:57:8c:2e:dc:7a:f7:44:66:0d:0f:8a:e1:21: a3:32:e3:98:2a:aa:19:b6:62:f3:b3:d0:8f:80:42:0a:4f:46: 6a:10:99:ed:b6:96:9b:02:55:27:df:7a:08:56:9f:79:aa:22: 6c:0d:1f:85:33:31:12:fe:6d:24:c9:d5:82:17:a4:d8:32:a4: bd:89:59:76:e4:78:5d:dc:b2:22:3c:d7:f2:87:44:c4:a6:81: ed:1f:43:3d:0c:9a:28:a0:63:9f:58:07:79:f2:e1:68:9b:9d: 4e:85:5e:62:68:84:e1:0d:24:73:ac:45:15:28:ef:08:a0:3e: 3b:73:03:64:c5:7f:51:33:27:7a:70:f4:34:8b:14:59:85:ba: 10:35:a0:a4:1e:76:35:aa:4c:ea:e0:7b:a7:6e:df:ea:e6:7f: 0d:56:0d:ac:d0:c1:8d:25:a8:bf:7a:c0:b4:b7:79:66:11:f7: b0:e0:53:04:47:8c:6e:2b:b7:74:51:88:44:1b:0c:80:73:b2: 8e:19:f1:37:23:dd:9b:9f:fa:dc:24:56:58:99:c6:41:8b:8e: 05:b6:20:5e:d5:2a:83:01:67:e7:da:13:99:09:8f:8c:f3:b2: 37:85:47:8e:d4:c7:50:0e:24:26:11:60:60:3a:10:eb:08:aa: a6:47:db:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZv+EdovyXw3phqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NWY3NzFlYTEtMTBiZi00YTJiLWFkNDEtMWZlYWY4MDViOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/FMmnDRQBAHKEFVLUaAZviNkGyFA7uz3eTt 6EEaviZqhzeonP28uxgQ785yx+dsDJYsZzmus1NI8DVELSGicKxdR1SwaMVP1tbw RhG1rIAcDgqH/Lx6YaaPp1OeXj8bytTxrCyTHOGBjQ/5YlHl1MmcqDQqYbj6Qiy+ 7cVSSFLX5Mw6bjjCQwoxpqebMvcjJlok5aOQozZMCijqRtm8CagVnwMNKqsXZrLS 9uWUrYLBbnh0VecL/PYNUfZvfQ4UqF3OHvmjWuhMS7U0VQBa5BpuuTrVTp9LdO+5 p4cc3bB5d5990VdUvQqX1kdDhyV0gWwElQoQkqg9l7eTxQ2YjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr3ISYK/h/vZg3DUmCkWRDgUROJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQ5NDRjZjMtYjU4Yy0z MzY3LTgzYmUtNDZmY2RlNGIwZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ33BNTgV4wu3Hr3RGYND4rhIaMy45gqqhm2YvOz0I+AQgpPRmoQme22 lpsCVSffeghWn3mqImwNH4UzMRL+bSTJ1YIXpNgypL2JWXbkeF3csiI81/KHRMSm ge0fQz0MmiigY59YB3ny4WibnU6FXmJohOENJHOsRRUo7wigPjtzA2TFf1EzJ3pw 9DSLFFmFuhA1oKQedjWqTOrge6du3+rmfw1WDazQwY0lqL96wLS3eWYR97DgUwRH jG4rt3RRiEQbDIBzso4Z8Tcj3Zuf+twkVliZxkGLjgW2IF7VKoMBZ+faE5kJj4zz sjeFR47Ux1AOJCYRYGA6EOsIqqZH23g= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:30 2025 by rpki-client