$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5180d10-8531-33c2-8632-3024cfbfd884.roa File: d5180d10-8531-33c2-8632-3024cfbfd884.roa (raw, json) Hash identifier: YrecPFDJ0PJFkLF0/p8B+4Q4Ors8sJglcCqFPaMo4d8= Subject key identifier: A4:B2:A7:4D:AC:2A:5B:93:8E:62:2F:13:C4:5B:4E:D1:63:E7:B0:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C43026044FCD4BD1D6800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5180d10-8531-33c2-8632-3024cfbfd884.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.109.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:43:02:60:44:fc:d4:bd:1d:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3a5fd096-85b5-4379-beca-131b57fa2f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:fd:66:2f:d1:cd:3b:05:af:a2:28:e7:69: d5:e4:60:4b:60:38:88:cf:79:72:af:bb:10:38:a7: f3:f0:39:3b:eb:43:f7:e1:b9:01:8b:ff:fd:02:0a: e9:01:09:6c:c2:cd:7a:b3:53:69:03:91:55:07:b1: 8d:db:5f:92:15:b3:a7:ae:58:f4:a9:94:0f:17:59: bf:18:cf:04:e7:e1:34:7f:bd:72:6b:a4:3b:8c:c5: c9:1f:44:f8:28:97:ae:b5:f5:e6:80:6a:5f:95:ee: f5:b0:8e:e2:b4:01:ca:24:ad:39:df:56:55:b0:40: 87:de:67:ef:dc:5d:b3:fa:bc:3a:b3:1e:fe:fd:3b: e5:a8:f5:9d:cd:fb:24:bf:ea:ea:ff:ac:bd:f9:95: 9f:95:40:21:2a:2f:20:65:06:68:3b:19:00:1e:f9: da:a4:58:59:aa:e5:3c:63:44:e5:c5:96:3e:5f:d4: 96:cb:ff:2d:11:bd:d9:bc:a8:a8:57:28:2d:7a:4c: bb:08:3a:ab:77:85:bb:1b:94:88:8d:27:b8:6d:31: d1:c9:ec:3b:6f:e4:31:e5:56:32:7a:0b:67:66:23: 70:8e:3a:a7:41:57:bc:d0:43:cf:33:46:bf:8a:1f: e8:90:c1:24:4c:f3:01:a4:1a:8a:ce:d4:b8:6d:64: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:A7:4D:AC:2A:5B:93:8E:62:2F:13:C4:5B:4E:D1:63:E7:B0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5180d10-8531-33c2-8632-3024cfbfd884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:af:85:8c:58:e5:cc:39:60:dd:2a:cd:c4:98:ed:c5:98:a2: 0a:cb:de:f8:83:a9:ba:2a:98:9f:c9:3a:cf:31:2a:f2:fe:3e: 6b:31:57:11:8a:f3:8e:0a:96:32:76:90:eb:30:37:fc:01:a9: 79:59:97:2d:3e:46:ec:67:4a:27:3b:23:cb:bf:01:43:19:8d: 82:e7:07:95:70:85:ea:80:54:a4:09:89:8c:d8:23:79:99:34: 91:90:74:d8:95:24:b3:80:9f:e3:c9:d4:80:46:63:5e:cd:ee: c5:b0:11:14:91:b6:72:3c:c0:0e:49:21:53:97:c6:3d:ab:49: ab:74:e1:67:f1:e8:b0:20:2d:a8:3e:63:6b:02:79:ea:c7:6b: 95:33:29:ea:d2:66:6a:28:b5:ff:53:d1:ab:2b:06:bd:d1:d5: 1f:cf:f2:db:c0:4c:34:88:11:22:41:a6:8d:ac:d2:19:bf:b7: e7:99:82:f3:85:df:b6:d9:35:3e:49:57:22:11:44:36:4b:8b: e9:48:76:16:33:61:b0:95:92:d5:24:0c:f1:61:80:5d:65:14: 5b:5a:a7:5e:51:dc:eb:e5:85:86:45:91:05:4d:60:f7:6b:b3: f6:56:c6:b2:2e:3c:08:c7:1a:ff:8a:68:68:79:30:c7:1b:64: 46:12:e7:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEMCYET81L0daAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk M2E1ZmQwOTYtODViNS00Mzc5LWJlY2EtMTMxYjU3ZmEyZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTr9Zi/RzTsFr6Io52nV5GBLYDiIz3lyr7sQ OKfz8Dk760P34bkBi//9AgrpAQlsws16s1NpA5FVB7GN21+SFbOnrlj0qZQPF1m/ GM8E5+E0f71ya6Q7jMXJH0T4KJeutfXmgGpfle71sI7itAHKJK0531ZVsECH3mfv 3F2z+rw6sx7+/TvlqPWdzfskv+rq/6y9+ZWflUAhKi8gZQZoOxkAHvnapFhZquU8 Y0TlxZY+X9SWy/8tEb3ZvKioVygteky7CDqrd4W7G5SIjSe4bTHRyew7b+Qx5VYy egtnZiNwjjqnQVe80EPPM0a/ih/okMEkTPMBpBqKztS4bWRf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSyp02sKluTjmIvE8RbTtFj57CCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDUxODBkMTAtODUzMS0z M2MyLTg2MzItMzAyNGNmYmZkODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOvhYxY5cw5YN0qzcSY7cWYogrL3viDqboqmJ/JOs8xKvL+PmsxVxGK 844KljJ2kOswN/wBqXlZly0+RuxnSic7I8u/AUMZjYLnB5VwheqAVKQJiYzYI3mZ NJGQdNiVJLOAn+PJ1IBGY17N7sWwERSRtnI8wA5JIVOXxj2rSat04Wfx6LAgLag+ Y2sCeerHa5UzKerSZmootf9T0asrBr3R1R/P8tvATDSIESJBpo2s0hm/t+eZgvOF 37bZNT5JVyIRRDZLi+lIdhYzYbCVktUkDPFhgF1lFFtap15R3OvlhYZFkQVNYPdr s/ZWxrIuPAjHGv+KaGh5MMcbZEYS52A= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:56 2025 by rpki-client