$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbde4c5e-54a7-36a2-8dda-3cf15a636cc2.roa File: dbde4c5e-54a7-36a2-8dda-3cf15a636cc2.roa (raw, json) Hash identifier: iQ8Qa+EMoTK8Ro1sPdhvCx0wv71TY9cn7/AqGS/0n1I= Subject key identifier: A1:F3:C4:AD:0A:66:CD:18:36:A3:CF:F0:6B:58:24:0C:5C:BF:47:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C545B4434437150B5AF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbde4c5e-54a7-36a2-8dda-3cf15a636cc2.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:54:5b:44:34:43:71:50:b5:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=bc88293a-2047-4dac-b09f-0829a6dc8375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:5f:67:1d:88:e3:62:f6:89:b4:a6:2d:c0: 1f:58:13:ed:f1:d3:9a:4a:66:7f:cd:49:b9:e5:67: 17:5b:00:c6:9a:78:33:d0:ce:62:4e:ac:ab:a8:d3: 3e:f9:16:82:f9:9b:12:4d:47:87:6d:ca:2e:cc:77: 73:a8:94:79:37:79:de:29:35:58:8a:d9:ad:6b:ab: 04:60:10:f1:54:22:87:50:88:37:d8:1d:73:fb:70: 07:ee:1d:1c:f5:be:f1:24:63:6c:bc:a4:5c:f6:02: 3c:dc:9d:eb:69:90:f0:44:62:6d:09:07:02:34:ef: 03:42:2d:9a:d1:a7:c5:40:c9:c2:8e:a1:7b:9d:4a: 9b:f2:df:e6:f0:3d:c1:7b:aa:9d:e6:73:35:92:c7: 61:18:10:16:7b:78:22:21:c8:b6:5f:ea:25:92:2b: 21:f8:4b:e3:3c:0b:0e:37:fd:85:0b:79:a8:dc:60: 21:2f:c0:60:8c:30:82:6d:32:89:02:95:d6:9f:72: de:e2:26:5d:30:1c:b5:b8:87:d5:52:04:d5:37:6d: 2a:33:45:71:20:fc:bf:c3:3c:4c:33:b2:4b:ff:68: 75:f4:3c:df:c9:13:df:9e:f0:3e:50:cc:91:8a:19: 21:37:9b:75:78:60:56:83:81:00:5e:9d:74:24:db: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F3:C4:AD:0A:66:CD:18:36:A3:CF:F0:6B:58:24:0C:5C:BF:47:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbde4c5e-54a7-36a2-8dda-3cf15a636cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:21:5b:b9:b0:7d:e4:c5:61:32:a1:0d:1d:e2:8d:e0:3d:72: 60:8e:4c:ed:8e:4a:cb:e9:63:7a:0e:5d:32:d6:24:da:05:a7: 03:64:21:b6:5f:7a:23:23:c6:3f:a5:08:41:66:f1:8e:4b:35: c3:c5:fb:6d:cf:70:9a:d4:f3:bf:93:a1:02:10:83:b6:8e:c5: 78:e5:1b:aa:43:00:10:6d:23:96:53:48:5b:63:32:c0:2f:6f: e0:5d:cc:74:a4:54:0d:57:23:d6:8e:c9:f1:ee:82:f9:4a:da: d3:8d:87:3b:da:2c:47:2a:ab:f0:8e:c9:99:26:22:61:d7:49: e8:12:e4:e8:2f:88:20:1b:3c:95:96:b7:35:ce:b2:d6:3c:61: 9a:d8:c3:d7:90:c2:82:35:32:c9:f9:27:5e:0c:87:aa:8e:49: 3a:15:26:57:d0:5d:8d:7f:bb:31:2d:46:e4:e9:ac:7d:51:6e: 80:68:09:9a:b1:32:fd:93:4a:3d:76:17:e6:f7:f2:d6:92:4b: a4:0b:5d:ac:15:3b:46:d9:20:95:a8:4f:36:83:d3:10:a5:af: 42:8e:79:38:98:75:b9:18:04:19:67:c5:5b:43:b2:5a:00:32: f6:f2:ba:dd:c5:c2:20:d5:c7:11:cf:ad:f7:61:0b:66:7f:c8: 74:87:48:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFRbRDRDcVC1rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YmM4ODI5M2EtMjA0Ny00ZGFjLWIwOWYtMDgyOWE2ZGM4Mzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1VfZx2I42L2ibSmLcAfWBPt8dOaSmZ/zUm5 5WcXWwDGmngz0M5iTqyrqNM++RaC+ZsSTUeHbcouzHdzqJR5N3neKTVYitmta6sE YBDxVCKHUIg32B1z+3AH7h0c9b7xJGNsvKRc9gI83J3raZDwRGJtCQcCNO8DQi2a 0afFQMnCjqF7nUqb8t/m8D3Be6qd5nM1ksdhGBAWe3giIci2X+olkish+EvjPAsO N/2FC3mo3GAhL8BgjDCCbTKJApXWn3Le4iZdMBy1uIfVUgTVN20qM0VxIPy/wzxM M7JL/2h19DzfyRPfnvA+UMyRihkhN5t1eGBWg4EAXp10JNuMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHzxK0KZs0YNqPP8GtYJAxcv0fOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGJkZTRjNWUtNTRhNy0z NmEyLThkZGEtM2NmMTVhNjM2Y2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAshW7mwfeTFYTKhDR3ijeA9cmCOTO2OSsvpY3oOXTLWJNoFpwNkIbZf eiMjxj+lCEFm8Y5LNcPF+23PcJrU87+ToQIQg7aOxXjlG6pDABBtI5ZTSFtjMsAv b+BdzHSkVA1XI9aOyfHugvlK2tONhzvaLEcqq/COyZkmImHXSegS5OgviCAbPJWW tzXOstY8YZrYw9eQwoI1Msn5J14Mh6qOSToVJlfQXY1/uzEtRuTprH1RboBoCZqx Mv2TSj12F+b38taSS6QLXawVO0bZIJWoTzaD0xClr0KOeTiYdbkYBBlnxVtDsloA Mvbyut3FwiDVxxHPrfdhC2Z/yHSHSIk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:26 2025 by rpki-client