$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dceab300-1271-320a-a0fe-1ee3cac13580.roa File: dceab300-1271-320a-a0fe-1ee3cac13580.roa (raw, json) Hash identifier: iIqK8WufhrAvUzaxa7IkliF/H3TMFvPwjrDQ0OBM8Dw= Subject key identifier: AC:CD:C1:94:10:1E:82:40:58:68:F4:F2:EF:0C:88:A2:6F:D0:A4:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C45CDF7707DB2137A7500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dceab300-1271-320a-a0fe-1ee3cac13580.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.110.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:45:cd:f7:70:7d:b2:13:7a:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=ee62d022-1687-46fc-b094-6cef54ff760d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:78:67:1f:01:67:6b:7c:b8:96:6a:fa:af: 5d:55:05:f3:88:0e:25:d5:14:25:38:64:f4:ed:9b: b1:e7:65:29:06:13:f9:f0:43:4c:fc:47:1d:c5:07: 8d:31:b9:4c:5d:6d:e4:77:f9:72:11:e2:c8:5c:66: ee:50:0f:fb:28:7a:76:72:97:57:1e:01:b0:3f:c9: 6d:ca:9c:73:9f:44:50:75:cb:a4:a3:32:53:f6:47: 09:47:54:4d:f4:5a:ee:e4:1e:95:a2:c3:0f:0f:eb: 65:f7:38:70:0c:32:9b:b2:46:52:1c:81:38:ca:73: e9:c7:5d:d9:84:ce:7a:25:95:39:48:03:9b:03:83: 54:12:b3:f4:2b:9c:b8:c5:2f:b8:86:90:a9:e6:58: 87:5d:5d:b2:06:e7:a6:cf:57:96:2a:e2:9b:c2:3c: e1:72:5b:20:03:31:28:c7:94:46:79:3d:d4:c9:8e: 40:41:10:4e:73:0c:25:54:94:bf:b9:fc:4c:c3:27: 2f:b0:68:c9:08:65:b8:e8:81:48:e0:75:cd:67:71: 0a:61:67:c8:26:1c:cf:e6:16:e9:3b:7a:b0:90:22: 9b:3f:b9:c1:ea:c3:69:e8:51:07:b6:8e:88:33:23: 09:44:0c:ca:50:68:21:da:8f:cd:c9:a8:e1:92:fc: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:C1:94:10:1E:82:40:58:68:F4:F2:EF:0C:88:A2:6F:D0:A4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dceab300-1271-320a-a0fe-1ee3cac13580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.110.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a9:00:9f:72:bf:71:27:48:14:78:35:f2:4e:b6:70:a7:f6: c2:2f:3b:94:b1:f0:da:a4:50:9a:2b:72:a7:cc:df:48:72:30: 34:43:df:cd:e3:73:73:f9:1f:c0:ad:d0:f1:51:3c:fb:50:aa: 41:f6:4b:a4:fa:5b:c1:9d:54:03:c7:91:b8:c3:61:2c:88:8f: 3c:6e:d1:79:46:99:19:6a:b0:20:e3:a3:0e:3e:50:9d:17:42: 45:50:dc:45:b6:31:d3:b3:1b:a0:0a:17:32:ad:91:52:7f:7f: 1d:49:ae:f2:56:78:52:3d:30:dd:b0:8b:ba:8a:b2:10:39:e0: aa:4a:37:ef:33:6e:09:14:eb:4f:50:37:4f:a7:69:3b:ef:1a: a2:07:28:6f:73:69:a3:0e:2d:a3:e9:14:a5:3d:e2:ac:88:f6: a2:0e:48:38:63:85:1f:0e:c2:8e:55:8b:76:65:87:9e:75:f9: 0a:8f:34:2e:7c:c7:98:00:92:61:83:a4:75:ca:c9:b3:68:8d: d0:85:19:ea:e4:11:e9:dd:c7:5e:53:63:a6:c0:77:08:92:4c: 4a:cd:37:8c:d1:e5:a0:05:02:da:8d:a2:dd:7f:33:28:31:5e: af:48:7b:ce:96:a0:8d:69:0d:c0:c5:96:79:30:7a:40:49:ed: 46:d9:57:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEXN93B9shN6dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZWU2MmQwMjItMTY4Ny00NmZjLWIwOTQtNmNlZjU0ZmY3NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiV4Zx8BZ2t8uJZq+q9dVQXziA4l1RQlOGT0 7Zux52UpBhP58ENM/EcdxQeNMblMXW3kd/lyEeLIXGbuUA/7KHp2cpdXHgGwP8lt ypxzn0RQdcukozJT9kcJR1RN9Fru5B6VosMPD+tl9zhwDDKbskZSHIE4ynPpx13Z hM56JZU5SAObA4NUErP0K5y4xS+4hpCp5liHXV2yBuemz1eWKuKbwjzhclsgAzEo x5RGeT3UyY5AQRBOcwwlVJS/ufxMwycvsGjJCGW46IFI4HXNZ3EKYWfIJhzP5hbp O3qwkCKbP7nB6sNp6FEHto6IMyMJRAzKUGgh2o/Nyajhkvyh3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzNwZQQHoJAWGj08u8MiKJv0KS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGNlYWIzMDAtMTI3MS0z MjBhLWEwZmUtMWVlM2NhYzEzNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICpAJ9yv3EnSBR4NfJOtnCn9sIvO5Sx8NqkUJorcqfM30hyMDRD383j c3P5H8Ct0PFRPPtQqkH2S6T6W8GdVAPHkbjDYSyIjzxu0XlGmRlqsCDjow4+UJ0X QkVQ3EW2MdOzG6AKFzKtkVJ/fx1JrvJWeFI9MN2wi7qKshA54KpKN+8zbgkU609Q N0+naTvvGqIHKG9zaaMOLaPpFKU94qyI9qIOSDhjhR8Owo5Vi3Zlh551+QqPNC58 x5gAkmGDpHXKybNojdCFGerkEendx15TY6bAdwiSTErNN4zR5aAFAtqNot1/Mygx Xq9Ie86WoI1pDcDFlnkwekBJ7UbZV5U= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:25 2025 by rpki-client