$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7e8801-bede-39d8-b95d-2223aac96411.roa File: df7e8801-bede-39d8-b95d-2223aac96411.roa (raw, json) Hash identifier: T9B0BnYPh0dZYy4LmcSS1GOhaUJiStYJAgbkcaFzfKY= Subject key identifier: 4A:3C:35:FB:90:4E:5B:C0:A9:7D:C6:48:8B:17:B8:4B:F7:D0:AD:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066E95C8011F415A9BBF600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7e8801-bede-39d8-b95d-2223aac96411.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.96.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e9:5c:80:11:f4:15:a9:bb:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c3e70ebc-2aa5-47ec-a078-ab7c79f97f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:86:23:fd:76:ea:40:2b:e7:cd:df:93:28: b2:31:fe:57:79:fa:0b:91:16:68:3b:5a:5a:4f:bf: 1e:6d:ef:04:2d:ae:e6:33:3b:b1:43:ba:18:8e:07: 22:75:87:1f:33:fc:c3:4c:58:db:04:be:9b:35:c3: 55:f6:dc:16:f3:1b:0c:a0:ce:ef:22:06:00:34:d3: 91:c7:7a:11:d7:9e:3d:a0:b3:d3:05:72:eb:05:a1: b7:da:27:ac:d0:70:1a:de:7a:f5:aa:cd:61:95:ac: f2:49:3c:32:1f:5e:ff:d3:f9:9f:49:39:d1:26:fd: 34:17:f5:29:d2:67:af:68:2a:d1:0a:92:ec:80:5e: db:24:bd:4d:ce:1b:df:01:38:19:51:08:5a:42:df: 1d:1d:a1:88:4c:ae:91:29:fb:68:bd:8b:2d:0a:b3: 4f:66:6a:e3:40:7b:a2:29:ba:6f:85:af:c8:63:b4: 1a:b1:27:e6:f0:aa:55:e6:09:ae:83:00:b0:40:2e: 81:bc:97:03:39:76:b7:d7:98:bc:df:ab:a6:11:f5: 1a:f1:4d:c2:08:bc:dd:5b:ea:dc:97:dc:20:f0:4d: 64:92:2b:1c:e2:86:ce:30:2c:b7:63:78:e3:8f:e0: a0:3e:70:b3:05:17:45:c1:76:dd:60:02:ed:21:a4: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:35:FB:90:4E:5B:C0:A9:7D:C6:48:8B:17:B8:4B:F7:D0:AD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7e8801-bede-39d8-b95d-2223aac96411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:45:ea:e2:c5:f8:9b:68:50:3c:ff:65:68:71:08:ac:56:07: 35:82:cb:70:d5:9f:dd:cf:e9:0b:38:ac:91:7b:c3:41:da:b3: 74:1b:2e:6f:8b:2c:5e:24:ba:2a:4b:e5:15:29:54:c8:08:f0: 28:1a:6a:83:6d:a1:20:62:07:3d:de:74:2f:80:fb:74:02:39: ed:25:df:5e:5a:75:44:ac:30:fe:54:95:42:6c:09:63:6d:39: a9:49:c6:3c:2a:cd:b6:c2:f6:a8:b9:5e:3e:fb:3e:05:ff:e8: 70:c3:86:36:74:4c:0a:0f:ef:d8:fc:99:9a:b8:34:5e:f3:0a: 0d:ac:bd:1a:2b:77:e3:09:60:bf:2d:2a:cf:fa:66:ef:b0:49: 1c:ac:f7:bb:76:a3:e8:57:e4:2f:68:48:ad:fe:08:96:ba:fe: 19:d4:11:b3:60:31:74:23:30:bf:19:c8:a4:b6:86:da:1f:bd: 78:d7:a8:82:3c:45:7f:77:81:03:f2:0d:d4:67:c7:ba:07:b8: 6c:56:60:ab:b8:79:63:64:ef:34:d6:ef:67:8b:5f:b3:e1:ea: 73:97:00:9f:6c:69:63:bd:1f:6e:9f:ac:e0:c7:d9:be:11:26: f6:a1:52:7f:14:7c:96:61:d1:b5:bc:15:ef:f2:28:ac:97:d2: c3:6a:01:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZulcgBH0Fam79gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzNlNzBlYmMtMmFhNS00N2VjLWEwNzgtYWI3Yzc5Zjk3Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ECGI/126kAr583fkyiyMf5XefoLkRZoO1pa T78ebe8ELa7mMzuxQ7oYjgcidYcfM/zDTFjbBL6bNcNV9twW8xsMoM7vIgYANNOR x3oR1549oLPTBXLrBaG32ies0HAa3nr1qs1hlazySTwyH17/0/mfSTnRJv00F/Up 0mevaCrRCpLsgF7bJL1NzhvfATgZUQhaQt8dHaGITK6RKftovYstCrNPZmrjQHui Kbpvha/IY7QasSfm8KpV5gmugwCwQC6BvJcDOXa315i836umEfUa8U3CCLzdW+rc l9wg8E1kkisc4obOMCy3Y3jjj+CgPnCzBRdFwXbdYALtIaSUOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo8NfuQTlvAqX3GSIsXuEv30K18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGY3ZTg4MDEtYmVkZS0z OWQ4LWI5NWQtMjIyM2FhYzk2NDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5F6uLF+JtoUDz/ZWhxCKxWBzWCy3DVn93P6Qs4rJF7w0Has3QbLm+L LF4kuipL5RUpVMgI8CgaaoNtoSBiBz3edC+A+3QCOe0l315adUSsMP5UlUJsCWNt OalJxjwqzbbC9qi5Xj77PgX/6HDDhjZ0TAoP79j8mZq4NF7zCg2svRord+MJYL8t Ks/6Zu+wSRys97t2o+hX5C9oSK3+CJa6/hnUEbNgMXQjML8ZyKS2htofvXjXqII8 RX93gQPyDdRnx7oHuGxWYKu4eWNk7zTW72eLX7Ph6nOXAJ9saWO9H26frODH2b4R JvahUn8UfJZh0bW8Fe/yKKyX0sNqAUc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:26 2025 by rpki-client