$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ead2406b-c06d-3380-8f63-b5aace021b3e.roa File: ead2406b-c06d-3380-8f63-b5aace021b3e.roa (raw, json) Hash identifier: o4+g2qFmDSk1hQo0ymFHExrGoDnj3Wbskew8pD+2710= Subject key identifier: 99:BA:03:52:84:9F:D5:5C:45:68:62:41:EB:5B:83:9C:CF:1E:AC:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374561EDC0C8EB387092D8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ead2406b-c06d-3380-8f63-b5aace021b3e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.96.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:45:61:ed:c0:c8:eb:38:70:92:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=8e0b0575-e9f5-4384-a97f-b0adff7d95ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:fc:ed:3b:05:32:65:17:89:fd:5d:4e:a6: 11:dc:9b:22:68:2c:16:31:43:4a:a4:a1:d9:87:d1: 8c:d4:d7:98:0e:11:b3:41:2b:12:49:b3:12:d5:8a: 34:82:42:49:ea:41:24:e2:4c:3c:5f:87:25:2a:b1: 2b:8b:71:61:75:d6:9c:d1:13:bb:4e:52:11:e0:91: d1:de:e7:69:d4:e0:cb:c2:e5:de:f8:b9:3b:f4:32: 0b:8d:52:db:c7:db:24:bf:92:d5:54:db:aa:e5:d1: 20:43:51:95:c9:d0:86:10:6f:f4:27:e5:1d:10:a8: 89:73:3d:56:ef:43:49:8e:88:a2:ec:54:d4:e6:39: 4d:8c:8d:d8:a9:25:72:5f:b8:ac:44:a6:25:fd:a5: a4:b6:e4:cf:41:7f:c4:87:5c:d8:18:5a:10:48:3d: fb:31:ae:04:59:c3:5b:a0:ce:2d:af:b1:4f:09:2e: be:01:a0:fd:54:ed:64:bb:dd:d7:0d:23:e0:b5:b2: ae:c3:a0:c9:7a:d9:e1:56:93:94:8a:ae:cd:ec:61: 59:e0:b1:51:63:ce:10:1d:93:39:dc:e2:66:40:dc: a4:94:80:50:7d:3c:5c:2b:27:81:24:dc:46:2d:fb: d5:d4:b4:ec:9f:fa:d3:71:9e:8f:09:02:a6:da:d2: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:03:52:84:9F:D5:5C:45:68:62:41:EB:5B:83:9C:CF:1E:AC:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ead2406b-c06d-3380-8f63-b5aace021b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:69:f0:0d:0c:82:77:77:84:a5:60:31:15:38:06:e4:0b:d3: a3:96:cd:8c:5e:55:61:04:f0:c2:82:cf:5c:aa:77:ff:72:85: c7:15:a3:a8:af:f9:4e:d0:ea:06:02:34:47:ac:aa:4f:77:d2: 11:13:6c:1f:a3:7c:8c:17:06:05:7d:c7:82:f8:9d:22:6e:6c: dd:a6:64:10:ff:d1:65:de:94:df:30:3c:bb:d0:ad:57:44:30: f1:20:6f:ce:5a:6a:19:91:1e:06:26:ff:a1:19:43:f4:8f:48: 1b:4b:5d:a5:06:6e:42:53:63:31:33:63:58:a0:4f:db:5d:63: 0d:e0:64:31:7a:4b:ef:55:d1:d9:ec:97:13:11:b9:66:ae:14: 26:6d:eb:eb:fa:ad:6b:22:84:d6:74:1c:19:f3:f8:b8:a8:f7: 9d:02:48:97:76:4b:7b:ce:27:a1:2f:92:e3:05:95:9b:6b:21: 35:17:64:1d:b0:6d:6c:66:80:91:5e:a4:dc:7b:17:03:53:25: 45:f4:18:06:c1:6f:ed:99:bf:99:79:83:ff:d1:92:f1:46:72: 26:e1:ac:57:23:d0:1e:36:a4:4d:59:c9:00:2e:6f:9d:3b:b4: 49:ca:6a:f9:23:06:68:d9:2f:a1:b5:61:b4:97:77:a5:0d:90: 7c:ca:49:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0Vh7cDI6zhwktgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGUwYjA1NzUtZTlmNS00Mzg0LWE5N2YtYjBhZGZmN2Q5NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlP87TsFMmUXif1dTqYR3JsiaCwWMUNKpKHZ h9GM1NeYDhGzQSsSSbMS1Yo0gkJJ6kEk4kw8X4clKrEri3Fhddac0RO7TlIR4JHR 3udp1ODLwuXe+Lk79DILjVLbx9skv5LVVNuq5dEgQ1GVydCGEG/0J+UdEKiJcz1W 70NJjoii7FTU5jlNjI3YqSVyX7isRKYl/aWktuTPQX/Eh1zYGFoQSD37Ma4EWcNb oM4tr7FPCS6+AaD9VO1ku93XDSPgtbKuw6DJetnhVpOUiq7N7GFZ4LFRY84QHZM5 3OJmQNyklIBQfTxcKyeBJNxGLfvV1LTsn/rTcZ6PCQKm2tIyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm6A1KEn9VcRWhiQetbg5zPHqzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWFkMjQwNmItYzA2ZC0z MzgwLThmNjMtYjVhYWNlMDIxYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGA/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtp8A0Mgnd3hKVgMRU4BuQL06OWzYxeVWEE8MKCz1yqd/9yhccVo6iv +U7Q6gYCNEesqk930hETbB+jfIwXBgV9x4L4nSJubN2mZBD/0WXelN8wPLvQrVdE MPEgb85aahmRHgYm/6EZQ/SPSBtLXaUGbkJTYzEzY1igT9tdYw3gZDF6S+9V0dns lxMRuWauFCZt6+v6rWsihNZ0HBnz+Lio950CSJd2S3vOJ6EvkuMFlZtrITUXZB2w bWxmgJFepNx7FwNTJUX0GAbBb+2Zv5l5g//RkvFGcibhrFcj0B42pE1ZyQAub507 tEnKavkjBmjZL6G1YbSXd6UNkHzKSR8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:35 2025 by rpki-client