$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb02ea4f-1cc6-3919-bef0-d5d52210053d.roa File: eb02ea4f-1cc6-3919-bef0-d5d52210053d.roa (raw, json) Hash identifier: SGwQWGMeaXIOOfMHyGJOGEzHwY3kuwr5yPgpT5mJnGE= Subject key identifier: 52:48:4F:1E:A4:78:31:9D:6B:AE:30:28:76:E4:EC:FE:66:30:2C:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C21858CC4ED061A522380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb02ea4f-1cc6-3919-bef0-d5d52210053d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:21:85:8c:c4:ed:06:1a:52:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=23adc426-e1e2-4664-9755-6bb372a29eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:e9:8c:b5:fe:86:fe:d1:55:8c:a7:91:2f: 67:89:20:27:59:0f:8d:b0:54:10:47:f6:a9:08:24: 9d:f5:29:9f:82:03:47:50:34:c3:9f:0b:81:9a:fd: 71:d3:3e:06:9a:a7:7a:b3:ee:48:fa:00:e6:84:1c: 1e:f0:96:bc:1e:65:64:79:5c:d2:ac:b1:c2:19:e0: b9:f5:e2:ec:91:90:df:3d:33:22:b4:e1:75:18:7a: 07:bd:ba:f4:e8:90:a5:d7:45:5e:f4:82:3f:50:62: cc:62:6e:ff:da:d8:57:30:21:05:4c:5b:48:bb:11: 07:ca:1f:25:ff:93:6c:59:13:f5:a6:3e:89:0a:b5: bf:b8:b8:33:7f:61:ff:81:14:7c:32:fe:41:39:71: 95:6d:55:d3:75:72:c7:17:00:d8:61:bc:a3:7e:71: f3:24:f0:03:9b:ca:fa:c1:cc:60:1b:b6:70:0d:97: 8c:8e:77:78:9b:cf:b5:2c:7f:00:60:e0:32:11:a2: 2c:b4:2a:14:cc:ea:8b:1a:1a:7a:69:a4:60:af:49: 0e:25:5c:d1:5b:b7:77:fa:53:1e:1b:54:ce:c9:78: 39:25:7b:ab:fb:38:2b:fa:35:5e:40:4d:d7:05:2a: f5:09:f4:8b:30:62:0b:6a:96:26:65:ab:fe:e3:6a: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:4F:1E:A4:78:31:9D:6B:AE:30:28:76:E4:EC:FE:66:30:2C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb02ea4f-1cc6-3919-bef0-d5d52210053d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0b:c4:21:29:70:e4:c5:ce:35:5f:9b:c3:d0:17:62:23:de: 99:13:19:1d:f8:fc:ce:3e:2e:82:87:fd:4f:d4:bb:93:c6:22: 01:4b:cd:dc:85:84:52:00:96:63:04:10:4c:58:b1:32:58:37: 2d:39:e5:78:10:a9:82:1c:38:69:1b:71:7e:ec:c0:3f:06:d1: 78:1f:a4:0f:70:59:80:9a:b7:23:67:f3:53:55:41:59:6a:e1: 4d:27:b1:66:5f:8e:40:6c:a5:53:68:de:23:8d:11:52:25:8a: 49:b7:69:01:23:06:41:e3:3f:48:b0:06:49:53:8b:36:e6:f6: e9:f3:65:93:ae:f1:66:2f:7d:a1:d3:ea:95:16:c6:1a:95:48: 01:f2:65:70:75:89:b9:8d:e6:5b:e6:e6:2d:30:0a:c0:3a:fc: 90:a8:29:b9:4a:f1:63:b6:e9:51:cd:ff:f4:6c:72:38:75:bd: 22:02:37:c7:82:36:48:85:45:0e:1c:2b:7a:2f:fe:8c:14:b4: 0c:4e:e2:46:e5:0a:7b:bf:dc:c2:df:b0:69:3a:c5:18:a0:24: 6f:5a:22:ac:6b:6e:f1:91:02:8d:2c:fd:d3:df:df:6b:3a:9a: 27:ef:d2:3d:4d:0f:b9:d9:00:3c:e9:0c:19:b6:b0:02:fc:9c: 0b:a2:1c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCGFjMTtBhpSI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MjNhZGM0MjYtZTFlMi00NjY0LTk3NTUtNmJiMzcyYTI5ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN7pjLX+hv7RVYynkS9niSAnWQ+NsFQQR/ap CCSd9SmfggNHUDTDnwuBmv1x0z4Gmqd6s+5I+gDmhBwe8Ja8HmVkeVzSrLHCGeC5 9eLskZDfPTMitOF1GHoHvbr06JCl10Ve9II/UGLMYm7/2thXMCEFTFtIuxEHyh8l /5NsWRP1pj6JCrW/uLgzf2H/gRR8Mv5BOXGVbVXTdXLHFwDYYbyjfnHzJPADm8r6 wcxgG7ZwDZeMjnd4m8+1LH8AYOAyEaIstCoUzOqLGhp6aaRgr0kOJVzRW7d3+lMe G1TOyXg5JXur+zgr+jVeQE3XBSr1CfSLMGILapYmZav+42olFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJITx6keDGda64wKHbk7P5mMCw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWIwMmVhNGYtMWNjNi0z OTE5LWJlZjAtZDVkNTIyMTAwNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMLxCEpcOTFzjVfm8PQF2Ij3pkTGR34/M4+LoKH/U/Uu5PGIgFLzdyF hFIAlmMEEExYsTJYNy055XgQqYIcOGkbcX7swD8G0XgfpA9wWYCatyNn81NVQVlq 4U0nsWZfjkBspVNo3iONEVIlikm3aQEjBkHjP0iwBklTizbm9unzZZOu8WYvfaHT 6pUWxhqVSAHyZXB1ibmN5lvm5i0wCsA6/JCoKblK8WO26VHN//Rscjh1vSICN8eC NkiFRQ4cK3ov/owUtAxO4kblCnu/3MLfsGk6xRigJG9aIqxrbvGRAo0s/dPf32s6 mifv0j1ND7nZADzpDBm2sAL8nAuiHHs= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:43 2025 by rpki-client