$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef563080-e659-3063-8752-22be69d5297a.roa File: ef563080-e659-3063-8752-22be69d5297a.roa (raw, json) Hash identifier: e4rL3zC6BcNUrddOuFWFTe6qaQL7jDA5I6IFT+dJLtU= Subject key identifier: 3B:38:DE:B2:DE:08:89:A2:2F:15:BD:87:CD:22:59:31:78:9A:EC:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F13DA4B753E944654A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef563080-e659-3063-8752-22be69d5297a.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f1:3d:a4:b7:53:e9:44:65:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=78e0f5ce-bbf1-422d-b6e3-b0bb5038058b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:48:77:72:3a:3e:17:cb:76:a4:1d:64:62: 3b:4c:12:d8:8a:c0:e1:67:f9:33:ce:dc:98:ea:e9: 48:ca:31:46:3a:b9:26:9d:66:ad:76:58:f8:c5:9d: ec:18:75:7a:51:9e:e8:53:22:a8:4e:ba:11:b5:4f: a9:b6:b0:37:0f:d3:f5:68:75:3e:05:a1:05:80:bc: df:3d:f8:16:a8:41:2d:d1:c7:f3:5a:d2:10:22:c4: ab:c3:a2:ce:f4:87:81:8d:08:d5:8c:cc:b7:23:79: fa:8a:c5:fc:a7:b0:cc:4d:ac:61:50:e0:22:57:0f: cb:f1:2f:9c:dc:3b:c8:28:44:b9:fe:76:22:29:7a: 71:d5:d6:04:37:74:40:03:ee:e9:ac:11:74:30:be: 82:64:96:36:f5:47:4b:10:01:ac:59:61:b5:87:b6: dc:b5:3e:d3:4c:17:cd:db:9a:0d:6d:9c:96:69:a5: df:0a:dd:cc:cf:d8:9c:45:5b:1f:1c:da:c8:fb:77: e3:e6:51:83:10:19:fd:a4:95:cb:16:24:42:a9:2d: 37:f6:f6:a5:b2:18:53:7f:c4:36:3a:06:22:59:c3: 73:cb:41:2f:21:dc:fa:79:91:b9:9b:18:96:83:c8: 52:09:b9:ca:74:b9:e3:bb:c8:57:90:36:66:13:da: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:38:DE:B2:DE:08:89:A2:2F:15:BD:87:CD:22:59:31:78:9A:EC:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef563080-e659-3063-8752-22be69d5297a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:24:e5:e0:3d:71:e5:12:00:da:a4:5e:dc:78:23:ae:ce:89: 67:b7:11:81:79:fa:87:74:7c:e3:62:4b:22:ce:f1:0a:31:b5: bf:99:40:ce:c2:23:4a:26:77:03:cd:b8:50:0a:b6:4b:4e:ba: 5c:78:10:79:12:a8:e4:b5:db:96:55:4e:3b:a1:93:dc:5a:b2: 79:b4:40:c3:5f:eb:6f:e7:2b:d3:df:7a:1f:30:bc:a7:ec:51: 5e:7e:5b:7b:a2:cd:fe:e5:c4:41:1c:92:81:be:dd:63:1c:cc: aa:25:7f:26:0b:fe:6a:93:d9:78:3d:50:eb:c5:6a:33:5d:17: e4:ae:b2:47:f9:b2:1f:59:90:bb:32:5a:44:bd:36:45:f4:c3: 40:cf:f8:64:9b:a8:0a:95:be:3f:0a:bc:4c:4d:6f:20:4b:87: 84:89:c1:16:04:c9:0d:f5:87:7f:3d:6d:25:bf:92:8b:f7:ed: 4c:8f:a0:30:0c:12:29:72:f7:2e:a5:fa:84:2f:12:d4:fe:fe: 61:26:fc:29:6d:8f:69:7c:04:cf:e8:37:18:1f:3b:bf:c1:f1: d1:c2:14:bb:5e:02:42:da:b5:8f:62:65:7b:93:f6:0d:8c:87: 9a:08:6c:9c:75:9a:cd:01:aa:8c:25:d5:fb:19:70:6f:63:d7: d9:82:1c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvE9pLdT6URlSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzhlMGY1Y2UtYmJmMS00MjJkLWI2ZTMtYjBiYjUwMzgwNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdId3I6PhfLdqQdZGI7TBLYisDhZ/kzztyY 6ulIyjFGOrkmnWatdlj4xZ3sGHV6UZ7oUyKoTroRtU+ptrA3D9P1aHU+BaEFgLzf PfgWqEEt0cfzWtIQIsSrw6LO9IeBjQjVjMy3I3n6isX8p7DMTaxhUOAiVw/L8S+c 3DvIKES5/nYiKXpx1dYEN3RAA+7prBF0ML6CZJY29UdLEAGsWWG1h7bctT7TTBfN 25oNbZyWaaXfCt3Mz9icRVsfHNrI+3fj5lGDEBn9pJXLFiRCqS039valshhTf8Q2 OgYiWcNzy0EvIdz6eZG5mxiWg8hSCbnKdLnju8hXkDZmE9oRRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs43rLeCImiLxW9h80iWTF4muwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY1NjMwODAtZTY1OS0z MDYzLTg3NTItMjJiZTY5ZDUyOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGh+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMk5eA9ceUSANqkXtx4I67OiWe3EYF5+od0fONiSyLO8Qoxtb+ZQM7C I0omdwPNuFAKtktOulx4EHkSqOS125ZVTjuhk9xasnm0QMNf62/nK9Pfeh8wvKfs UV5+W3uizf7lxEEckoG+3WMczKolfyYL/mqT2Xg9UOvFajNdF+Suskf5sh9ZkLsy WkS9NkX0w0DP+GSbqAqVvj8KvExNbyBLh4SJwRYEyQ31h389bSW/kov37UyPoDAM Eily9y6l+oQvEtT+/mEm/Cltj2l8BM/oNxgfO7/B8dHCFLteAkLatY9iZXuT9g2M h5oIbJx1ms0Bqowl1fsZcG9j19mCHME= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:59 2025 by rpki-client