$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eff6bc7b-ce91-30be-ba4d-f3699571046a.roa File: eff6bc7b-ce91-30be-ba4d-f3699571046a.roa (raw, json) Hash identifier: dqwZNrTZZIQ58/rgufmpsFStJ+aq+YKUypCP4f4qDn8= Subject key identifier: 12:5B:23:1A:A4:D9:79:E9:36:A4:97:2E:07:8E:59:69:3C:8C:D3:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C284F7E591C672DD3BA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eff6bc7b-ce91-30be-ba4d-f3699571046a.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:28:4f:7e:59:1c:67:2d:d3:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=de7d3a1b-7d74-4308-af5f-fa12388a7692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:ae:0a:0f:88:1c:d3:e3:da:88:a3:c8:5f: 2d:59:c3:dc:af:5b:96:63:43:3e:3f:9a:75:20:44: 83:7d:f6:82:82:f6:b3:d5:52:fb:76:2d:a8:c8:e5: d7:52:2d:cd:2f:8b:d2:31:20:50:aa:63:5d:98:17: 20:82:44:f3:aa:93:09:86:24:ba:8b:52:90:04:bd: 78:fc:f8:14:6d:e4:fe:18:66:3a:6d:94:d0:d8:94: c9:99:0f:d2:20:d0:13:ba:e0:c9:ec:cf:b6:ff:52: 7c:55:67:d4:bf:c6:7b:c9:ae:60:d0:7e:eb:47:a2: 69:97:9f:52:49:14:6d:54:67:eb:f5:1f:dd:63:80: 5f:73:21:6e:9e:a3:50:da:fa:41:bc:7a:d0:05:5a: 3c:d8:9b:5e:f8:b4:c0:6c:b9:dd:0b:8b:d1:80:cc: 41:9c:b3:a7:f9:c9:25:45:73:ba:e5:16:1e:a6:28: 18:f4:da:f0:e1:a8:63:90:58:97:d9:61:3e:c1:e2: 47:4f:a5:66:a4:a6:59:99:2a:14:eb:d3:0f:ab:82: a0:c6:35:55:49:68:f1:b2:0a:24:d3:4b:6d:3f:bd: 5a:8b:8b:25:64:22:74:e4:dd:b9:59:45:eb:cb:2c: 72:ed:f4:8d:b5:d4:50:13:17:9f:35:45:6c:01:2e: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5B:23:1A:A4:D9:79:E9:36:A4:97:2E:07:8E:59:69:3C:8C:D3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eff6bc7b-ce91-30be-ba4d-f3699571046a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ee:d9:b6:40:bf:d6:b8:ed:7e:19:c7:c5:33:ef:f7:1d:bb: 0b:6a:94:fc:75:4f:d7:ea:e2:01:65:e8:1d:3c:df:9f:dd:96: 68:30:8b:6e:c6:ab:f7:99:4a:30:f8:b0:db:72:8f:1b:8d:62: dc:6d:a3:9b:b1:2b:e2:36:dd:c3:e8:9c:fa:59:fe:74:8b:1b: b8:ee:60:5d:ab:7b:2d:a1:70:2f:fc:e7:cc:0e:28:2e:ba:77: 55:d9:d4:dd:02:d9:5e:d2:51:64:cd:fb:24:49:94:09:0c:02: 19:d6:96:c1:9c:79:84:71:fe:96:30:75:6b:25:50:4f:25:81: 5f:2a:b9:ec:ae:9c:73:c8:6a:1b:bf:14:7b:30:74:61:fd:87: f9:e8:21:f5:7e:f5:32:e9:fe:ba:f2:4d:46:59:00:8f:e7:23: 71:fe:ca:26:41:28:a4:8e:ff:f4:93:fb:47:fd:dc:42:ad:a3: 17:1c:bc:d7:74:ae:9a:ea:d0:f1:c4:9b:b7:d5:a8:07:4a:6b: 48:bb:8c:45:2c:80:30:12:9c:4b:7d:0a:31:05:7b:88:4f:d6: 9f:4a:cc:23:bc:ef:5f:24:05:6c:a9:b6:76:bc:48:8b:10:1c: f7:1c:8a:bc:90:27:26:bb:0e:52:7a:61:6a:8d:11:07:3e:98: 2f:50:74:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbChPflkcZy3TukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGU3ZDNhMWItN2Q3NC00MzA4LWFmNWYtZmExMjM4OGE3NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaeuCg+IHNPj2oijyF8tWcPcr1uWY0M+P5p1 IESDffaCgvaz1VL7di2oyOXXUi3NL4vSMSBQqmNdmBcggkTzqpMJhiS6i1KQBL14 /PgUbeT+GGY6bZTQ2JTJmQ/SINATuuDJ7M+2/1J8VWfUv8Z7ya5g0H7rR6Jpl59S SRRtVGfr9R/dY4BfcyFunqNQ2vpBvHrQBVo82Jte+LTAbLndC4vRgMxBnLOn+ckl RXO65RYepigY9Nrw4ahjkFiX2WE+weJHT6VmpKZZmSoU69MPq4KgxjVVSWjxsgok 00ttP71ai4slZCJ05N25WUXryyxy7fSNtdRQExefNUVsAS7vvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJbIxqk2XnpNqSXLgeOWWk8jNMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWZmNmJjN2ItY2U5MS0z MGJlLWJhNGQtZjM2OTk1NzEwNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEju2bZAv9a47X4Zx8Uz7/cduwtqlPx1T9fq4gFl6B0835/dlmgwi27G q/eZSjD4sNtyjxuNYtxto5uxK+I23cPonPpZ/nSLG7juYF2rey2hcC/858wOKC66 d1XZ1N0C2V7SUWTN+yRJlAkMAhnWlsGceYRx/pYwdWslUE8lgV8queyunHPIahu/ FHswdGH9h/noIfV+9TLp/rryTUZZAI/nI3H+yiZBKKSO//ST+0f93EKtoxccvNd0 rprq0PHEm7fVqAdKa0i7jEUsgDASnEt9CjEFe4hP1p9KzCO8718kBWyptna8SIsQ HPcciryQJya7DlJ6YWqNEQc+mC9QdCA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:04 2025 by rpki-client