$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f34a6ad5-3a24-30c0-affd-4dcb230f15b7.roa File: f34a6ad5-3a24-30c0-affd-4dcb230f15b7.roa (raw, json) Hash identifier: qRVydEV3maVZq0fr880uMP3T6zZPmDcA12v5pIsA8/Y= Subject key identifier: 99:61:A4:1A:6A:DB:38:79:C3:6B:48:55:C2:48:F1:B1:F6:8A:27:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374CA3BB9D1A28C98B5240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f34a6ad5-3a24-30c0-affd-4dcb230f15b7.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4c:a3:bb:9d:1a:28:c9:8b:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=ecfb5b08-b26a-46da-8076-3cd916f7e4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:eb:d6:be:04:ab:b4:dd:3f:74:92:1a:62: f5:1f:ce:58:8a:ea:93:6a:38:b6:c2:9c:28:b9:69: 90:79:6d:b7:6f:6a:01:3d:93:0d:01:a4:07:47:d3: 18:a5:5e:ff:1d:72:f7:ea:e2:71:39:99:27:a8:05: 38:db:c8:6d:11:dc:b9:76:2b:cf:88:78:6b:ac:70: bb:9c:fd:ec:93:40:8d:1a:c3:1c:54:8a:1e:f1:fc: cf:1f:8f:5c:97:77:19:40:49:fb:c8:cb:a3:9d:c3: 50:59:60:c3:e2:7f:58:da:85:66:37:8b:9c:c2:18: 2b:d8:ca:5b:35:e7:cd:fe:66:cb:8a:56:15:d7:b5: 14:ae:d0:1b:8d:93:41:db:17:fa:8a:6d:36:ce:00: 9b:72:e5:dc:8f:e2:88:a7:07:96:1a:66:f7:27:2a: 32:5c:0e:eb:3d:84:1a:ef:27:1f:78:a8:02:71:d2: a1:b8:97:0c:66:3f:07:95:1e:ff:02:5f:d6:3e:d4: 05:21:86:56:9c:1f:e6:60:5e:1c:99:98:73:e8:bb: f3:27:44:78:08:d7:cb:20:21:f4:c2:53:47:bb:95: cc:24:e7:15:93:00:1c:d9:e1:0e:fb:cb:6d:27:b1: b8:c8:25:94:7b:37:dc:b6:ba:83:b7:55:04:19:06: a9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:61:A4:1A:6A:DB:38:79:C3:6B:48:55:C2:48:F1:B1:F6:8A:27:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f34a6ad5-3a24-30c0-affd-4dcb230f15b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:64:d7:48:c3:f3:c6:5d:83:10:45:31:24:4e:dc:2a:99:76: fb:80:75:78:59:9c:de:48:e0:40:b2:75:bf:6e:96:56:3f:b8: 0f:e9:42:b3:77:cf:cb:15:c2:0a:1b:27:a6:45:20:f4:2a:7e: d8:9e:0b:04:4e:70:6f:84:75:62:03:c2:bf:09:54:da:88:8a: b2:f8:53:b7:83:6f:13:63:79:c7:cf:a1:a1:f4:08:ca:c3:e8: 33:6c:3b:bc:3b:24:60:07:37:a7:79:35:f1:1d:63:5d:88:29: ab:81:a3:4e:2f:3d:81:37:84:c3:a0:f3:59:a9:40:12:04:d9: 95:9b:0d:9a:f0:25:8c:c2:59:9b:fb:41:c0:2d:fb:59:f2:52: d5:e9:16:44:0f:cd:7a:43:0e:a8:d0:3a:c3:28:c3:21:40:90: 80:46:0d:bb:75:73:09:61:fd:94:10:a7:42:b7:e1:0a:36:e1: 00:b3:f9:62:0f:65:95:d0:a4:d5:e1:8f:b4:00:f1:bc:30:17: ce:c8:ad:62:57:45:d6:fb:86:7c:5f:ac:c6:d4:86:43:86:9b: a1:3c:0e:c2:2b:34:a1:7c:7a:ef:9a:91:6d:99:0f:5a:a0:91: 31:03:4c:b0:45:39:dc:58:c3:5a:c6:a1:5f:1c:5d:dc:f9:89: a9:f5:3d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0yju50aKMmLUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWNmYjViMDgtYjI2YS00NmRhLTgwNzYtM2NkOTE2ZjdlNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjHr1r4Eq7TdP3SSGmL1H85YiuqTaji2wpwo uWmQeW23b2oBPZMNAaQHR9MYpV7/HXL36uJxOZknqAU428htEdy5divPiHhrrHC7 nP3sk0CNGsMcVIoe8fzPH49cl3cZQEn7yMujncNQWWDD4n9Y2oVmN4ucwhgr2Mpb NefN/mbLilYV17UUrtAbjZNB2xf6im02zgCbcuXcj+KIpweWGmb3JyoyXA7rPYQa 7ycfeKgCcdKhuJcMZj8HlR7/Al/WPtQFIYZWnB/mYF4cmZhz6LvzJ0R4CNfLICH0 wlNHu5XMJOcVkwAc2eEO+8ttJ7G4yCWUezfctrqDt1UEGQapBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlhpBpq2zh5w2tIVcJI8bH2iicRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjM0YTZhZDUtM2EyNC0z MGMwLWFmZmQtNGRjYjIzMGYxNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRk10jD88ZdgxBFMSRO3CqZdvuAdXhZnN5I4ECydb9ullY/uA/pQrN3 z8sVwgobJ6ZFIPQqftieCwROcG+EdWIDwr8JVNqIirL4U7eDbxNjecfPoaH0CMrD 6DNsO7w7JGAHN6d5NfEdY12IKauBo04vPYE3hMOg81mpQBIE2ZWbDZrwJYzCWZv7 QcAt+1nyUtXpFkQPzXpDDqjQOsMowyFAkIBGDbt1cwlh/ZQQp0K34Qo24QCz+WIP ZZXQpNXhj7QA8bwwF87IrWJXRdb7hnxfrMbUhkOGm6E8DsIrNKF8eu+akW2ZD1qg kTEDTLBFOdxYw1rGoV8cXdz5ian1PZE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:10 2025 by rpki-client