$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8060e3d-4931-3fbc-b3f9-6692900d47a1.roa File: f8060e3d-4931-3fbc-b3f9-6692900d47a1.roa (raw, json) Hash identifier: tnOMRRJkB4o3Dxmy50R8gLa2K/Vx+d+9gHWwDlGameY= Subject key identifier: 39:AF:C1:F0:75:B4:E1:40:93:9D:66:09:23:CB:CE:5E:72:54:A7:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C20F4C6A12A768E9FF740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8060e3d-4931-3fbc-b3f9-6692900d47a1.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:20:f4:c6:a1:2a:76:8e:9f:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=3440ef30-abf4-4334-b63a-39a883569ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:3e:af:af:86:b6:81:ac:6d:47:14:88:b9: 2a:be:77:bd:d4:5c:89:5d:cf:9e:31:cc:91:2c:89: f3:07:de:e9:a4:1b:4d:64:10:76:a3:4e:e4:d8:ed: 5b:e7:b5:02:22:03:10:2f:12:84:16:0e:ac:20:b8: 3b:f7:de:21:08:ac:48:a3:16:25:25:6a:e3:f0:32: 09:52:6a:31:de:ec:51:0a:55:c3:10:38:28:c7:20: 1f:41:ba:58:af:9c:f9:d0:d3:06:59:1c:19:bd:38: 3f:00:ae:b3:81:84:04:40:5e:17:98:2e:99:d3:1c: 8f:5f:d5:68:a9:cc:13:c1:01:ab:61:31:66:9f:52: c8:a8:b9:59:bd:64:2d:e7:26:a9:9a:df:60:75:89: bb:22:e8:7c:41:6a:a1:12:44:bb:36:cf:69:e4:ac: 9f:f0:3c:46:ac:9e:9e:0b:15:40:ef:7c:1e:67:ae: 68:c2:73:6b:9f:70:c0:4b:4f:5f:d3:42:9b:62:ed: f5:da:c2:1a:d9:e0:56:65:f0:de:3f:fb:eb:25:80: 76:39:23:29:b4:23:27:52:96:94:24:3f:a3:2d:d4: e6:e5:cb:7a:1b:9c:5e:d8:e4:54:6c:00:9c:cb:f6: 20:2b:4a:cc:66:77:9b:7e:e6:85:3e:82:cf:c7:70: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:C1:F0:75:B4:E1:40:93:9D:66:09:23:CB:CE:5E:72:54:A7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8060e3d-4931-3fbc-b3f9-6692900d47a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:75:76:56:86:79:67:1d:42:10:a8:43:1c:4b:6c:72:2d:84: 84:4f:bd:22:16:e9:c2:73:56:8f:03:a2:ad:1b:9b:58:7d:ed: d0:b6:c8:ce:b2:f8:a2:88:56:1d:12:a4:ea:b6:2e:38:f2:b9: 4a:27:60:85:af:f4:d9:82:9f:18:1e:bc:46:5b:63:6f:ca:ae: 88:d3:6e:12:ce:54:95:0b:58:a0:80:56:3c:09:ec:34:a6:c6: b1:7c:95:cc:5a:89:a6:84:2a:b4:16:07:3c:a0:32:82:ad:dd: 53:b1:06:69:56:e3:37:73:2e:f7:97:15:2d:47:30:6b:e2:16: ad:50:6f:cf:4d:68:c3:52:25:61:d6:c4:d2:f9:ef:70:b6:00: 7c:5e:e6:ad:85:7e:18:ed:cc:1c:c9:03:28:c1:d3:3e:5a:80: 2b:75:84:6d:af:e3:d3:0c:50:39:62:c7:d4:f5:d4:37:de:16: 2f:90:58:6e:23:9f:6c:09:4c:40:0e:ac:16:f7:ce:35:2e:dc: 9d:10:b0:77:db:a3:54:82:0e:19:11:6d:f2:e9:18:9f:ab:07: 7a:d4:3c:af:29:06:75:45:09:68:3e:66:63:b5:cc:4c:81:87: b2:ea:4a:a5:80:e4:b4:da:78:ff:69:d3:3d:ab:b9:f1:9e:03: cc:2f:14:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCD0xqEqdo6f90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MzQ0MGVmMzAtYWJmNC00MzM0LWI2M2EtMzlhODgzNTY5YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiak+r6+GtoGsbUcUiLkqvne91FyJXc+eMcyR LInzB97ppBtNZBB2o07k2O1b57UCIgMQLxKEFg6sILg7994hCKxIoxYlJWrj8DIJ Umox3uxRClXDEDgoxyAfQbpYr5z50NMGWRwZvTg/AK6zgYQEQF4XmC6Z0xyPX9Vo qcwTwQGrYTFmn1LIqLlZvWQt5yapmt9gdYm7Iuh8QWqhEkS7Ns9p5Kyf8DxGrJ6e CxVA73weZ65ownNrn3DAS09f00KbYu312sIa2eBWZfDeP/vrJYB2OSMptCMnUpaU JD+jLdTm5ct6G5xe2ORUbACcy/YgK0rMZnebfuaFPoLPx3A6bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmvwfB1tOFAk51mCSPLzl5yVKekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjgwNjBlM2QtNDkzMS0z ZmJjLWIzZjktNjY5MjkwMGQ0N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAI7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp1dlaGeWcdQhCoQxxLbHIthIRPvSIW6cJzVo8Doq0bm1h97dC2yM6y +KKIVh0SpOq2LjjyuUonYIWv9NmCnxgevEZbY2/KrojTbhLOVJULWKCAVjwJ7DSm xrF8lcxaiaaEKrQWBzygMoKt3VOxBmlW4zdzLveXFS1HMGviFq1Qb89NaMNSJWHW xNL573C2AHxe5q2FfhjtzBzJAyjB0z5agCt1hG2v49MMUDlix9T11DfeFi+QWG4j n2wJTEAOrBb3zjUu3J0QsHfbo1SCDhkRbfLpGJ+rB3rUPK8pBnVFCWg+ZmO1zEyB h7LqSqWA5LTaeP9p0z2rufGeA8wvFJ8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:38 2025 by rpki-client