$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa File: fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa (raw, json) Hash identifier: j9j91FQ5s7MkMPjDlUK5Hn2pIuS0vjyHYTxTEMLtnRY= Subject key identifier: 76:5F:57:81:5B:1F:55:89:5E:AF:8A:09:25:E1:45:03:44:35:6D:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C37504684A1700FC010BE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.99.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:50:46:84:a1:70:0f:c0:10:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=7d7a74aa-bc6f-4e0d-8ea7-02ac44a8e77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:d9:ac:ad:6a:a8:bd:6d:da:b0:14:0c:35: f2:1a:f8:b5:3f:1c:bf:11:5b:50:e6:bd:52:a4:f9: 04:8e:1d:60:55:a2:82:fb:48:1b:45:2d:22:0c:d6: c1:f4:68:8f:66:b6:05:69:16:3b:c1:22:e3:e0:1e: b3:09:9c:2a:58:3f:0c:db:40:74:53:d2:b3:94:2d: 01:4f:aa:c7:f0:2f:cf:fb:e5:94:c8:b3:d0:cb:8f: 91:64:1a:61:67:79:0f:d7:42:c9:87:24:55:e8:e2: 0b:36:86:0d:f5:0c:40:94:c3:47:04:bd:89:47:74: 94:32:81:0f:14:0e:d5:c9:ec:c9:2a:51:74:64:e0: d7:50:51:41:91:06:1d:a4:0c:ab:44:d0:27:8e:1b: 87:cf:a4:3f:ef:55:b0:6a:c9:02:71:96:79:3f:a0: 88:21:f2:e4:a8:d5:9d:40:e6:56:f0:45:7c:95:d0: c9:4a:03:17:7a:c1:88:a8:83:93:ff:22:1a:b1:9a: 2d:54:15:c8:be:3a:7c:bf:53:42:d2:dc:3e:d1:95: 55:de:99:d5:aa:d3:a3:6b:68:24:72:09:da:6a:60: 8c:b8:e5:7e:c4:a8:f9:10:6c:ba:e9:6b:e0:86:d0: 8d:4e:26:38:5e:da:01:03:b9:d5:1f:4b:f7:07:8b: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:57:81:5B:1F:55:89:5E:AF:8A:09:25:E1:45:03:44:35:6D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:90:85:73:24:36:3c:e9:f3:11:c0:87:80:f9:96:ef:8b:35: 17:e4:fb:84:40:58:f8:50:8d:c2:12:ad:fd:35:d8:35:f0:3f: 96:bc:41:f7:17:87:89:2c:d2:7c:cd:ff:db:6f:23:19:54:40: 8a:36:15:4c:1b:e9:a3:66:f5:76:b6:f2:d2:40:ab:b3:73:3d: 92:8e:40:81:d7:a0:8b:4d:83:e2:b0:1c:24:6f:59:06:78:24: 12:f4:1c:d0:ab:c5:5b:91:57:6b:46:f8:a8:88:91:ad:72:5e: bb:66:f7:b8:98:8f:c1:89:9a:85:99:8f:fb:34:cc:e4:9c:2e: 4f:fc:29:bb:98:c8:81:52:97:33:68:d3:e7:8d:80:a2:2a:42: aa:96:7e:df:8d:0f:03:39:4b:d5:73:1f:a2:cf:a3:72:1d:55: 56:93:43:3e:57:5e:91:f9:1a:b9:a5:f1:ad:ac:d5:95:be:2d: af:ae:bf:c5:2e:97:66:07:cc:72:72:43:97:57:97:ad:be:9a: bb:e7:14:e9:6f:87:12:08:5a:fa:34:c3:f2:37:02:eb:5f:d2: fa:68:0b:2e:2d:8c:08:69:eb:53:b1:ee:22:26:b2:bc:b0:4e: 4e:66:41:45:ea:24:09:7c:a7:76:8e:b7:a7:b4:ef:bd:44:61: 99:79:5c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN1BGhKFwD8AQvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk N2Q3YTc0YWEtYmM2Zi00ZTBkLThlYTctMDJhYzQ0YThlNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9LZrK1qqL1t2rAUDDXyGvi1Pxy/EVtQ5r1S pPkEjh1gVaKC+0gbRS0iDNbB9GiPZrYFaRY7wSLj4B6zCZwqWD8M20B0U9KzlC0B T6rH8C/P++WUyLPQy4+RZBphZ3kP10LJhyRV6OILNoYN9QxAlMNHBL2JR3SUMoEP FA7VyezJKlF0ZODXUFFBkQYdpAyrRNAnjhuHz6Q/71WwaskCcZZ5P6CIIfLkqNWd QOZW8EV8ldDJSgMXesGIqIOT/yIasZotVBXIvjp8v1NC0tw+0ZVV3pnVqtOja2gk cgnaamCMuOV+xKj5EGy66WvghtCNTiY4XtoBA7nVH0v3B4u4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZfV4FbH1WJXq+KCSXhRQNENW1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmExNzkwNmYtY2E4MC0z YzVkLWFiNTEtZmZlN2ZhNDgzMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOQhXMkNjzp8xHAh4D5lu+LNRfk+4RAWPhQjcISrf012DXwP5a8QfcX h4ks0nzN/9tvIxlUQIo2FUwb6aNm9Xa28tJAq7NzPZKOQIHXoItNg+KwHCRvWQZ4 JBL0HNCrxVuRV2tG+KiIka1yXrtm97iYj8GJmoWZj/s0zOScLk/8KbuYyIFSlzNo 0+eNgKIqQqqWft+NDwM5S9VzH6LPo3IdVVaTQz5XXpH5Grml8a2s1ZW+La+uv8Uu l2YHzHJyQ5dXl62+mrvnFOlvhxIIWvo0w/I3Autf0vpoCy4tjAhp61Ox7iImsryw Tk5mQUXqJAl8p3aOt6e0771EYZl5XMA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:26 2025 by rpki-client