$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb2114d4-bb19-351b-a844-b5a3f57d0043.roa File: fb2114d4-bb19-351b-a844-b5a3f57d0043.roa (raw, json) Hash identifier: JJKVlSy8F8/ypqVM1lMhZW+IiCGWOy6jWliY+5/1bT0= Subject key identifier: B9:EF:A7:8A:97:14:F8:F0:61:93:62:6E:A5:7B:4D:32:AD:41:65:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C38B1D720E806789BD580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb2114d4-bb19-351b-a844-b5a3f57d0043.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:38:b1:d7:20:e8:06:78:9b:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3e6fc7bc-852a-4f07-a9f6-36c9c07f92ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:d5:d0:08:62:c6:d7:1e:fe:d5:10:3e:f8: db:0b:1b:d3:24:2c:41:dd:48:3f:f4:31:5a:0e:ef: 9a:86:c9:3a:04:44:8c:a9:d8:b9:11:d2:44:39:28: f0:b0:71:40:1f:59:8b:2a:41:c6:d8:c3:5f:60:35: dd:39:2e:2a:a1:b2:48:e4:31:7d:cf:c1:65:6b:67: 47:87:0f:9e:68:5e:f6:ed:6c:58:84:22:12:a2:84: 64:a5:bb:f4:76:61:98:d7:72:8d:29:0b:12:ec:87: 1c:f1:e3:5e:b3:49:df:db:36:71:1f:7c:d3:95:af: f3:67:2e:ef:e6:21:fa:e8:bf:5c:29:ff:70:0d:e1: bf:cb:21:d9:03:ba:98:9d:02:d6:ca:c3:f1:1c:b4: 9c:a8:d3:10:2e:71:51:05:62:ae:55:03:f0:40:0f: 8f:d1:3a:66:3a:75:79:a8:a6:14:55:f2:98:a8:21: 5c:7e:27:f2:e4:c6:64:8a:4f:04:89:f0:f7:2c:60: 49:8b:af:7e:91:68:07:cb:27:dd:65:d9:a5:02:cb: 02:d8:0e:98:ac:ff:39:cc:38:bc:a2:74:da:a2:9c: 07:4d:fb:2a:8e:ec:15:bd:d1:52:7b:80:b9:c4:fa: 89:9d:d1:e0:65:f9:24:d5:91:b8:41:dd:b8:cb:37: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EF:A7:8A:97:14:F8:F0:61:93:62:6E:A5:7B:4D:32:AD:41:65:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb2114d4-bb19-351b-a844-b5a3f57d0043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:63:f4:4d:0f:45:02:3e:2f:70:c9:e8:32:dc:57:29:38:93: 41:a4:4e:98:9d:8a:bb:73:60:c0:b7:ab:38:59:ee:0e:d7:ae: 09:e7:3a:9f:d2:2b:9b:7b:56:26:02:45:a0:5c:dc:77:cd:bc: 01:e5:0f:3f:cb:eb:3c:9e:7e:56:0d:49:e9:21:32:4c:30:b4: 64:c3:1a:22:93:b3:89:0e:75:7a:91:de:0f:aa:3f:be:86:fb: 07:11:01:fc:d7:a9:6d:21:06:c7:af:74:ee:ed:fd:1f:d0:5a: 64:67:66:29:47:76:6f:bd:84:cd:2e:2f:34:a2:4e:eb:5f:41: 52:8d:13:ef:0c:fb:de:ae:bf:4a:f4:76:6a:20:6a:c1:ef:7d: 66:81:4b:f0:08:96:01:2f:8f:f4:39:7b:18:6f:79:2e:85:85: fc:8c:e8:a5:f7:86:3c:60:95:e0:f1:31:bb:80:31:92:bb:45: 1b:51:f9:19:ed:30:bf:32:18:5e:cc:d6:d9:ea:b6:1e:05:6b: ce:57:78:94:6d:fe:8d:5f:8a:0b:e3:02:a5:80:93:3d:3c:2c: 73:8b:9c:69:76:dc:af:2d:37:d4:0f:63:40:18:e5:44:b8:d8: 30:92:ef:81:f3:85:52:79:6b:7b:a4:f7:1c:be:b1:67:bc:f1: 3d:d8:1a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDix1yDoBnib1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk M2U2ZmM3YmMtODUyYS00ZjA3LWE5ZjYtMzZjOWMwN2Y5MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihXV0Ahixtce/tUQPvjbCxvTJCxB3Ug/9DFa Du+ahsk6BESMqdi5EdJEOSjwsHFAH1mLKkHG2MNfYDXdOS4qobJI5DF9z8Fla2dH hw+eaF727WxYhCISooRkpbv0dmGY13KNKQsS7Icc8eNes0nf2zZxH3zTla/zZy7v 5iH66L9cKf9wDeG/yyHZA7qYnQLWysPxHLScqNMQLnFRBWKuVQPwQA+P0TpmOnV5 qKYUVfKYqCFcfify5MZkik8EifD3LGBJi69+kWgHyyfdZdmlAssC2A6YrP85zDi8 onTaopwHTfsqjuwVvdFSe4C5xPqJndHgZfkk1ZG4Qd24yze3dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnvp4qXFPjwYZNibqV7TTKtQWVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmIyMTE0ZDQtYmIxOS0z NTFiLWE4NDQtYjVhM2Y1N2QwMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJj9E0PRQI+L3DJ6DLcVyk4k0GkTpidirtzYMC3qzhZ7g7XrgnnOp/S K5t7ViYCRaBc3HfNvAHlDz/L6zyeflYNSekhMkwwtGTDGiKTs4kOdXqR3g+qP76G +wcRAfzXqW0hBsevdO7t/R/QWmRnZilHdm+9hM0uLzSiTutfQVKNE+8M+96uv0r0 dmogasHvfWaBS/AIlgEvj/Q5exhveS6FhfyM6KX3hjxgleDxMbuAMZK7RRtR+Rnt ML8yGF7M1tnqth4Fa85XeJRt/o1figvjAqWAkz08LHOLnGl23K8tN9QPY0AY5US4 2DCS74HzhVJ5a3uk9xy+sWe88T3YGnk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:28 2025 by rpki-client