$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbb47428-14c9-345d-acc7-739eb91ff973.roa File: fbb47428-14c9-345d-acc7-739eb91ff973.roa (raw, json) Hash identifier: YYygf0aVjklxgfVBi4vS/nY8NTU1LgjjvTmiE5WrB/M= Subject key identifier: 25:FF:2B:50:CB:D8:57:B8:C3:1B:AD:87:FD:E8:EE:CF:04:83:2C:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F3C689EB07F04FDD7C40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbb47428-14c9-345d-acc7-739eb91ff973.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f3:c6:89:eb:07:f0:4f:dd:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=8db1af86-3e7e-4c58-8480-2f8d07408416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:82:54:bd:d9:88:03:35:f9:db:d8:a5:ca: da:f3:98:ee:e8:95:f4:82:65:b9:21:34:e8:f1:82: b5:22:72:ea:6b:9f:83:af:fe:36:db:87:5a:7f:fe: 98:ab:1f:06:ca:ac:fb:97:60:20:7c:5b:2f:77:0d: 75:a3:db:72:0f:4a:b9:93:2d:a8:b8:63:39:4b:ac: 92:2d:ff:f5:ec:5b:2f:bd:31:01:26:c6:00:93:7e: 47:9c:47:33:8a:3f:b0:63:92:3c:7a:01:db:ed:5e: a1:b5:e3:b1:8a:ad:34:7a:b6:46:77:c7:11:c7:8c: 5f:2b:a2:1f:4d:be:89:5f:d1:85:d2:4d:00:f2:d4: 33:f7:84:27:d5:6b:e3:ff:32:a8:0e:37:de:54:ce: 62:25:1a:f9:2a:80:40:a2:63:6c:0b:4a:70:0e:a4: f8:94:13:97:cd:f2:be:10:f3:e6:31:30:30:eb:17: bb:df:61:e4:2b:c8:c2:33:61:ec:69:18:5f:78:3e: 12:8a:01:88:f4:6f:20:a0:41:38:56:a3:66:68:b0: a3:cf:e5:8a:79:29:02:c4:2f:4c:61:7b:fb:14:11: 95:bd:63:cd:f3:be:d4:9e:ea:ed:2c:f1:34:70:30: 97:5e:95:ac:da:19:28:2a:74:02:46:08:25:0c:20: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FF:2B:50:CB:D8:57:B8:C3:1B:AD:87:FD:E8:EE:CF:04:83:2C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbb47428-14c9-345d-acc7-739eb91ff973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:51:07:8d:e5:30:fe:f6:6d:d9:6c:79:2a:5c:c1:36:6d:18: a9:26:81:7b:0f:06:78:a1:0e:26:71:eb:3c:f3:92:ad:68:5f: dc:dd:ff:23:f3:a3:d3:62:c2:2f:02:2a:97:e8:97:4e:b9:58: 19:e4:8a:c1:65:81:4f:92:a8:df:91:62:87:b1:0f:51:0b:c4: 51:bb:67:76:25:c5:76:5a:53:8e:bd:6a:64:f3:fc:e2:d8:f2: 19:20:5d:5b:c0:64:e8:6f:83:54:b3:d8:ef:81:32:3c:27:cf: 24:74:e0:82:3c:c5:bd:6a:8a:20:3e:d2:fd:02:c3:e0:c7:45: 02:5d:30:39:0f:b2:24:82:0a:26:eb:cf:0f:41:a8:1d:1c:6d: ca:5d:a5:3c:df:12:0a:29:05:8d:30:3f:ab:0e:fd:94:1e:cc: 0d:fe:31:2b:75:3c:0c:5f:b0:4e:24:dd:bc:b8:fd:06:0f:6f: ff:9a:29:0c:3e:0d:63:ee:01:31:7b:6d:59:71:cb:eb:49:98: ef:50:95:b7:ec:34:d2:ef:ee:5f:cb:17:13:dd:8c:84:f0:0d: 10:58:de:a0:f3:37:6b:92:db:2b:81:f2:e7:2e:3e:04:1e:67: 51:81:35:26:62:d8:a8:ec:be:cf:f1:c0:fa:27:42:85:19:7b: dd:ab:ed:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvPGiesH8E/dfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OGRiMWFmODYtM2U3ZS00YzU4LTg0ODAtMmY4ZDA3NDA4NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS+CVL3ZiAM1+dvYpcra85ju6JX0gmW5ITTo 8YK1InLqa5+Dr/4224daf/6Yqx8Gyqz7l2AgfFsvdw11o9tyD0q5ky2ouGM5S6yS Lf/17FsvvTEBJsYAk35HnEczij+wY5I8egHb7V6hteOxiq00erZGd8cRx4xfK6If Tb6JX9GF0k0A8tQz94Qn1Wvj/zKoDjfeVM5iJRr5KoBAomNsC0pwDqT4lBOXzfK+ EPPmMTAw6xe732HkK8jCM2HsaRhfeD4SigGI9G8goEE4VqNmaLCjz+WKeSkCxC9M YXv7FBGVvWPN877UnurtLPE0cDCXXpWs2hkoKnQCRgglDCC8QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX/K1DL2Fe4wxuth/3o7s8EgyxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmJiNDc0MjgtMTRjOS0z NDVkLWFjYzctNzM5ZWI5MWZmOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdRB43lMP72bdlseSpcwTZtGKkmgXsPBnihDiZx6zzzkq1oX9zd/yPz o9Niwi8CKpfol065WBnkisFlgU+SqN+RYoexD1ELxFG7Z3YlxXZaU469amTz/OLY 8hkgXVvAZOhvg1Sz2O+BMjwnzyR04II8xb1qiiA+0v0Cw+DHRQJdMDkPsiSCCibr zw9BqB0cbcpdpTzfEgopBY0wP6sO/ZQezA3+MSt1PAxfsE4k3by4/QYPb/+aKQw+ DWPuATF7bVlxy+tJmO9QlbfsNNLv7l/LFxPdjITwDRBY3qDzN2uS2yuB8ucuPgQe Z1GBNSZi2Kjsvs/xwPonQoUZe92r7ek= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:24 2025 by rpki-client