$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc2f6da7-76b3-3268-89f7-486cedaf40bd.roa File: fc2f6da7-76b3-3268-89f7-486cedaf40bd.roa (raw, json) Hash identifier: joEEQHLUZk2F7TKC5on6v99c+qOdX+Zn/LZitxDRv44= Subject key identifier: 0F:66:9B:36:E9:79:18:79:C9:D8:79:BD:5A:1B:2E:60:A3:A0:57:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F02332DF110736641F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc2f6da7-76b3-3268-89f7-486cedaf40bd.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.104.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f0:23:32:df:11:07:36:64:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=94c62cc1-4a74-4b40-b8a7-c80bca74e4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9b:23:e6:56:70:e0:0b:65:7d:9d:6d:8b:5f: 08:c0:44:1d:40:c8:72:1a:86:66:db:a8:b9:f0:77: 9c:8a:f7:41:a6:44:3a:af:d1:a8:74:3a:01:82:f1: 1a:c6:57:01:3c:68:7c:2b:9e:16:07:94:45:a0:6a: 97:7c:93:9c:9b:52:60:f1:d2:d0:e0:15:dc:6d:cd: 06:c4:73:ff:da:63:ec:10:07:fb:f7:91:a3:cf:9c: f4:14:cc:ba:3b:01:5a:eb:11:8e:01:f8:59:a0:02: 77:9c:b7:33:35:df:03:82:b8:81:9d:d2:f8:07:06: 34:25:06:3a:71:76:21:0b:3b:33:ac:4f:31:94:7f: 3d:88:32:99:eb:35:7b:7d:77:29:95:47:cb:d3:77: 80:96:8a:69:60:89:13:8e:63:f0:29:38:12:b6:9c: 56:f9:67:30:88:b3:59:d7:ba:5c:7f:65:11:70:19: d7:4e:b3:67:07:c4:c1:50:73:ce:2d:e8:cf:2a:b9: 29:b4:2c:e8:6f:94:18:da:28:07:b4:71:24:35:40: 89:40:8d:4f:b3:0d:05:50:ae:4f:b5:d8:bb:d6:10: 56:7f:20:6f:51:59:7b:d5:a4:73:70:4b:e0:96:09: 47:71:88:f2:fe:03:48:fa:0b:1d:12:52:c3:03:31: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:66:9B:36:E9:79:18:79:C9:D8:79:BD:5A:1B:2E:60:A3:A0:57:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc2f6da7-76b3-3268-89f7-486cedaf40bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:92:d2:8d:3d:31:55:72:1b:1e:3a:21:b2:f8:c0:03:fb:c2: 15:a4:26:2c:ba:b4:c6:bf:d9:0f:f7:51:18:d7:c7:50:86:48: 83:02:20:10:85:2b:87:6d:57:9b:5e:0d:34:1e:e9:5c:88:0b: ca:06:9f:01:7d:b6:89:3d:00:5f:78:44:d1:6b:f4:fc:53:e3: 89:4e:bf:05:91:7d:ef:a2:3f:31:68:8e:e5:0b:f1:5f:26:90: c3:13:45:51:d2:f3:87:fc:56:a2:ad:eb:71:30:79:a2:14:85: de:bf:36:71:0e:b0:41:ea:76:82:54:47:6a:9b:8d:63:4c:10: e7:d4:c1:8b:3b:d0:e6:49:b9:88:17:74:f8:47:a4:d2:cb:27: 1f:77:a7:85:ef:43:e3:c5:6d:64:21:47:35:e2:12:8c:c9:c8: 93:35:61:9c:78:04:bb:85:23:50:03:88:30:76:96:a7:0a:5c: d6:d9:98:d3:c4:a3:f4:4f:ed:25:33:6e:33:5c:bc:eb:8a:61: 2b:e0:c3:d3:de:70:4c:3c:5a:8f:25:16:2b:a8:e8:b4:ba:4c: 6a:0f:a4:59:99:31:35:22:1e:ed:8d:fa:04:42:17:2a:c5:d0: 70:95:1d:00:51:22:89:f9:58:4f:91:b5:44:35:03:33:c7:29: 6c:9c:ad:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvAjMt8RBzZkH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OTRjNjJjYzEtNGE3NC00YjQwLWI4YTctYzgwYmNhNzRlNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZsj5lZw4AtlfZ1ti18IwEQdQMhyGoZm26i5 8HecivdBpkQ6r9GodDoBgvEaxlcBPGh8K54WB5RFoGqXfJOcm1Jg8dLQ4BXcbc0G xHP/2mPsEAf795Gjz5z0FMy6OwFa6xGOAfhZoAJ3nLczNd8DgriBndL4BwY0JQY6 cXYhCzszrE8xlH89iDKZ6zV7fXcplUfL03eAloppYIkTjmPwKTgStpxW+WcwiLNZ 17pcf2URcBnXTrNnB8TBUHPOLejPKrkptCzob5QY2igHtHEkNUCJQI1Psw0FUK5P tdi71hBWfyBvUVl71aRzcEvglglHcYjy/gNI+gsdElLDAzHQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9mmzbpeRh5ydh5vVobLmCjoFd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmMyZjZkYTctNzZiMy0z MjY4LTg5ZjctNDg2Y2VkYWY0MGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGhmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOS0o09MVVyGx46IbL4wAP7whWkJiy6tMa/2Q/3URjXx1CGSIMCIBCF K4dtV5teDTQe6VyIC8oGnwF9tok9AF94RNFr9PxT44lOvwWRfe+iPzFojuUL8V8m kMMTRVHS84f8VqKt63EweaIUhd6/NnEOsEHqdoJUR2qbjWNMEOfUwYs70OZJuYgX dPhHpNLLJx93p4XvQ+PFbWQhRzXiEozJyJM1YZx4BLuFI1ADiDB2lqcKXNbZmNPE o/RP7SUzbjNcvOuKYSvgw9PecEw8Wo8lFiuo6LS6TGoPpFmZMTUiHu2N+gRCFyrF 0HCVHQBRIon5WE+RtUQ1AzPHKWycrRs= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:46 2025 by rpki-client