$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd98ab30-3f44-3469-a214-88d437f51858.roa File: fd98ab30-3f44-3469-a214-88d437f51858.roa (raw, json) Hash identifier: 3uBvzFaqwo74jXCd6BfMAoguvF1pAvmuUAxrdwR1VJs= Subject key identifier: 22:9E:F4:F9:97:6B:9D:48:C6:08:66:4F:07:ED:42:E9:E9:65:CE:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C5937F351F945DFB35A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd98ab30-3f44-3469-a214-88d437f51858.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.231.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:59:37:f3:51:f9:45:df:b3:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=b9de81a0-56a5-465b-ba5a-0a3f0328d80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:eb:97:6e:a1:13:ac:fc:fe:6a:69:a6:55:46: cd:18:87:84:8f:1a:cf:8a:40:dc:bf:40:62:51:8e: 1c:e3:75:e8:22:9b:8e:42:3e:42:90:fb:11:64:ce: 58:7a:a4:e4:6f:ad:cb:3c:b2:3c:2d:81:bf:cc:6e: 66:ec:9d:c7:db:16:48:da:9a:9c:28:ad:8c:73:38: b1:07:e3:63:47:fa:6c:fa:b0:b4:5e:7d:54:40:bd: 19:5c:e2:bc:66:f4:55:aa:b7:8a:81:66:b7:30:ce: 7f:c6:11:31:9c:d7:87:ca:27:e3:3d:7f:18:46:78: 98:0f:4f:5b:4b:bb:51:8e:f4:fb:38:90:1a:08:79: b5:1e:f1:3a:0d:d3:17:3e:b4:d5:89:db:03:19:d7: 59:5b:41:37:0c:c9:5f:b0:ce:22:00:58:6b:aa:52: 33:03:70:fe:cf:0d:36:94:61:13:a2:c3:1a:82:2c: b2:57:af:50:38:9f:2e:47:b2:49:29:38:2d:e0:2d: 3a:58:f0:cb:8a:9f:f2:3f:2b:01:6a:e7:36:2d:b4: cd:43:c1:77:9b:ef:f3:40:72:1c:84:97:18:2a:b7: 6a:f7:d3:26:81:c4:f2:8d:cb:c9:c9:e1:84:3f:e5: 39:ab:e9:dd:b4:3d:25:75:f6:53:d5:89:3e:38:b2: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9E:F4:F9:97:6B:9D:48:C6:08:66:4F:07:ED:42:E9:E9:65:CE:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd98ab30-3f44-3469-a214-88d437f51858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:18:7c:29:af:3e:fd:e4:7e:77:01:e0:b2:4f:93:94:39:fb: 77:8d:f0:96:1c:4b:41:5a:e2:c2:2b:15:cc:0e:68:7b:30:a3: 3e:28:9b:ce:bd:04:88:6b:32:07:96:ad:0b:40:e9:a4:1a:dc: 32:82:cc:2b:9c:85:cc:06:e8:55:b9:7e:42:f3:ac:97:9f:eb: 15:1d:6d:6a:19:1a:d1:08:fc:d5:c7:18:5c:56:17:65:fb:b8: 45:14:52:13:0a:1b:66:97:db:69:6e:69:7b:79:46:7c:e5:ff: aa:77:77:34:c1:cb:cb:59:f3:c5:be:f5:15:5d:03:ea:2c:e3: d5:08:89:cb:7e:7b:f7:d0:6e:53:b5:6c:58:e8:da:d5:2f:9c: 44:c2:da:7d:41:ff:0c:e2:e2:ca:6d:c3:a3:bb:37:a9:40:b4: 8e:6c:78:d4:ca:ad:66:58:5e:4a:e6:85:f8:7a:b3:20:05:5d: 33:3c:a4:e1:1a:e5:c7:2b:16:d3:de:6f:9e:31:7f:98:0a:83: a0:8f:0a:0b:78:1a:13:c7:61:d3:c1:40:ae:3a:12:60:1a:eb: 7a:eb:0a:83:8d:ce:83:33:8e:f3:08:2a:c8:9f:79:d4:a7:f4: 5c:f4:cc:27:64:36:df:1b:51:97:09:b3:c2:8b:10:06:fe:f8: 36:20:a0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFk381H5Rd+zWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YjlkZTgxYTAtNTZhNS00NjViLWJhNWEtMGEzZjAzMjhkODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeuXbqETrPz+ammmVUbNGIeEjxrPikDcv0Bi UY4c43XoIpuOQj5CkPsRZM5YeqTkb63LPLI8LYG/zG5m7J3H2xZI2pqcKK2Mczix B+NjR/ps+rC0Xn1UQL0ZXOK8ZvRVqreKgWa3MM5/xhExnNeHyifjPX8YRniYD09b S7tRjvT7OJAaCHm1HvE6DdMXPrTVidsDGddZW0E3DMlfsM4iAFhrqlIzA3D+zw02 lGETosMagiyyV69QOJ8uR7JJKTgt4C06WPDLip/yPysBauc2LbTNQ8F3m+/zQHIc hJcYKrdq99MmgcTyjcvJyeGEP+U5q+ndtD0ldfZT1Yk+OLLY4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKe9PmXa51IxghmTwftQunpZc78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQ5OGFiMzAtM2Y0NC0z NDY5LWEyMTQtODhkNDM3ZjUxODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0YfCmvPv3kfncB4LJPk5Q5+3eN8JYcS0Fa4sIrFcwOaHswoz4om869 BIhrMgeWrQtA6aQa3DKCzCuchcwG6FW5fkLzrJef6xUdbWoZGtEI/NXHGFxWF2X7 uEUUUhMKG2aX22luaXt5Rnzl/6p3dzTBy8tZ88W+9RVdA+os49UIict+e/fQblO1 bFjo2tUvnETC2n1B/wzi4sptw6O7N6lAtI5seNTKrWZYXkrmhfh6syAFXTM8pOEa 5ccrFtPeb54xf5gKg6CPCgt4GhPHYdPBQK46EmAa63rrCoONzoMzjvMIKsifedSn 9Fz0zCdkNt8bUZcJs8KLEAb++DYgoIo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:58 2025 by rpki-client