$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03c2e442-cdf4-354f-ae2f-05245eb6e127.roa File: 03c2e442-cdf4-354f-ae2f-05245eb6e127.roa (raw, json) Hash identifier: +yu5H+ahd30P1ro27q+ypppjCBVn+unGwtvP+q1pPYs= Subject key identifier: 35:01:CC:94:C4:FD:90:B2:72:31:CD:97:57:C2:59:D5:15:D5:38:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F635F8BAA8829BED5580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03c2e442-cdf4-354f-ae2f-05245eb6e127.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f6:35:f8:ba:a8:82:9b:ed:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=ed257893-5bb0-42af-94a8-daabfaff2141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:19:1b:31:04:5b:ed:75:78:6c:4d:16:01: d1:b4:c1:6d:b8:ed:a7:18:f0:d5:56:15:d7:14:2a: 66:c1:5a:ef:b1:5e:94:cc:7f:2b:f1:98:71:e1:c5: 2f:70:c4:e0:f3:fa:dc:40:57:da:c9:31:ab:da:64: d5:a5:4b:f0:5d:24:24:11:d6:94:6d:46:a6:ae:89: 08:10:44:11:db:78:9d:1a:cc:d6:5d:0c:52:62:05: be:c1:09:ae:59:bd:dc:3f:15:d1:13:27:0e:01:c9: 7a:5d:83:a2:f7:1f:7a:21:e6:a9:a2:23:d8:dc:d4: 96:8f:79:9a:0a:4a:24:c3:ae:c3:96:bb:51:9c:58: 6b:70:a9:39:b1:a9:6d:c2:59:ee:1b:55:05:83:29: 93:2c:f2:6c:7e:84:0f:6e:22:da:2b:0f:fd:dd:06: 09:54:c0:f8:68:1f:b1:28:2b:67:af:f7:1e:dc:a8: 1e:ca:89:8b:e9:9d:ac:95:85:27:0a:3c:c9:c7:ba: 12:63:29:91:1b:8b:c1:2c:33:8a:86:98:40:08:5e: be:12:64:7a:5b:c0:93:1c:69:52:ae:77:54:ad:a8: 28:38:a0:05:f2:80:1f:9d:80:bf:cd:74:d4:75:cb: f0:98:a2:dd:30:97:7e:fa:53:6e:11:ea:40:46:d1: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:01:CC:94:C4:FD:90:B2:72:31:CD:97:57:C2:59:D5:15:D5:38:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03c2e442-cdf4-354f-ae2f-05245eb6e127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:19:49:cf:c7:f7:a3:64:ab:e8:e0:ab:c0:db:8d:ef:e8:cd: 9f:03:01:f0:8c:bb:d5:0e:8b:5b:a9:83:62:05:e6:53:a6:70: 01:23:73:1e:b5:b5:df:fb:85:b4:59:cf:0f:ea:57:e9:95:c1: d6:d2:d6:3f:0d:38:b4:b3:24:de:39:da:c2:04:c9:ed:58:6b: c6:43:71:1c:dc:c3:79:fa:24:10:e5:ba:1f:b5:ba:5e:10:75: 99:af:a4:cb:ad:a4:f5:be:99:45:a6:0c:00:bc:f8:75:f0:77: cb:bb:cd:bd:c0:4b:ce:c0:3b:75:bb:d0:2b:55:d1:26:0e:7c: 25:3c:61:6a:57:2c:f9:07:df:e2:e9:ef:88:76:5f:4d:be:bb: 01:ea:d5:53:bb:7a:e8:c1:fd:20:55:d1:dd:7a:11:72:eb:33: c1:6d:94:13:bb:99:67:38:ab:1a:02:f3:24:8f:2b:c0:be:6b: 01:9e:0a:be:56:8d:75:1c:97:16:02:df:50:24:c6:6c:c1:d6: 6b:2d:d1:cf:9e:17:39:1c:20:3e:d6:7a:d1:50:c8:f7:8b:27: 81:54:c1:36:46:ba:16:73:91:58:95:b6:57:a4:53:71:50:86: 83:f9:94:52:f5:3b:c1:3a:36:1c:f4:e8:25:44:09:3e:08:2a: f9:05:f0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvY1+LqogpvtVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWQyNTc4OTMtNWJiMC00MmFmLTk0YTgtZGFhYmZhZmYyMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXEZGzEEW+11eGxNFgHRtMFtuO2nGPDVVhXX FCpmwVrvsV6UzH8r8Zhx4cUvcMTg8/rcQFfayTGr2mTVpUvwXSQkEdaUbUamrokI EEQR23idGszWXQxSYgW+wQmuWb3cPxXREycOAcl6XYOi9x96IeapoiPY3NSWj3ma Ckokw67DlrtRnFhrcKk5saltwlnuG1UFgymTLPJsfoQPbiLaKw/93QYJVMD4aB+x KCtnr/ce3KgeyomL6Z2slYUnCjzJx7oSYymRG4vBLDOKhphACF6+EmR6W8CTHGlS rndUragoOKAF8oAfnYC/zXTUdcvwmKLdMJd++lNuEepARtHitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUBzJTE/ZCycjHNl1fCWdUV1TgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDNjMmU0NDItY2RmNC0z NTRmLWFlMmYtMDUyNDVlYjZlMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8ZSc/H96Nkq+jgq8Dbje/ozZ8DAfCMu9UOi1upg2IF5lOmcAEjcx61 td/7hbRZzw/qV+mVwdbS1j8NOLSzJN452sIEye1Ya8ZDcRzcw3n6JBDluh+1ul4Q dZmvpMutpPW+mUWmDAC8+HXwd8u7zb3AS87AO3W70CtV0SYOfCU8YWpXLPkH3+Lp 74h2X02+uwHq1VO7eujB/SBV0d16EXLrM8FtlBO7mWc4qxoC8ySPK8C+awGeCr5W jXUclxYC31AkxmzB1mst0c+eFzkcID7WetFQyPeLJ4FUwTZGuhZzkViVtlekU3FQ hoP5lFL1O8E6Nhz06CVECT4IKvkF8CE= -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:51 2025 by rpki-client