$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa File: 1089f3bf-c876-3291-aa63-7a948e2855ae.roa (raw, json) Hash identifier: upMVHtJc4EZIdUlg8AHUDYxB1V1rofvhFjaeeI/e5LM= Subject key identifier: 9E:AD:31:2B:FE:B1:1C:BF:03:5C:5E:42:E9:59:7E:7D:68:51:F1:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066EBC108502FEFD62CE340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.96.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:eb:c1:08:50:2f:ef:d6:2c:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=cceba8cb-225c-410a-b3b4-555290b77261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:e7:a4:f5:ae:c4:df:7c:f2:45:b7:59:16: 4a:56:a3:41:5a:82:b2:60:78:3c:09:7c:9b:33:ed: fa:0e:5f:ba:98:7b:c5:b9:24:47:8d:6f:54:ac:35: 29:97:b8:56:ab:97:68:c7:63:76:3f:09:eb:a3:f4: 4f:d0:a2:4b:ae:fa:e0:f1:4d:83:16:11:98:64:b0: 82:d5:0a:2d:48:21:27:6d:c3:44:8d:30:47:0b:1f: 1d:fd:81:0e:f8:6b:74:4c:29:17:bc:c4:87:cf:89: fe:05:86:45:78:98:2e:10:36:0d:62:8c:a7:ef:c4: 8c:74:ca:7d:24:1d:2e:c8:79:c4:35:02:8a:af:58: 8d:99:09:80:0b:5e:4c:ec:b2:29:c6:0c:97:df:9c: 09:75:87:8b:01:fa:0b:12:d8:23:18:46:47:30:c8: 23:59:60:8f:89:ba:29:3b:75:e3:d2:12:67:ec:38: fe:c8:ea:b1:cd:44:58:3d:b2:70:6b:09:2d:21:fe: 62:0b:09:bd:3a:3a:d6:7c:bb:a2:b3:6e:44:10:25: d4:88:08:3b:8d:a5:30:99:5d:bb:62:d6:32:75:f9: 32:18:6b:f1:6f:ab:ba:9e:b3:a7:83:32:97:3d:97: e4:0e:63:c8:04:04:57:34:73:bc:f8:fb:84:1d:07: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AD:31:2B:FE:B1:1C:BF:03:5C:5E:42:E9:59:7E:7D:68:51:F1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:67:c0:ac:69:fc:53:7a:7e:58:ea:fe:30:bc:42:b2:8e:0a: 52:80:e3:24:97:49:26:9c:49:64:e8:21:30:33:ca:6a:e4:f7: 03:0c:07:50:3a:82:9c:a1:da:9a:ca:54:1d:ba:ef:59:79:ad: 47:cc:9c:dd:d8:8e:4d:8b:52:7e:da:4c:5f:b8:53:c7:86:d3: 62:0a:8f:df:37:18:f4:39:ce:db:d0:50:c6:d0:2d:12:4e:7e: aa:5d:03:d5:44:20:b3:ba:4a:37:b7:e9:4b:f8:de:f0:59:01: 96:3b:1c:9d:d3:8d:06:7f:6c:fe:76:0a:80:ba:a5:b3:5a:5d: 9c:74:8e:7a:97:7c:43:b6:60:04:6d:d0:b2:2b:52:90:3b:ed: 7d:1e:8f:42:0a:cc:bf:c0:4c:9a:23:7a:fa:a5:68:b5:16:55: 85:66:20:37:59:50:ca:ad:5c:98:bb:4e:7b:7d:96:d9:28:a9: e8:01:36:2a:1a:c5:31:dd:54:7b:60:78:43:8f:4a:6f:d7:67: a7:a2:57:57:f2:f7:b8:8d:c4:a0:11:ae:2d:f1:25:9e:53:ec: 5b:b7:0a:01:f9:8d:b9:f6:4c:86:b1:44:7b:77:e1:24:c3:0a: dc:5d:57:03:00:b6:1c:5c:46:64:ed:19:01:20:2a:b9:5d:bd: 99:8a:ab:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuvBCFAv79Ys40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2NlYmE4Y2ItMjI1Yy00MTBhLWIzYjQtNTU1MjkwYjc3MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNLnpPWuxN988kW3WRZKVqNBWoKyYHg8CXyb M+36Dl+6mHvFuSRHjW9UrDUpl7hWq5dox2N2Pwnro/RP0KJLrvrg8U2DFhGYZLCC 1QotSCEnbcNEjTBHCx8d/YEO+Gt0TCkXvMSHz4n+BYZFeJguEDYNYoyn78SMdMp9 JB0uyHnENQKKr1iNmQmAC15M7LIpxgyX35wJdYeLAfoLEtgjGEZHMMgjWWCPibop O3Xj0hJn7Dj+yOqxzURYPbJwawktIf5iCwm9OjrWfLuis25EECXUiAg7jaUwmV27 YtYydfkyGGvxb6u6nrOngzKXPZfkDmPIBARXNHO8+PuEHQfVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6tMSv+sRy/A1xeQulZfn1oUfFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTA4OWYzYmYtYzg3Ni0z MjkxLWFhNjMtN2E5NDhlMjg1NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNnwKxp/FN6fljq/jC8QrKOClKA4ySXSSacSWToITAzymrk9wMMB1A6 gpyh2prKVB2671l5rUfMnN3Yjk2LUn7aTF+4U8eG02IKj983GPQ5ztvQUMbQLRJO fqpdA9VEILO6Sje36Uv43vBZAZY7HJ3TjQZ/bP52CoC6pbNaXZx0jnqXfEO2YARt 0LIrUpA77X0ej0IKzL/ATJojevqlaLUWVYVmIDdZUMqtXJi7Tnt9ltkoqegBNioa xTHdVHtgeEOPSm/XZ6eiV1fy97iNxKARri3xJZ5T7Fu3CgH5jbn2TIaxRHt34STD CtxdVwMAthxcRmTtGQEgKrldvZmKq04= -----END CERTIFICATE-----Generated at Wed Nov 5 06:13:04 2025 by rpki-client