$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15769ad0-6689-3037-9a8b-86ba378c764a.roa File: 15769ad0-6689-3037-9a8b-86ba378c764a.roa (raw, json) Hash identifier: ifzy2yyeL5+xud2pwICUUHsvkGzmzCR7W4ZS9GGq5y8= Subject key identifier: E5:0F:0B:9A:AD:C9:0D:3D:A9:23:7D:03:96:38:7E:39:57:71:29:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3745C8F59BE9320633C000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15769ad0-6689-3037-9a8b-86ba378c764a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.98.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:45:c8:f5:9b:e9:32:06:33:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=f2bfbe3a-bc12-46bf-ae52-d05965bb3aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:e0:4c:82:93:1b:9f:cb:6e:18:04:0e:54: b7:0a:aa:ca:86:68:87:4c:a1:98:c5:1a:fe:0f:c0: 27:a4:b9:cf:1b:ee:17:7c:31:b8:67:31:82:5f:13: 8c:bc:82:3d:e1:8a:c4:b0:7e:57:eb:de:9a:8f:d2: b8:a5:57:24:85:41:2c:a2:9b:dd:96:de:d9:83:7e: cf:00:c3:62:5f:f0:ea:bd:32:32:3a:7d:07:51:03: 05:cd:4d:2a:66:0d:be:37:01:5a:79:14:8c:c7:f2: 30:c7:02:49:34:5d:70:86:55:6d:9c:d4:0d:fd:e5: 7e:88:8b:b0:8b:49:63:c9:95:0d:50:ba:94:89:14: d1:a9:11:25:4f:74:2a:92:9e:3c:e7:1b:80:5e:1b: 9c:20:a3:62:f9:31:cf:74:c8:0b:3d:7d:1b:de:fc: 61:e9:a2:b4:73:c1:01:71:01:2e:54:f5:70:aa:f6: 99:86:79:01:47:a5:36:93:26:0b:23:76:aa:67:ba: 12:93:55:38:86:7b:b1:d7:68:26:9d:f2:80:21:76: a0:2f:b4:ed:43:1c:a7:06:97:3c:46:01:01:89:2c: 27:55:69:21:9c:bd:0e:08:a2:34:fa:af:8c:f5:7a: 28:83:77:60:52:d6:11:fa:4e:33:56:74:97:ba:97: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:0B:9A:AD:C9:0D:3D:A9:23:7D:03:96:38:7E:39:57:71:29:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15769ad0-6689-3037-9a8b-86ba378c764a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9d:6d:cd:67:55:e0:54:ef:28:63:61:5a:5d:43:6d:5a:26: ab:a0:77:1c:7c:1c:cc:59:58:96:ce:dc:9e:dd:6d:04:46:b3: e0:09:42:df:3f:e1:e1:3e:b4:e9:fe:28:9f:16:9b:c0:7d:a8: ef:7e:9c:09:9f:3d:3e:84:c4:a3:32:0d:47:21:81:1a:fe:81: f3:43:41:9c:af:0b:88:18:fb:d0:a6:7d:b3:ee:77:5b:77:1f: 09:e4:a0:41:f4:83:00:e3:60:05:11:19:28:74:e2:03:1d:a4: 78:01:15:2e:8a:b6:99:fc:aa:be:8d:44:d2:c2:47:74:f8:e2: 5d:e1:e8:af:69:05:47:45:50:52:cd:f4:b3:7e:b1:20:1f:45: 44:30:77:a3:f9:32:29:1b:dd:e1:77:14:76:81:dd:75:fa:b3: b2:ce:aa:df:4a:74:1a:ed:e8:8c:c7:81:e6:bd:b9:61:bd:d1: 7a:a0:5d:a6:c9:d4:a1:c4:d5:3a:e5:27:90:b4:d8:5c:72:e2: 42:79:b3:86:74:f2:33:ca:2a:b7:ca:72:3d:ee:83:be:29:15: b7:2c:99:2f:89:c8:52:f4:ce:4e:b8:ed:fc:05:84:8d:03:41: 72:80:22:87:73:02:3a:3b:f4:9a:de:13:60:8d:47:30:88:2a: b0:3d:17:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN0XI9ZvpMgYzwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjJiZmJlM2EtYmMxMi00NmJmLWFlNTItZDA1OTY1YmIzYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9vgTIKTG5/LbhgEDlS3CqrKhmiHTKGYxRr+ D8AnpLnPG+4XfDG4ZzGCXxOMvII94YrEsH5X696aj9K4pVckhUEsopvdlt7Zg37P AMNiX/DqvTIyOn0HUQMFzU0qZg2+NwFaeRSMx/IwxwJJNF1whlVtnNQN/eV+iIuw i0ljyZUNULqUiRTRqRElT3Qqkp485xuAXhucIKNi+THPdMgLPX0b3vxh6aK0c8EB cQEuVPVwqvaZhnkBR6U2kyYLI3aqZ7oSk1U4hnux12gmnfKAIXagL7TtQxynBpc8 RgEBiSwnVWkhnL0OCKI0+q+M9Xoog3dgUtYR+k4zVnSXupdGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUPC5qtyQ09qSN9A5Y4fjlXcSm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTU3NjlhZDAtNjY4OS0z MDM3LTlhOGItODZiYTM3OGM3NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWdbc1nVeBU7yhjYVpdQ21aJqugdxx8HMxZWJbO3J7dbQRGs+AJQt8/ 4eE+tOn+KJ8Wm8B9qO9+nAmfPT6ExKMyDUchgRr+gfNDQZyvC4gY+9CmfbPud1t3 HwnkoEH0gwDjYAURGSh04gMdpHgBFS6Ktpn8qr6NRNLCR3T44l3h6K9pBUdFUFLN 9LN+sSAfRUQwd6P5Mikb3eF3FHaB3XX6s7LOqt9KdBrt6IzHgea9uWG90XqgXabJ 1KHE1TrlJ5C02Fxy4kJ5s4Z08jPKKrfKcj3ug74pFbcsmS+JyFL0zk647fwFhI0D QXKAIodzAjo79JreE2CNRzCIKrA9F64= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:50 2025 by rpki-client