$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d8654ff-0089-3af6-acd9-ec00313f0db0.roa File: 1d8654ff-0089-3af6-acd9-ec00313f0db0.roa (raw, json) Hash identifier: xx4WkOqXW3iIvFIYu8KHoGxibgq/9zxwQxr8BSXQlzw= Subject key identifier: 06:E7:01:B6:94:A2:01:FA:95:1D:61:22:C5:FF:0F:88:1D:64:59:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373DA746ED59A349C2E680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d8654ff-0089-3af6-acd9-ec00313f0db0.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.3.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:3d:a7:46:ed:59:a3:49:c2:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=03a1b309-8d11-4f94-826b-5cb6b421b624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:c4:54:bc:f1:60:bc:20:5f:8c:3e:91:c4: f2:91:de:0b:67:33:e0:79:c9:c7:d8:1b:8a:20:4c: d6:7f:d1:6c:6d:71:17:9a:dc:11:3b:82:3a:33:11: 66:56:c7:e2:4b:26:42:fa:93:4c:1d:24:dc:be:b7: 85:df:b0:e5:d7:39:60:86:45:ee:da:25:af:0c:a2: 46:85:bc:0f:04:82:47:41:93:b5:27:4f:ba:e8:c3: fe:ba:62:ff:c2:91:db:88:9f:db:16:af:22:18:29: 81:5f:df:0e:75:f2:5f:76:21:24:d5:84:4f:2b:bc: a5:45:f1:54:09:a5:9c:3b:78:76:ad:fb:61:0f:9d: 50:c2:9a:62:bd:d8:98:09:6b:25:7e:22:9b:a7:77: 3c:df:d0:cb:8e:9d:4f:ea:d1:37:57:99:b1:b6:bc: 40:48:a9:93:78:41:44:cf:d0:29:bb:25:88:c3:10: b0:a9:41:1e:5a:d5:6a:37:c4:e9:64:ed:b3:cd:a9: 92:53:ee:fc:46:3d:21:a4:5e:ee:31:3b:0e:cb:74: ee:02:21:d0:2b:6d:67:25:76:6e:53:c7:39:06:70: ca:a0:1f:db:0d:43:b8:95:55:99:8e:a6:c6:ff:8c: 5a:f5:5c:7c:3b:0e:5c:a9:6e:6a:92:92:e2:b7:3b: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:01:B6:94:A2:01:FA:95:1D:61:22:C5:FF:0F:88:1D:64:59:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d8654ff-0089-3af6-acd9-ec00313f0db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0a:66:45:55:4c:46:a4:34:44:dc:0f:22:df:d3:79:92:96: b9:11:06:88:9f:61:8a:fd:20:16:00:2e:a0:46:5f:bd:d1:a4: 2a:96:7a:86:3d:d1:05:20:07:43:5e:cd:dc:f8:cf:a7:7b:6b: 39:02:3d:bb:05:04:d8:42:c6:80:8a:5a:44:92:54:e3:6b:c4: 76:db:3c:97:e3:be:ca:ae:88:17:12:20:8b:64:36:4a:6c:f5: 49:48:4d:1c:bb:23:dd:44:ff:2b:c2:08:3e:80:dc:cd:d7:8d: 2b:ea:d8:e7:c5:2e:19:32:02:a3:44:b7:ea:d0:72:be:51:39: dc:4a:4d:6a:e8:27:b7:6f:76:1f:2a:fc:5e:ef:d5:51:54:c5: 69:36:d7:76:dd:02:7d:45:a4:c3:d1:dc:01:47:88:b4:db:76: f2:2b:e4:29:37:5c:e8:72:66:3b:ef:bf:28:57:e2:fa:48:03: 78:a9:81:82:17:a0:f2:82:15:59:22:8b:cf:df:a2:ba:8f:a0: 5a:56:bd:20:fc:51:81:58:43:d9:a5:cf:47:28:87:63:7f:8f: 54:43:43:ac:19:9f:7d:1c:dd:89:1c:03:f3:ba:28:92:6b:48: dc:49:63:60:32:39:5d:e7:91:9e:93:dd:1b:c4:45:71:5d:e1: bf:07:05:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNz2nRu1Zo0nC5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDNhMWIzMDktOGQxMS00Zjk0LTgyNmItNWNiNmI0MjFiNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtODEVLzxYLwgX4w+kcTykd4LZzPgecnH2BuK IEzWf9FsbXEXmtwRO4I6MxFmVsfiSyZC+pNMHSTcvreF37Dl1zlghkXu2iWvDKJG hbwPBIJHQZO1J0+66MP+umL/wpHbiJ/bFq8iGCmBX98OdfJfdiEk1YRPK7ylRfFU CaWcO3h2rfthD51QwppivdiYCWslfiKbp3c839DLjp1P6tE3V5mxtrxASKmTeEFE z9ApuyWIwxCwqUEeWtVqN8TpZO2zzamSU+78Rj0hpF7uMTsOy3TuAiHQK21nJXZu U8c5BnDKoB/bDUO4lVWZjqbG/4xa9Vx8Ow5cqW5qkpLitzueSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbnAbaUogH6lR1hIsX/D4gdZFnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ4NjU0ZmYtMDA4OS0z YWY2LWFjZDktZWMwMDMxM2YwZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwKZkVVTEakNETcDyLf03mSlrkRBoifYYr9IBYALqBGX73RpCqWeoY9 0QUgB0Nezdz4z6d7azkCPbsFBNhCxoCKWkSSVONrxHbbPJfjvsquiBcSIItkNkps 9UlITRy7I91E/yvCCD6A3M3XjSvq2OfFLhkyAqNEt+rQcr5ROdxKTWroJ7dvdh8q /F7v1VFUxWk213bdAn1FpMPR3AFHiLTbdvIr5Ck3XOhyZjvvvyhX4vpIA3ipgYIX oPKCFVkii8/forqPoFpWvSD8UYFYQ9mlz0coh2N/j1RDQ6wZn30c3YkcA/O6KJJr SNxJY2AyOV3nkZ6T3RvERXFd4b8HBV8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:33 2025 by rpki-client