$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d99e480-d275-310c-b9cc-c14cc851d750.roa File: 1d99e480-d275-310c-b9cc-c14cc851d750.roa (raw, json) Hash identifier: xzWxiRMX11MoG3j2nnxftNa1v9zQgDQQTQCHQth70So= Subject key identifier: 41:48:80:AB:02:4C:78:96:52:A0:F9:8D:E3:C9:5D:A6:17:60:52:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C46FB5953EAF5A55EA1D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d99e480-d275-310c-b9cc-c14cc851d750.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.225.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:46:fb:59:53:ea:f5:a5:5e:a1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e814b540-077e-4d94-9272-24f3c448ad1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:34:b4:fb:a8:7b:48:4c:74:24:fd:da:f8: 75:dd:26:26:c7:a4:bc:59:d4:6c:44:5b:62:b1:48: ed:04:24:6d:11:18:13:b8:a8:45:c4:c9:b2:ea:84: 22:48:83:02:77:3e:f1:27:30:c2:ac:7f:08:fb:69: 7e:eb:9b:5c:fe:8b:a9:29:4f:c5:5d:f5:5a:c3:77: c3:73:b7:99:16:74:78:85:07:13:5b:89:0b:87:61: a1:05:72:39:17:c6:cb:80:44:89:48:f9:c8:b5:a3: b2:ae:c1:46:16:20:79:a0:49:25:fe:45:18:63:07: 7e:55:8e:1b:4d:33:fb:bd:4f:25:53:4d:51:59:e9: 09:ab:78:6e:c4:c5:dd:28:bf:fe:01:be:9c:af:b4: 42:37:5e:8c:5e:5f:2c:96:10:9f:7d:44:70:62:04: c2:3a:7a:8d:75:8a:39:7e:f7:92:b0:c5:13:e7:8d: 3c:f9:89:dc:41:a2:26:42:95:e6:04:eb:e8:be:3f: f6:1c:60:58:f8:78:60:e0:8a:fe:c1:dd:f7:a8:2e: bd:2b:d2:59:87:7f:0a:35:63:33:05:46:07:5b:7c: 04:c5:8f:44:c8:b5:9f:d2:74:40:cd:f0:5c:1a:ac: 8d:b6:d3:dd:70:a5:41:a8:61:50:33:67:cf:b1:33: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:48:80:AB:02:4C:78:96:52:A0:F9:8D:E3:C9:5D:A6:17:60:52:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d99e480-d275-310c-b9cc-c14cc851d750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d8:85:3f:55:c6:fb:45:13:9d:c3:e8:06:7d:51:66:53:f4: 19:42:58:26:46:3e:ff:64:2d:04:5e:11:33:87:f7:dc:da:90: 93:41:5c:1d:30:73:93:67:28:18:9b:99:d2:9b:d1:4f:5c:a2: 5a:4a:6e:54:01:21:05:11:bb:17:bd:ea:84:1b:9b:b1:13:bf: 09:0d:bd:af:da:c4:be:5e:a1:5a:c3:db:09:57:4a:81:8d:c2: 9a:7e:21:2c:c6:45:f6:08:38:48:b3:d0:2e:c5:4b:1e:5a:8c: 30:ec:bd:79:2a:a4:b6:b8:50:4d:7b:15:e7:6c:7c:c0:fc:ca: e9:12:2f:08:35:12:2e:f1:c5:86:c2:0b:a5:41:61:88:11:29: 2d:11:f3:6b:93:80:e3:4c:01:54:b4:03:bf:d0:af:5c:2f:a4: 9e:ec:96:30:f6:33:38:81:6f:f7:70:05:0e:3e:3d:82:03:14: 1f:f9:5d:c9:b2:e7:73:88:e0:7a:8b:c5:0a:d2:14:ca:8a:00: c1:c9:67:51:ad:34:35:56:2f:d1:91:74:bd:a8:38:7d:c7:6a: c7:17:e5:f9:fa:c5:93:80:fc:89:31:34:90:ce:6e:4c:43:94: 6d:2b:e1:93:2a:94:23:01:4e:01:5a:21:60:bf:f6:a6:24:c0: 3c:d2:88:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEb7WVPq9aVeodAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTgxNGI1NDAtMDc3ZS00ZDk0LTkyNzItMjRmM2M0NDhhZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG00tPuoe0hMdCT92vh13SYmx6S8WdRsRFti sUjtBCRtERgTuKhFxMmy6oQiSIMCdz7xJzDCrH8I+2l+65tc/oupKU/FXfVaw3fD c7eZFnR4hQcTW4kLh2GhBXI5F8bLgESJSPnItaOyrsFGFiB5oEkl/kUYYwd+VY4b TTP7vU8lU01RWekJq3huxMXdKL/+Ab6cr7RCN16MXl8slhCffURwYgTCOnqNdYo5 fveSsMUT5408+YncQaImQpXmBOvovj/2HGBY+Hhg4Ir+wd33qC69K9JZh38KNWMz BUYHW3wExY9EyLWf0nRAzfBcGqyNttPdcKVBqGFQM2fPsTMQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFIgKsCTHiWUqD5jePJXaYXYFIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ5OWU0ODAtZDI3NS0z MTBjLWI5Y2MtYzE0Y2M4NTFkNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXYhT9VxvtFE53D6AZ9UWZT9BlCWCZGPv9kLQReETOH99zakJNBXB0w c5NnKBibmdKb0U9colpKblQBIQURuxe96oQbm7ETvwkNva/axL5eoVrD2wlXSoGN wpp+ISzGRfYIOEiz0C7FSx5ajDDsvXkqpLa4UE17FedsfMD8yukSLwg1Ei7xxYbC C6VBYYgRKS0R82uTgONMAVS0A7/Qr1wvpJ7sljD2MziBb/dwBQ4+PYIDFB/5Xcmy 53OI4HqLxQrSFMqKAMHJZ1GtNDVWL9GRdL2oOH3HascX5fn6xZOA/IkxNJDObkxD lG0r4ZMqlCMBTgFaIWC/9qYkwDzSiIg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:14 2025 by rpki-client