$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b26e2db-dfc8-37be-8694-e8a450574eef.roa File: 4b26e2db-dfc8-37be-8694-e8a450574eef.roa (raw, json) Hash identifier: tuMcboOVguRR7A3FV8pM0kjQGdfsIMT16VxruPGjIPg= Subject key identifier: 74:0C:C1:FD:E0:B0:09:63:4A:13:9B:0D:5C:F8:44:C2:58:2A:25:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C4762E811CCC5D9A74400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b26e2db-dfc8-37be-8694-e8a450574eef.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.225.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:47:62:e8:11:cc:c5:d9:a7:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=7c1d67ad-28ae-4133-ac2c-356d568f400a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:fe:a6:23:5c:44:ce:e6:45:19:18:86:9e: 63:fa:07:e2:96:a7:62:e2:4b:57:d5:dd:e0:04:4f: 5f:17:58:ef:72:ac:69:d0:2d:d0:bb:5a:3a:31:88: 44:c3:51:4a:3c:30:a8:9f:b8:a0:ff:00:5a:85:ee: ae:1b:db:33:66:87:ca:aa:52:f2:64:41:ab:18:e6: 23:d8:2f:ed:7b:0f:a4:d8:2f:ad:e3:d8:87:a7:49: f0:10:68:99:01:3d:a6:9b:0b:07:8d:bb:de:2f:d2: d4:7c:c1:c1:b5:cc:a1:99:d2:6e:bd:01:6b:e6:1b: 49:47:c5:0c:f3:0e:a2:dc:14:1a:8c:63:d1:cb:57: ae:b4:85:32:19:60:a4:5c:e1:89:9e:f2:9d:09:58: 9e:2f:b7:b4:98:cd:25:94:4d:5d:65:3c:f9:d3:55: 88:5e:d1:f5:e1:1e:58:be:c5:a9:1b:c2:6b:31:fa: b2:5e:ef:70:eb:a8:b1:18:44:4a:c4:af:77:1c:d3: ae:1c:71:b8:60:e7:79:e0:11:01:5b:a3:1d:5b:01: 80:a3:94:7e:45:5e:e7:2e:24:d2:7f:a6:42:0c:e6: 62:1d:36:c6:e8:fc:2c:fe:52:10:0a:db:74:66:37: cf:da:fb:06:08:fe:98:7c:39:e6:2f:b5:82:f4:e1: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0C:C1:FD:E0:B0:09:63:4A:13:9B:0D:5C:F8:44:C2:58:2A:25:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b26e2db-dfc8-37be-8694-e8a450574eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bd:39:e7:7f:ae:ab:50:f9:4a:ee:0c:bf:e9:c7:fd:03:42: 19:9f:b7:93:86:53:b1:8e:51:f3:9e:fc:b6:fa:74:5a:a8:fc: 57:bf:56:18:a3:24:6d:6f:99:7e:f4:90:58:1e:e9:53:6e:3a: 28:fe:34:93:84:33:81:7e:ec:92:ac:ea:b8:6f:c5:88:e5:b3: 89:80:30:c0:77:4a:37:6e:99:d3:7f:0b:29:64:85:02:4b:74: 27:06:28:18:f8:1f:07:90:19:83:3d:9f:88:bc:cd:ba:2b:d9: 8e:bd:c9:9b:12:1b:36:bc:56:8b:2d:93:46:9a:a2:9f:aa:df: c7:1e:01:a3:83:87:d9:ae:a6:6d:77:ac:9d:b2:10:57:28:a8: 83:6e:de:40:13:d8:c2:b9:d8:d2:78:bb:5e:b4:95:0c:44:d8: d2:9b:7e:60:29:86:89:a0:5f:b0:89:33:fc:83:13:6b:f5:d7: d6:af:58:16:42:2d:62:2a:53:19:29:de:40:fa:ca:94:35:cb: f7:80:72:d7:89:15:66:d8:e0:af:a4:2a:5b:88:8c:c8:65:cc: 35:b8:ac:94:d6:27:06:80:0a:1d:96:ee:a0:7a:3e:21:df:36: 75:7e:ef:2f:a7:a6:8d:46:03:53:c9:10:b0:7d:a5:ac:f9:fe: 63:af:f9:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEdi6BHMxdmnRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk N2MxZDY3YWQtMjhhZS00MTMzLWFjMmMtMzU2ZDU2OGY0MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjND+piNcRM7mRRkYhp5j+gfilqdi4ktX1d3g BE9fF1jvcqxp0C3Qu1o6MYhEw1FKPDCon7ig/wBahe6uG9szZofKqlLyZEGrGOYj 2C/tew+k2C+t49iHp0nwEGiZAT2mmwsHjbveL9LUfMHBtcyhmdJuvQFr5htJR8UM 8w6i3BQajGPRy1eutIUyGWCkXOGJnvKdCVieL7e0mM0llE1dZTz501WIXtH14R5Y vsWpG8JrMfqyXu9w66ixGERKxK93HNOuHHG4YOd54BEBW6MdWwGAo5R+RV7nLiTS f6ZCDOZiHTbG6Pws/lIQCtt0ZjfP2vsGCP6YfDnmL7WC9OF4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQMwf3gsAljShObDVz4RMJYKiUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGIyNmUyZGItZGZjOC0z N2JlLTg2OTQtZThhNDUwNTc0ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+9Oed/rqtQ+UruDL/px/0DQhmft5OGU7GOUfOe/Lb6dFqo/Fe/Vhij JG1vmX70kFge6VNuOij+NJOEM4F+7JKs6rhvxYjls4mAMMB3SjdumdN/CylkhQJL dCcGKBj4HweQGYM9n4i8zbor2Y69yZsSGza8Vostk0aaop+q38ceAaODh9mupm13 rJ2yEFcoqINu3kAT2MK52NJ4u160lQxE2NKbfmAphomgX7CJM/yDE2v119avWBZC LWIqUxkp3kD6ypQ1y/eActeJFWbY4K+kKluIjMhlzDW4rJTWJwaACh2W7qB6PiHf NnV+7y+npo1GA1PJELB9paz5/mOv+Ys= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:39 2025 by rpki-client