$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73b21c7f-ed49-30d6-914c-520a054280ba.roa File: 73b21c7f-ed49-30d6-914c-520a054280ba.roa (raw, json) Hash identifier: /YLl22GQn513JImHgVyLhjeHBlp2SPUiLYVsml0cWNE= Subject key identifier: 87:24:9C:2A:04:0D:09:CF:25:42:E8:D6:6E:13:E8:D1:1D:E0:07:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066FA052D6577C10F89D9E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73b21c7f-ed49-30d6-914c-520a054280ba.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.224.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:fa:05:2d:65:77:c1:0f:89:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=ffc8fec7-5aa6-4e4e-807f-6ed7e3d14e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:a6:a4:37:7e:e4:d0:83:3b:32:59:25:a3: 39:02:92:b5:fb:12:07:9e:97:c9:c3:ba:c9:d4:31: 92:56:3d:72:1b:ee:73:d0:36:93:78:f3:34:4e:94: 44:54:04:a5:93:e4:e2:b3:84:69:b3:22:64:f3:e6: 0f:00:ad:76:48:3c:81:8a:2b:e5:4e:0d:dd:17:8c: 35:e5:29:31:7d:3d:79:c3:e4:43:4b:b4:06:e5:14: 5d:a4:72:3f:2d:e1:8d:31:ba:00:30:10:22:44:88: f5:41:84:29:74:2f:27:c3:13:64:32:d1:48:7c:5d: c9:1e:9a:f7:ae:ba:96:5c:5d:94:2b:9d:04:a1:89: 62:be:e2:7f:3a:72:0d:c7:ef:a9:54:c0:f0:9f:26: cd:23:f1:19:f4:66:5c:f1:03:74:b8:d6:49:a8:d6: 6a:c4:19:31:64:57:e0:5f:f5:62:0a:84:de:07:12: 66:86:8a:42:8a:16:d8:8a:0d:ae:24:68:13:24:54: 24:89:85:cf:e0:02:21:91:d5:14:73:8d:78:dd:89: c6:72:38:94:21:81:51:b1:5e:ae:87:8c:e9:c2:aa: 21:af:f0:d4:0e:26:33:b3:61:3f:42:81:ca:07:cd: 5e:1e:c4:db:f1:be:10:53:5d:4e:26:33:95:c2:16: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:24:9C:2A:04:0D:09:CF:25:42:E8:D6:6E:13:E8:D1:1D:E0:07:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73b21c7f-ed49-30d6-914c-520a054280ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d0:ff:26:7d:eb:78:54:2a:93:0a:0c:72:b1:18:ac:f4:35: e1:b1:30:ff:48:d8:1d:55:46:f8:15:c7:2e:ce:0f:06:7b:23: 63:75:c3:7f:35:ab:d6:6f:df:9b:e4:52:0f:75:c7:8d:3a:d0: 6c:d0:39:25:34:3d:f4:35:44:0b:60:bb:2b:ee:8c:71:2f:be: f4:30:db:48:92:93:59:27:4c:0c:b9:da:2a:eb:87:6b:c9:a6: 8f:0c:58:ac:48:5c:89:cb:bd:d7:0b:c5:58:1c:83:ac:f4:be: c4:15:93:fd:fd:bf:3d:77:5d:7e:0c:7a:1c:0c:66:e2:49:e2: 50:80:f2:ff:14:f1:0c:15:d6:17:e3:e2:e4:1a:cb:33:e3:27: 45:17:e2:49:c2:ae:bd:73:bd:2c:ee:e1:55:09:62:8e:ae:d9: 65:f9:06:9a:c8:8e:f0:b3:cb:65:41:8b:10:99:e6:51:e9:33: ab:ad:47:61:7a:b3:31:fa:b7:81:3a:e5:58:df:cf:a7:d8:0b: 70:90:9d:e7:6d:79:81:97:de:6d:98:ee:2e:53:d3:10:25:d8: 7c:52:e2:97:c2:8d:54:34:4e:92:29:2f:7b:4f:07:bc:37:c6: 33:5c:08:e6:76:ee:70:a2:71:3f:54:a9:b0:dd:19:77:d9:30: 67:b0:eb:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvoFLWV3wQ+J2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmZjOGZlYzctNWFhNi00ZTRlLTgwN2YtNmVkN2UzZDE0ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOampDd+5NCDOzJZJaM5ApK1+xIHnpfJw7rJ 1DGSVj1yG+5z0DaTePM0TpREVASlk+Tis4RpsyJk8+YPAK12SDyBiivlTg3dF4w1 5SkxfT15w+RDS7QG5RRdpHI/LeGNMboAMBAiRIj1QYQpdC8nwxNkMtFIfF3JHpr3 rrqWXF2UK50EoYlivuJ/OnINx++pVMDwnybNI/EZ9GZc8QN0uNZJqNZqxBkxZFfg X/ViCoTeBxJmhopCihbYig2uJGgTJFQkiYXP4AIhkdUUc4143YnGcjiUIYFRsV6u h4zpwqohr/DUDiYzs2E/QoHKB81eHsTb8b4QU11OJjOVwhbKxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcknCoEDQnPJULo1m4T6NEd4Ae8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzNiMjFjN2YtZWQ0OS0z MGQ2LTkxNGMtNTIwYTA1NDI4MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHQ/yZ963hUKpMKDHKxGKz0NeGxMP9I2B1VRvgVxy7ODwZ7I2N1w381 q9Zv35vkUg91x4060GzQOSU0PfQ1RAtguyvujHEvvvQw20iSk1knTAy52irrh2vJ po8MWKxIXInLvdcLxVgcg6z0vsQVk/39vz13XX4MehwMZuJJ4lCA8v8U8QwV1hfj 4uQayzPjJ0UX4knCrr1zvSzu4VUJYo6u2WX5BprIjvCzy2VBixCZ5lHpM6utR2F6 szH6t4E65Vjfz6fYC3CQnedteYGX3m2Y7i5T0xAl2HxS4pfCjVQ0TpIpL3tPB7w3 xjNcCOZ27nCicT9UqbDdGXfZMGew66s= -----END CERTIFICATE-----Generated at Wed Nov 5 16:16:12 2025 by rpki-client