$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b820704-9652-38a8-be56-55aaccf72ec8.roa File: 7b820704-9652-38a8-be56-55aaccf72ec8.roa (raw, json) Hash identifier: ERXgEPJQkPL71DCxKS3MAjhKUIHqDAD4oaXT9YAC7jE= Subject key identifier: F2:0B:09:4D:AC:6C:76:E3:0B:6A:DE:81:AB:48:00:82:83:76:B1:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F8D7C75950FAA6149900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b820704-9652-38a8-be56-55aaccf72ec8.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f8:d7:c7:59:50:fa:a6:14:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=d5543f24-23ac-4cb8-b93e-06111675abae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:ba:d2:a3:e3:54:d8:de:b6:71:69:08:82: f4:de:fc:31:00:e0:72:68:9f:65:9d:f6:2c:85:7b: df:79:e2:6f:13:fa:58:ac:01:3e:27:de:36:55:af: 2a:0b:1a:ed:55:97:82:05:dd:d6:86:1b:46:65:88: 9f:d6:1d:0a:c3:5f:41:44:78:c0:78:dd:a1:d1:14: 92:f0:e3:43:7b:b6:1e:fb:85:92:3c:7b:84:62:e9: 89:d4:c0:d9:64:9e:bb:1b:04:e4:1e:fe:53:93:43: 57:79:3e:e1:44:d6:06:6f:15:51:0a:fc:0c:16:53: 52:9d:57:f4:43:9d:a5:e5:66:8f:5e:a9:98:d4:8e: 6a:30:df:34:52:b4:dd:6b:8f:43:62:7b:e5:c6:f2: ff:f7:c5:0b:7d:81:75:f1:11:8f:03:84:a9:bd:ca: 85:2f:21:1f:da:a8:6c:8e:eb:82:d9:f2:83:1f:c1: b4:c2:6f:3b:f2:c9:79:02:b6:2e:f7:4a:65:11:17: 6d:6d:04:0a:b2:2f:50:21:f8:a1:4a:2f:b9:f7:d1: ee:74:97:bd:99:f1:14:85:be:49:e2:3b:66:52:8d: 5f:71:06:2f:04:7b:5f:d4:23:27:c8:4f:af:6a:c6: c4:fd:28:04:f1:eb:32:12:ee:3a:d1:13:38:7d:d0: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:09:4D:AC:6C:76:E3:0B:6A:DE:81:AB:48:00:82:83:76:B1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b820704-9652-38a8-be56-55aaccf72ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:52:6c:e4:d6:7d:c9:b0:c5:34:79:0f:bb:6b:a4:fd:99:f4: 9f:00:9b:67:74:0b:d6:1c:9c:39:f1:7b:75:ce:03:98:4f:32: 86:29:e5:3b:46:0f:2a:ed:a6:76:04:55:2b:25:7c:45:a4:8c: 3f:6d:d2:d7:35:8b:35:0c:24:53:f4:fe:f0:2f:c5:53:64:7c: 69:d1:32:71:f6:cd:a7:99:b6:5c:fc:d8:90:68:59:2e:90:43: c8:ea:04:5f:97:31:b2:71:b5:ed:63:c6:83:fd:f8:87:39:8c: bc:99:34:4d:f2:98:e5:ed:2c:f5:ee:ec:9f:2b:e6:4b:c9:48: d0:43:b6:82:69:4f:91:22:dc:9b:a4:51:f8:1e:5f:85:ab:ba: d7:27:90:33:ab:f6:4f:55:04:1f:2f:7d:8b:9a:ef:a0:91:50: 1e:0f:22:c1:d8:b5:08:7a:eb:5c:4d:4c:dc:02:e8:3b:f2:82: 2c:13:f4:c6:6c:29:48:19:3a:f9:e0:66:76:87:2c:43:f9:c1: bf:60:0e:41:30:f1:24:00:a7:ab:dc:22:ae:7a:7b:6b:58:42: b8:34:db:53:93:ca:5e:c7:a4:4b:a5:a8:94:dc:56:ad:a7:32: 6f:a6:ea:e8:12:d0:b4:2f:a7:28:c4:15:9a:56:d7:b7:40:25: 88:2b:15:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvjXx1lQ+qYUmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDU1NDNmMjQtMjNhYy00Y2I4LWI5M2UtMDYxMTE2NzVhYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0260qPjVNjetnFpCIL03vwxAOByaJ9lnfYs hXvfeeJvE/pYrAE+J942Va8qCxrtVZeCBd3WhhtGZYif1h0Kw19BRHjAeN2h0RSS 8ONDe7Ye+4WSPHuEYumJ1MDZZJ67GwTkHv5Tk0NXeT7hRNYGbxVRCvwMFlNSnVf0 Q52l5WaPXqmY1I5qMN80UrTda49DYnvlxvL/98ULfYF18RGPA4SpvcqFLyEf2qhs juuC2fKDH8G0wm878sl5ArYu90plERdtbQQKsi9QIfihSi+599HudJe9mfEUhb5J 4jtmUo1fcQYvBHtf1CMnyE+vasbE/SgE8esyEu460RM4fdDbnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPILCU2sbHbjC2regatIAIKDdrHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2I4MjA3MDQtOTY1Mi0z OGE4LWJlNTYtNTVhYWNjZjcyZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNSbOTWfcmwxTR5D7trpP2Z9J8Am2d0C9YcnDnxe3XOA5hPMoYp5TtG DyrtpnYEVSslfEWkjD9t0tc1izUMJFP0/vAvxVNkfGnRMnH2zaeZtlz82JBoWS6Q Q8jqBF+XMbJxte1jxoP9+Ic5jLyZNE3ymOXtLPXu7J8r5kvJSNBDtoJpT5Ei3Juk UfgeX4WrutcnkDOr9k9VBB8vfYua76CRUB4PIsHYtQh661xNTNwC6DvygiwT9MZs KUgZOvngZnaHLEP5wb9gDkEw8SQAp6vcIq56e2tYQrg021OTyl7HpEulqJTcVq2n Mm+m6ugS0LQvpyjEFZpW17dAJYgrFaY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:13 2025 by rpki-client