$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa File: db3f4236-658c-369a-8951-e6253effe417.roa (raw, json) Hash identifier: knBNjJbA8ZhMTLK16ornjSH+z5o9AMK3Le1K1J0xgjk= Subject key identifier: 34:C0:9E:4F:C1:4B:28:E5:9A:50:6E:45:3F:D6:7E:62:A6:EF:7F:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066F58170F7AA179F13D580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.108.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:f5:81:70:f7:aa:17:9f:13:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=fd03ddc4-9447-4f8a-9c84-0fb890e0c8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:cb:f5:8a:d1:9e:23:53:a2:9d:9f:8a:b8: 21:71:fa:43:79:10:f2:12:b9:f3:71:86:e6:3a:52: 95:b8:ca:db:b9:64:9e:68:d0:4e:bb:4c:96:4f:83: 07:d8:c4:8a:9a:51:0f:8d:d6:d9:b0:ae:6d:df:67: 42:8b:f7:b2:98:5a:06:56:96:9b:fe:8a:da:2e:a2: 6b:98:48:82:ea:23:a6:1a:64:7f:c4:96:6d:3a:f1: 59:01:07:04:41:3e:1e:ce:3a:87:57:aa:0a:64:15: 76:d7:23:9b:7b:3b:55:02:93:fe:c7:44:30:76:fd: f4:11:be:b3:34:2f:72:0f:da:5d:65:0c:d7:b9:7f: be:df:30:8f:60:7a:53:a4:20:d8:83:19:91:3f:ce: 64:b9:61:40:d8:c0:e4:b8:50:b6:62:c1:77:07:bf: 19:3f:95:a9:63:36:38:1f:0b:a2:7c:e2:9b:40:8c: 66:c9:e7:cb:48:8c:96:b0:91:94:e1:69:97:dd:ba: 58:19:4c:c0:87:71:65:1f:50:a1:77:3c:fe:2d:e5: 6c:bd:95:26:35:fa:f8:f5:44:11:2d:a4:24:26:fd: d6:b3:b2:21:94:1c:1c:62:e0:ef:94:33:43:7a:44: 03:04:7a:09:f0:e5:0e:5a:12:94:fb:68:dc:45:2e: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:9E:4F:C1:4B:28:E5:9A:50:6E:45:3F:D6:7E:62:A6:EF:7F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4f:53:d3:bd:c3:9b:10:be:3f:0f:2b:65:d9:f3:a8:79:cd: da:49:a7:42:a8:c7:25:d4:d8:f6:7d:f5:9f:e4:57:62:8a:52: 8a:5d:51:4e:0d:f9:e1:0c:7b:9b:e5:33:22:20:07:63:fc:04: 67:6a:97:80:3e:04:67:a4:b5:15:64:66:96:92:e1:2a:c2:9c: 79:c1:48:7e:49:ac:6c:de:5f:79:59:c5:8b:dc:d4:9f:c9:68: 88:6e:41:64:ee:09:c4:09:15:56:76:ab:10:c0:db:c1:39:38: df:de:df:4a:f4:20:89:79:27:f0:b8:70:10:91:db:c6:b6:00: b8:c9:53:82:e7:2b:29:16:7f:ff:7b:5c:dc:98:d8:ad:8b:10: 71:d9:76:ea:61:5c:2e:b0:c6:fb:5a:f7:e7:25:c5:28:62:9a: fe:50:4b:49:ba:b8:08:41:ef:b4:22:b8:ed:51:ee:65:86:5a: 0e:7c:9e:85:39:f4:f7:16:98:e8:99:70:fd:6b:c5:3f:72:d2: 21:f7:63:ab:2a:ab:8a:40:09:f6:af:31:a2:40:0f:c9:a4:c8: fd:e8:02:b3:ed:c5:7f:bc:af:ce:42:5c:15:27:c6:ce:aa:73: 98:4c:93:9b:92:f9:54:f9:6f:4c:04:17:5d:90:d1:b5:ba:ac: 20:ef:ab:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZvWBcPeqF58T1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmQwM2RkYzQtOTQ0Ny00ZjhhLTljODQtMGZiODkwZTBjOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhATL9YrRniNTop2firghcfpDeRDyErnzcYbm OlKVuMrbuWSeaNBOu0yWT4MH2MSKmlEPjdbZsK5t32dCi/eymFoGVpab/oraLqJr mEiC6iOmGmR/xJZtOvFZAQcEQT4ezjqHV6oKZBV21yObeztVApP+x0Qwdv30Eb6z NC9yD9pdZQzXuX++3zCPYHpTpCDYgxmRP85kuWFA2MDkuFC2YsF3B78ZP5WpYzY4 HwuifOKbQIxmyefLSIyWsJGU4WmX3bpYGUzAh3FlH1Chdzz+LeVsvZUmNfr49UQR LaQkJv3Ws7IhlBwcYuDvlDNDekQDBHoJ8OUOWhKU+2jcRS62owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTAnk/BSyjlmlBuRT/WfmKm739IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGIzZjQyMzYtNjU4Yy0z NjlhLTg5NTEtZTYyNTNlZmZlNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRPU9O9w5sQvj8PK2XZ86h5zdpJp0KoxyXU2PZ99Z/kV2KKUopdUU4N +eEMe5vlMyIgB2P8BGdql4A+BGektRVkZpaS4SrCnHnBSH5JrGzeX3lZxYvc1J/J aIhuQWTuCcQJFVZ2qxDA28E5ON/e30r0IIl5J/C4cBCR28a2ALjJU4LnKykWf/97 XNyY2K2LEHHZduphXC6wxvta9+clxShimv5QS0m6uAhB77QiuO1R7mWGWg58noU5 9PcWmOiZcP1rxT9y0iH3Y6sqq4pACfavMaJAD8mkyP3oArPtxX+8r85CXBUnxs6q c5hMk5uS+VT5b0wEF12Q0bW6rCDvq5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:56 2025 by rpki-client