$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8da1e33-b06e-3bb9-9495-7a471ef342a8.roa File: e8da1e33-b06e-3bb9-9495-7a471ef342a8.roa (raw, json) Hash identifier: F0YRl7W+lSZRAQ8Q5FNLqGMbIKZSfszFAH0OE8BhybQ= Subject key identifier: 90:D1:25:41:D3:15:E1:01:B6:CE:4C:52:F5:0E:86:0D:F7:FE:57:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C5195AC745AD90C1ADDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8da1e33-b06e-3bb9-9495-7a471ef342a8.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:51:95:ac:74:5a:d9:0c:1a:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d4ff520b-892e-49f6-9928-024aadcab1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:5b:80:05:95:d7:67:46:3a:8d:2d:5c:fc: 23:3e:c4:d9:83:f5:c2:22:1b:e7:6c:55:26:e4:c2: be:02:87:cf:6e:48:79:c5:4d:e9:c0:53:28:a9:15: 43:eb:98:ec:7e:ab:62:67:ec:09:75:7d:bb:26:86: 3d:fe:66:27:92:dc:2d:2e:5f:0f:ae:bf:60:23:47: 2a:7c:89:e3:27:88:a6:9e:c2:53:b5:db:27:83:6f: df:f4:05:6a:f8:05:79:e3:f4:39:51:8e:54:3e:a4: f3:46:21:29:63:27:76:b0:8d:22:46:80:36:51:09: e8:40:84:8c:8c:5f:7d:03:42:09:6d:e6:1c:96:68: 09:41:2e:01:fb:25:7b:f1:4c:93:06:5c:c7:d3:d9: 7c:aa:93:bb:b6:28:64:64:1f:d1:19:f3:6a:c8:1f: 2c:28:04:ce:d1:30:0f:91:65:ab:5e:c1:94:56:9f: 4b:12:54:12:7d:8d:61:e3:e5:51:71:4c:e9:e4:5d: b1:41:e2:05:cb:67:da:77:da:70:2d:c3:07:2f:11: a7:6f:e7:23:a9:20:48:8f:99:ef:c9:30:fa:a4:0b: 61:d7:1d:c9:5c:ef:f7:7a:db:72:7c:78:fd:03:69: 68:a1:49:94:c4:68:46:4f:b6:10:af:e4:e1:4b:ca: 77:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D1:25:41:D3:15:E1:01:B6:CE:4C:52:F5:0E:86:0D:F7:FE:57:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8da1e33-b06e-3bb9-9495-7a471ef342a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7c:74:50:7c:86:6e:81:8c:6a:51:4e:53:fb:1d:79:77:9b: 17:9c:85:d5:00:a4:24:cf:4f:fd:ba:23:6f:66:dc:42:2e:eb: 0d:1c:00:49:45:d4:4b:b2:f2:0c:06:d3:50:aa:48:a9:06:47: 0c:f5:1b:70:df:30:62:0e:b1:c1:0c:43:c1:b9:27:06:a5:06: 12:ed:a2:54:1a:4a:b6:9d:3f:de:81:09:bd:ec:4e:54:95:52: db:4e:df:72:cb:94:f7:86:2e:fd:0f:75:9b:e8:e7:69:b0:2d: 41:c7:47:af:c4:bb:f3:89:52:63:24:de:ae:58:2d:5c:da:94: 6e:6a:b5:28:08:b7:91:06:aa:ee:78:7b:d1:0d:a2:c6:9f:ac: 2a:0a:8c:1d:05:9f:1f:3d:40:03:ec:31:98:ac:d1:0a:a5:69: ef:8d:f5:82:3f:4c:7d:75:e7:3f:45:a2:2d:24:1e:a4:91:3b: 74:cb:85:82:4d:6c:5c:57:b3:dc:0c:ad:ba:7c:7b:85:2e:73: 73:48:1b:ca:7c:41:e1:66:71:8e:99:aa:fc:f9:b3:b3:bf:51: 0f:89:4d:93:83:c6:23:af:a3:fa:f9:8e:49:db:0f:11:30:fb: 1d:98:12:ef:45:39:a1:54:02:22:ed:92:3a:9c:91:70:7e:1d: 0b:c0:f5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnFGVrHRa2Qwa3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDRmZjUyMGItODkyZS00OWY2LTk5MjgtMDI0YWFkY2FiMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xbgAWV12dGOo0tXPwjPsTZg/XCIhvnbFUm 5MK+AofPbkh5xU3pwFMoqRVD65jsfqtiZ+wJdX27JoY9/mYnktwtLl8Prr9gI0cq fInjJ4imnsJTtdsng2/f9AVq+AV54/Q5UY5UPqTzRiEpYyd2sI0iRoA2UQnoQISM jF99A0IJbeYclmgJQS4B+yV78UyTBlzH09l8qpO7tihkZB/RGfNqyB8sKATO0TAP kWWrXsGUVp9LElQSfY1h4+VRcUzp5F2xQeIFy2fad9pwLcMHLxGnb+cjqSBIj5nv yTD6pAth1x3JXO/3ettyfHj9A2looUmUxGhGT7YQr+ThS8p3DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDRJUHTFeEBts5MUvUOhg33/lf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZThkYTFlMzMtYjA2ZS0z YmI5LTk0OTUtN2E0NzFlZjM0MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV8dFB8hm6BjGpRTlP7HXl3mxechdUApCTPT/26I29m3EIu6w0cAElF 1Euy8gwG01CqSKkGRwz1G3DfMGIOscEMQ8G5JwalBhLtolQaSradP96BCb3sTlSV UttO33LLlPeGLv0PdZvo52mwLUHHR6/Eu/OJUmMk3q5YLVzalG5qtSgIt5EGqu54 e9ENosafrCoKjB0Fnx89QAPsMZis0Qqlae+N9YI/TH115z9Foi0kHqSRO3TLhYJN bFxXs9wMrbp8e4Uuc3NIG8p8QeFmcY6Zqvz5s7O/UQ+JTZODxiOvo/r5jknbDxEw +x2YEu9FOaFUAiLtkjqckXB+HQvA9Ys= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:24 2025 by rpki-client