$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff813561-30c2-3f35-9476-3efc405cd761.roa File: ff813561-30c2-3f35-9476-3efc405cd761.roa (raw, json) Hash identifier: 9XZzsvN3XacBGfipOHV6unsl21tcu4+sQKBdK1J78/Y= Subject key identifier: 8A:ED:DC:07:BB:91:55:A0:07:C5:FF:2E:E3:59:D2:18:99:5F:C4:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2066E8432686F30AD44DD700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff813561-30c2-3f35-9476-3efc405cd761.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.96.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e8:43:26:86:f3:0a:d4:4d:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=e25a2d21-da74-4dd4-9d55-c8f80ed9f73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:e1:ad:71:07:31:65:54:d9:a5:7a:18:fd: 99:c1:16:6e:5d:21:11:0b:83:28:5d:a5:32:5f:e5: 03:65:20:95:5c:b3:cd:08:16:4b:e2:12:fb:1d:37: 41:0d:66:fc:50:f1:96:59:d4:82:dd:df:37:6b:c4: 37:2b:49:92:fe:4d:a8:bd:67:5f:dc:6d:f3:12:be: 4d:e7:67:5b:22:ff:d9:d6:b9:7d:9b:c7:7d:8c:c9: fd:a3:52:76:19:cb:85:41:ee:e8:d4:3b:b0:13:77: 0a:17:c4:a0:0f:eb:30:26:16:53:c9:1e:70:b1:cd: 9d:e4:e1:f4:e4:fd:60:12:a3:38:03:de:38:93:c4: 38:94:c5:94:17:41:d1:16:6d:b5:9e:89:2f:44:80: f6:a3:9b:21:c6:bf:02:92:ec:1e:78:5f:27:46:05: 3b:1d:08:68:d8:4e:b4:27:ab:f2:e8:ee:be:b8:5a: 7a:1a:46:ad:a8:80:b6:8f:44:c2:74:5e:b2:fe:16: 0c:a7:8a:81:ba:e0:e0:b3:3c:b6:17:91:fb:08:75: b5:e8:29:37:f8:25:ca:64:32:8b:da:97:56:78:0f: 38:f9:35:15:e0:4c:06:ed:ce:cb:3c:cf:fb:d6:4c: 06:d6:1d:bb:8c:24:c2:db:57:13:01:d6:2b:7d:73: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:DC:07:BB:91:55:A0:07:C5:FF:2E:E3:59:D2:18:99:5F:C4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff813561-30c2-3f35-9476-3efc405cd761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b5:8c:1c:28:7b:1b:0e:fa:a4:9c:5e:85:ec:3c:77:9f:ad: 2a:94:ab:08:31:78:85:53:9e:a5:bd:f3:b2:6f:9f:a2:93:37: 6b:4a:46:58:ef:bd:fd:23:e8:ea:dc:0b:98:36:79:2b:d6:b9: 28:31:aa:7a:a1:9e:38:d2:d4:f1:f5:f6:91:23:b7:fc:ba:dc: 01:3f:41:01:19:61:07:14:2a:62:1a:52:08:25:a7:d5:4b:0c: 24:86:27:1a:02:d8:ae:8f:77:78:c9:57:73:02:e5:76:fe:7b: 28:9a:48:bd:ab:d3:19:54:14:c3:47:12:18:6b:c8:64:89:c1: d2:a7:46:5c:b6:c1:54:44:0a:b0:51:d9:79:b6:d5:3a:5a:8a: 71:f6:ee:68:d5:14:bc:50:10:b1:78:bf:c6:a3:41:1f:e6:91: 0b:9f:67:05:a2:bb:02:85:9e:ce:f8:13:04:2f:da:f8:51:a3: 62:78:da:e9:a1:6d:22:fe:48:97:2d:bf:36:02:8a:88:02:7d: 0b:e0:87:a7:f8:93:62:ac:29:87:42:83:f1:51:1f:e3:d3:bb: 9a:e9:c2:cb:57:f8:d5:ea:f3:be:40:4a:03:5e:ce:15:4a:90: 4a:b7:33:17:7d:74:67:f5:5c:98:77:e0:0d:37:23:1f:93:fb: 58:74:97:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuhDJobzCtRN1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTI1YTJkMjEtZGE3NC00ZGQ0LTlkNTUtYzhmODBlZDlmNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PfhrXEHMWVU2aV6GP2ZwRZuXSERC4MoXaUy X+UDZSCVXLPNCBZL4hL7HTdBDWb8UPGWWdSC3d83a8Q3K0mS/k2ovWdf3G3zEr5N 52dbIv/Z1rl9m8d9jMn9o1J2GcuFQe7o1DuwE3cKF8SgD+swJhZTyR5wsc2d5OH0 5P1gEqM4A944k8Q4lMWUF0HRFm21nokvRID2o5shxr8CkuweeF8nRgU7HQho2E60 J6vy6O6+uFp6GkatqIC2j0TCdF6y/hYMp4qBuuDgszy2F5H7CHW16Ck3+CXKZDKL 2pdWeA84+TUV4EwG7c7LPM/71kwG1h27jCTC21cTAdYrfXM7VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrt3Ae7kVWgB8X/LuNZ0hiZX8RvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmY4MTM1NjEtMzBjMi0z ZjM1LTk0NzYtM2VmYzQwNWNkNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+1jBwoexsO+qScXoXsPHefrSqUqwgxeIVTnqW987Jvn6KTN2tKRljv vf0j6OrcC5g2eSvWuSgxqnqhnjjS1PH19pEjt/y63AE/QQEZYQcUKmIaUgglp9VL DCSGJxoC2K6Pd3jJV3MC5Xb+eyiaSL2r0xlUFMNHEhhryGSJwdKnRly2wVRECrBR 2Xm21TpainH27mjVFLxQELF4v8ajQR/mkQufZwWiuwKFns74EwQv2vhRo2J42umh bSL+SJctvzYCiogCfQvgh6f4k2KsKYdCg/FRH+PTu5rpwstX+NXq875ASgNezhVK kEq3Mxd9dGf1XJh34A03Ix+T+1h0l6A= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:22 2025 by rpki-client