$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028963cf-ea06-3c7b-8fd2-cda2a0690253.roa File: 028963cf-ea06-3c7b-8fd2-cda2a0690253.roa (raw, json) Hash identifier: 3lnaQEciqhOpePSLAB/YvEVjRhLoWnOWMCPAaRI/+KM= Subject key identifier: 47:AC:E4:10:27:46:DB:3A:95:93:79:C1:A3:DA:8F:9F:0A:B4:69:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2633AC5B8FBBC6E690400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028963cf-ea06-3c7b-8fd2-cda2a0690253.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:63:3a:c5:b8:fb:bc:6e:69:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=05ff633b-de06-4422-aa44-d895b38fee6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cb:ef:ee:89:00:91:d7:18:89:7b:ef:8a:00: a3:cc:32:2b:37:6c:10:f4:23:69:ac:ea:36:92:fa: 6f:2d:ad:84:34:1b:77:93:31:dc:b7:b2:ac:16:32: e1:22:ee:fe:6f:7a:43:95:f4:fd:33:36:7d:8e:8d: ec:72:be:bc:67:94:e7:ca:1a:6f:a3:6e:fe:e5:08: 48:8a:0d:35:3a:e0:c8:2f:12:0e:c8:93:75:b4:bb: a6:c7:80:c7:71:0b:9e:a4:99:e3:2c:f8:29:9c:d5: 35:c2:43:92:69:44:03:21:76:52:29:b0:b1:21:bd: 3a:5a:77:86:2f:a6:cf:6b:60:03:65:fe:b6:40:42: 04:2a:80:13:6b:63:1e:65:a4:bb:75:64:6d:62:6a: e0:2b:a0:5b:1d:ef:22:5c:63:db:34:d2:23:55:76: bd:bb:93:ef:ad:5b:7e:06:62:18:e9:33:1d:08:23: c4:7c:f4:ce:01:2c:89:b3:93:8c:f5:47:3d:dd:4d: cf:0e:a0:ea:51:2f:1e:c6:bf:b4:50:db:8f:69:ce: 57:b3:11:69:89:6b:52:b0:ce:56:1a:f8:46:20:75: d2:60:b9:9c:de:89:86:84:9b:c2:6b:b8:6a:0f:58: b6:c2:6c:6b:13:09:8b:48:8a:d2:75:a0:41:3a:51: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AC:E4:10:27:46:DB:3A:95:93:79:C1:A3:DA:8F:9F:0A:B4:69:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028963cf-ea06-3c7b-8fd2-cda2a0690253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:74:7d:a3:90:a3:80:33:5f:3d:41:5c:e6:c7:78:41:6b:3a: c7:71:94:4b:76:f8:52:6f:63:74:91:be:9b:67:a4:18:b3:f3: 41:d7:2c:40:f2:80:e3:41:be:ce:94:9a:c0:74:3a:0e:1d:ef: 68:8a:9f:47:7d:b7:bb:f6:f5:e2:16:41:1e:3f:22:4f:01:ee: 95:07:9c:a0:fe:f3:0d:12:aa:5d:08:3b:21:9e:6d:8f:f7:38: e3:03:90:c6:57:8b:47:6d:93:9b:aa:c7:b0:92:9a:1c:bf:99: 75:81:2d:24:d7:30:2b:37:f6:7d:5d:03:be:d0:12:f0:30:0f: c5:4a:f2:57:93:2b:6a:ab:cf:4c:0b:a8:48:d9:65:9a:6c:13: 0d:c4:6d:c4:21:f0:64:b7:66:d1:f7:01:43:37:18:1e:a0:5b: 59:a2:36:68:ad:19:eb:85:25:78:d9:3f:94:19:d0:0d:45:0c: 50:34:99:41:24:b9:f4:21:9b:a5:56:6e:37:25:0f:4c:7c:5a: 18:22:29:5c:3a:1f:56:2c:df:bf:20:8a:12:b7:03:1d:e3:2f: be:a6:ee:cd:a0:43:04:a5:72:d8:7d:73:75:95:35:51:25:48: 56:5f:37:35:23:bf:2c:82:39:b3:8d:9a:d4:75:4b:de:c6:62: fb:51:b4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mM6xbj7vG5pBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDVmZjYzM2ItZGUwNi00NDIyLWFhNDQtZDg5NWIzOGZlZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8vv7okAkdcYiXvvigCjzDIrN2wQ9CNprOo2 kvpvLa2ENBt3kzHct7KsFjLhIu7+b3pDlfT9MzZ9jo3scr68Z5Tnyhpvo27+5QhI ig01OuDILxIOyJN1tLumx4DHcQuepJnjLPgpnNU1wkOSaUQDIXZSKbCxIb06WneG L6bPa2ADZf62QEIEKoATa2MeZaS7dWRtYmrgK6BbHe8iXGPbNNIjVXa9u5PvrVt+ BmIY6TMdCCPEfPTOASyJs5OM9Uc93U3PDqDqUS8exr+0UNuPac5XsxFpiWtSsM5W GvhGIHXSYLmc3omGhJvCa7hqD1i2wmxrEwmLSIrSdaBBOlHbwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEes5BAnRts6lZN5waPaj58KtGmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI4OTYzY2YtZWEwNi0z YzdiLThmZDItY2RhMmEwNjkwMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE10faOQo4AzXz1BXObHeEFrOsdxlEt2+FJvY3SRvptnpBiz80HXLEDy gONBvs6UmsB0Og4d72iKn0d9t7v29eIWQR4/Ik8B7pUHnKD+8w0Sql0IOyGebY/3 OOMDkMZXi0dtk5uqx7CSmhy/mXWBLSTXMCs39n1dA77QEvAwD8VK8leTK2qrz0wL qEjZZZpsEw3EbcQh8GS3ZtH3AUM3GB6gW1miNmitGeuFJXjZP5QZ0A1FDFA0mUEk ufQhm6VWbjclD0x8WhgiKVw6H1Ys378gihK3Ax3jL76m7s2gQwSlcth9c3WVNVEl SFZfNzUjvyyCObONmtR1S97GYvtRtJU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:21:52 2025 by rpki-client