$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033b8e68-defb-3ac2-baed-354476cf1a1a.roa File: 033b8e68-defb-3ac2-baed-354476cf1a1a.roa (raw, json) Hash identifier: MA1HFlOlx0Dm/CBFGy2X7E/qKXqhwFOU8tz1QzykFww= Subject key identifier: 21:AD:DF:A6:AD:52:AF:EE:F2:62:F6:E3:FA:98:A4:FF:BA:9A:7D:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F205075F2B84EB742942C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033b8e68-defb-3ac2-baed-354476cf1a1a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:05:07:5f:2b:84:eb:74:29:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9b6b2eb9-bdf1-4d77-b92a-3be5c3660643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:00:a5:7f:fb:9d:72:36:4f:22:23:d8:e3:16: 2e:7d:d4:6f:82:7e:c4:e3:99:43:13:a3:a3:1b:2e: 2c:fa:ef:f3:15:14:30:09:ae:cc:bc:f8:e2:1b:08: 31:38:9c:5a:71:d4:d6:43:a6:ad:f2:ee:b9:58:82: 34:5a:1d:40:d3:95:94:00:2f:55:a4:78:e1:c7:1c: 5a:ed:9a:58:48:ee:97:ad:98:ab:74:02:cf:7e:9e: 75:ad:cd:e4:23:6b:23:b9:93:49:79:f3:9c:fd:77: 69:10:70:57:83:38:5f:63:56:01:3c:1d:16:58:43: 3c:88:fa:8c:30:94:43:57:ab:32:0a:58:8d:69:b7: 54:d7:5f:7f:54:95:59:b7:4f:c2:d3:92:af:9e:ae: ba:32:d8:ab:dd:ae:30:32:3a:60:3e:92:cb:aa:ce: a2:a2:01:8a:6e:85:30:9d:27:ef:d7:33:ed:2e:62: c5:2a:23:18:db:44:4e:74:f8:22:9a:99:23:96:de: c4:50:6c:2b:6b:66:26:b4:51:be:78:d9:c9:4f:dc: 8b:6b:3b:e5:ad:17:c8:c3:6d:9a:76:04:c7:c0:c7: 00:91:d4:c9:14:62:2f:43:ed:b5:c3:c7:67:e8:fc: 9c:d2:37:d6:26:a3:31:65:ce:81:78:0b:0f:2b:44: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AD:DF:A6:AD:52:AF:EE:F2:62:F6:E3:FA:98:A4:FF:BA:9A:7D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033b8e68-defb-3ac2-baed-354476cf1a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:88:f5:94:2d:68:f7:36:64:60:5a:5d:02:29:d4:55:51:13: 18:8c:dc:6d:b9:0f:6d:e9:93:92:ca:31:d6:84:56:4a:7b:7d: 88:68:18:8f:d1:a6:75:04:b5:bd:06:3c:f1:62:1c:90:37:c6: 41:aa:39:6f:49:26:fa:dd:02:05:2d:5b:dd:d3:62:4f:9e:9b: c6:13:9e:92:43:94:e2:1a:0b:d6:43:a7:47:ae:66:2d:0f:73: 9e:60:71:39:1e:22:36:80:05:a3:8d:66:55:14:28:0f:6d:f9: a0:57:4f:ba:a7:21:17:a2:42:9b:a1:58:a4:0c:6b:d3:4d:fc: 2d:72:c2:ef:85:ea:d5:ff:b1:e7:2e:6e:ef:92:8a:2e:51:ea: 01:d3:06:ba:d5:e3:c9:e7:a5:d3:fc:7f:34:0c:16:1d:6c:6f: 79:dd:55:80:48:71:af:8b:72:4d:52:07:c5:c2:99:5e:c8:9c: 00:90:01:45:01:2d:2f:94:88:21:d5:d5:e5:b3:56:b5:d6:ac: a5:cf:27:f1:7d:65:32:f0:0e:93:63:67:cc:6c:45:5b:22:f3: 84:12:fe:80:42:e5:97:86:f4:b9:21:e7:87:bb:96:c1:e4:5c: 60:8e:15:c7:c0:f8:54:88:93:cf:9d:f5:5f:7d:42:a2:7e:13: 57:03:a9:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gUHXyuE63QpQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWI2YjJlYjktYmRmMS00ZDc3LWI5MmEtM2JlNWMzNjYwNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAClf/udcjZPIiPY4xYufdRvgn7E45lDE6Oj Gy4s+u/zFRQwCa7MvPjiGwgxOJxacdTWQ6at8u65WII0Wh1A05WUAC9VpHjhxxxa 7ZpYSO6XrZirdALPfp51rc3kI2sjuZNJefOc/XdpEHBXgzhfY1YBPB0WWEM8iPqM MJRDV6syCliNabdU119/VJVZt0/C05Kvnq66Mtir3a4wMjpgPpLLqs6iogGKboUw nSfv1zPtLmLFKiMY20ROdPgimpkjlt7EUGwra2YmtFG+eNnJT9yLazvlrRfIw22a dgTHwMcAkdTJFGIvQ+21w8dn6Pyc0jfWJqMxZc6BeAsPK0TOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGt36atUq/u8mL24/qYpP+6mn0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMzYjhlNjgtZGVmYi0z YWMyLWJhZWQtMzU0NDc2Y2YxYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiI9ZQtaPc2ZGBaXQIp1FVRExiM3G25D23pk5LKMdaEVkp7fYhoGI/R pnUEtb0GPPFiHJA3xkGqOW9JJvrdAgUtW93TYk+em8YTnpJDlOIaC9ZDp0euZi0P c55gcTkeIjaABaONZlUUKA9t+aBXT7qnIReiQpuhWKQMa9NN/C1ywu+F6tX/secu bu+Sii5R6gHTBrrV48nnpdP8fzQMFh1sb3ndVYBIca+Lck1SB8XCmV7InACQAUUB LS+UiCHV1eWzVrXWrKXPJ/F9ZTLwDpNjZ8xsRVsi84QS/oBC5ZeG9Lkh54e7lsHk XGCOFcfA+FSIk8+d9V99QqJ+E1cDqWg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:02 2025 by rpki-client