$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa File: 0ca916f1-6d85-3673-b12b-b1116a389d28.roa (raw, json) Hash identifier: pdeL6PLaVsFYA0MzTi7gsjGRtIvEq71PCSm2gkpyCFE= Subject key identifier: 49:A4:92:37:17:63:40:5D:B2:49:03:6C:57:0F:FB:C3:DF:86:66:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27BDC7DC7AB4BF8FEC080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7b:dc:7d:c7:ab:4b:f8:fe:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=beb694b1-54bc-4aad-9558-d83f3965b2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:1e:f4:45:bd:81:a6:ce:67:ab:00:9f:8f: 85:93:7a:01:64:33:37:ff:be:a9:cc:4c:4a:e8:7f: 9f:93:d4:88:c4:4c:cd:85:86:67:b8:cd:2f:d8:cb: 0b:eb:5d:c3:f7:bb:e7:ac:a7:d5:96:ff:2a:a0:55: ad:25:e2:f4:11:ae:a3:34:ca:1c:63:37:96:a1:3c: 9f:c5:25:7a:0d:4a:05:a5:83:43:c0:01:02:6c:44: 01:1a:9d:f4:11:5a:e8:d3:fc:51:e7:9d:f5:55:a0: f9:1f:31:ff:8a:6e:47:fc:b9:a6:0d:92:e4:e9:79: 1c:6d:d5:8c:07:4c:9c:01:84:b8:c4:e0:0e:41:97: 81:f6:fb:f0:1c:8e:e5:7d:3d:b3:57:52:06:82:0f: c9:af:aa:8e:d2:92:aa:de:ba:c6:38:43:8e:d1:c9: 47:a3:2e:18:e4:21:9c:52:d0:be:7b:12:b2:22:48: dd:9d:dc:80:11:6c:f9:d5:01:a8:39:5a:90:f8:b6: 37:93:9b:d0:d8:cd:67:b5:57:db:40:61:b1:a9:33: 53:43:15:30:02:ef:90:5a:b3:ee:b9:a7:83:47:61: 20:6a:62:79:22:b5:70:30:bd:0f:41:a1:57:9f:64: 9f:13:7f:81:49:4f:e5:4f:20:ea:44:b7:d3:44:77: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A4:92:37:17:63:40:5D:B2:49:03:6C:57:0F:FB:C3:DF:86:66:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:62:a2:82:f8:87:c8:14:b0:bb:83:98:d4:93:97:be:26:62: 0e:00:16:db:06:ac:a7:9e:90:87:1e:5b:54:e3:76:5c:a9:32: 4f:fe:51:ec:60:aa:46:63:ea:bb:72:87:a7:29:d2:dd:7d:e6: b0:cb:ae:bf:1f:a6:80:5c:1e:c6:f8:3e:23:19:14:a4:a3:29: aa:05:79:22:eb:b3:03:2f:11:40:15:8b:bf:4b:1d:69:04:b3: 3d:73:6e:d8:6a:fe:b1:05:e4:33:a1:bb:c2:96:82:c8:2c:b2: 0d:17:8f:7f:03:9a:8b:78:08:a0:d6:1c:a5:4b:79:2a:84:ab: ab:c6:ec:fc:d7:43:fd:e7:ae:c2:0c:01:8c:f0:11:a2:13:37: ef:cc:75:23:3f:a0:6b:09:b3:83:5c:db:52:e4:9a:06:2e:d5: 7e:46:14:e9:8b:1e:1b:43:4c:53:33:de:8c:d3:d9:27:59:8c: 52:9b:6c:14:dc:5f:40:f9:27:7e:db:f9:be:1c:88:0e:58:1e: fe:86:81:ab:dd:cb:e5:ab:81:a8:46:51:2d:5c:89:18:8e:5f: 33:16:bd:d0:d3:1a:e2:4b:be:78:3f:4b:d8:90:b0:c9:51:46: e9:a7:1a:10:15:ea:34:d6:a1:f1:2c:3d:e7:db:51:8c:61:a5: 16:20:4d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nvcfcerS/j+wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmViNjk0YjEtNTRiYy00YWFkLTk1NTgtZDgzZjM5NjViMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkIe9EW9gabOZ6sAn4+Fk3oBZDM3/76pzExK 6H+fk9SIxEzNhYZnuM0v2MsL613D97vnrKfVlv8qoFWtJeL0Ea6jNMocYzeWoTyf xSV6DUoFpYNDwAECbEQBGp30EVro0/xR5531VaD5HzH/im5H/LmmDZLk6XkcbdWM B0ycAYS4xOAOQZeB9vvwHI7lfT2zV1IGgg/Jr6qO0pKq3rrGOEOO0clHoy4Y5CGc UtC+exKyIkjdndyAEWz51QGoOVqQ+LY3k5vQ2M1ntVfbQGGxqTNTQxUwAu+QWrPu uaeDR2EgamJ5IrVwML0PQaFXn2SfE3+BSU/lTyDqRLfTRHfZQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmkkjcXY0BdskkDbFcP+8PfhmaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNhOTE2ZjEtNmQ4NS0z NjczLWIxMmItYjExMTZhMzg5ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGViooL4h8gUsLuDmNSTl74mYg4AFtsGrKeekIceW1TjdlypMk/+Uexg qkZj6rtyh6cp0t195rDLrr8fpoBcHsb4PiMZFKSjKaoFeSLrswMvEUAVi79LHWkE sz1zbthq/rEF5DOhu8KWgsgssg0Xj38Dmot4CKDWHKVLeSqEq6vG7PzXQ/3nrsIM AYzwEaITN+/MdSM/oGsJs4Nc21LkmgYu1X5GFOmLHhtDTFMz3ozT2SdZjFKbbBTc X0D5J37b+b4ciA5YHv6Ggavdy+WrgahGUS1ciRiOXzMWvdDTGuJLvng/S9iQsMlR RumnGhAV6jTWofEsPefbUYxhpRYgTe4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:32 2025 by rpki-client