$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c987ca-a073-3f89-95b4-583a378dacb2.roa File: 12c987ca-a073-3f89-95b4-583a378dacb2.roa (raw, json) Hash identifier: 57cNGewcvvpHpaMAuKAk8ZrtymllXu1rcfhJvzliDdw= Subject key identifier: 31:3C:F4:15:13:0E:C1:99:9F:5F:4A:B3:23:1F:D6:9F:68:A5:AD:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F273EA7E1E3B2DBA797BA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c987ca-a073-3f89-95b4-583a378dacb2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:73:ea:7e:1e:3b:2d:ba:79:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0b3800df-a10c-466c-ba50-e8099357267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:84:0f:f7:7e:09:c6:62:fd:27:7c:12:51: c3:a9:9e:49:b1:26:9c:03:5b:1a:3f:48:4e:cd:6d: 3b:09:56:6a:95:25:e7:63:ab:b0:4b:70:75:0c:7e: fe:dd:4b:0b:3a:53:b9:f6:c8:b5:42:70:d5:cd:49: 0a:59:0d:24:06:e2:57:cf:97:13:03:be:61:42:69: 3f:1e:0f:2c:78:57:66:3f:a7:f6:37:d0:e5:d2:0f: 21:a4:e7:ae:f0:13:d4:98:9c:55:54:eb:d2:f3:62: 5f:2f:aa:93:5c:fc:1d:57:60:80:a5:9a:65:4e:02: 74:4f:b7:d3:df:6b:73:40:d1:b7:23:35:07:51:df: 10:f1:dc:06:79:5c:f4:3f:86:f1:a0:75:e5:c7:55: 82:be:96:ab:38:4c:1d:d6:3a:0a:bf:4f:68:2e:13: f4:63:0b:3e:8b:0a:59:db:07:65:87:d5:e5:46:53: a4:66:7a:92:57:88:46:5f:95:e5:c9:95:5e:9f:f5: fe:4e:8c:6e:01:35:b7:d3:56:39:c6:d6:4a:f7:94: 81:9c:4c:ae:04:f9:c4:08:6d:00:6f:08:60:b1:ac: 0e:10:9e:a1:f8:3e:ad:ca:4d:53:74:21:12:d3:da: 25:07:08:4a:16:e3:69:c4:e4:df:a9:49:93:46:22: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:F4:15:13:0E:C1:99:9F:5F:4A:B3:23:1F:D6:9F:68:A5:AD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c987ca-a073-3f89-95b4-583a378dacb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d4:27:88:a9:5b:a8:68:98:89:b8:e0:aa:e2:b2:84:52:4e: bf:58:53:c9:b6:24:5a:a2:58:f2:d3:a0:66:1b:a0:4b:37:94: 35:61:b2:58:c0:d2:59:fa:3b:b4:fc:7b:0e:eb:7e:46:85:e8: 1f:ed:e7:4b:4b:f9:37:1a:7d:52:f3:30:5c:52:53:d4:96:18: c2:ac:dc:3c:b1:b9:d2:70:b8:5e:dc:bd:ee:01:8e:2f:51:68: 94:4a:fc:36:f8:23:23:c5:91:4a:fd:7d:f2:3f:fa:99:5e:fa: f3:5b:bb:b5:0f:2c:ce:e8:b4:27:c5:18:52:dd:2f:b1:f1:2c: 8e:27:cc:c0:e3:39:5c:6f:2c:01:54:10:81:b9:03:21:4c:4b: 09:23:80:ec:de:13:22:40:d3:2c:34:08:de:11:91:8b:aa:58: 50:e2:9d:df:a0:8e:1a:07:2e:f6:a9:b7:4c:87:0e:6c:0a:57: de:55:0a:ff:ca:b9:2c:aa:7a:d1:f4:f8:57:ad:00:2e:2d:0a: 5c:a4:54:6f:e2:4d:81:f9:51:b2:10:2f:4b:17:8b:73:ba:ed: 0e:dc:7c:4d:1a:ae:6d:6d:d4:c0:a8:85:56:e9:fd:18:82:95: 1f:a2:00:cf:d5:dd:f4:55:5f:8d:df:e2:8c:8b:44:1e:59:3e: 9d:58:08:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nPqfh47Lbp5e6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGIzODAwZGYtYTEwYy00NjZjLWJhNTAtZTgwOTkzNTcyNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpuED/d+CcZi/Sd8ElHDqZ5JsSacA1saP0hO zW07CVZqlSXnY6uwS3B1DH7+3UsLOlO59si1QnDVzUkKWQ0kBuJXz5cTA75hQmk/ Hg8seFdmP6f2N9Dl0g8hpOeu8BPUmJxVVOvS82JfL6qTXPwdV2CApZplTgJ0T7fT 32tzQNG3IzUHUd8Q8dwGeVz0P4bxoHXlx1WCvparOEwd1joKv09oLhP0Yws+iwpZ 2wdlh9XlRlOkZnqSV4hGX5XlyZVen/X+ToxuATW301Y5xtZK95SBnEyuBPnECG0A bwhgsawOEJ6h+D6tyk1TdCES09olBwhKFuNpxOTfqUmTRiLJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE89BUTDsGZn19KsyMf1p9opa1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTJjOTg3Y2EtYTA3My0z Zjg5LTk1YjQtNTgzYTM3OGRhY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXUJ4ipW6homIm44KrisoRSTr9YU8m2JFqiWPLToGYboEs3lDVhsljA 0ln6O7T8ew7rfkaF6B/t50tL+TcafVLzMFxSU9SWGMKs3DyxudJwuF7cve4Bji9R aJRK/Db4IyPFkUr9ffI/+ple+vNbu7UPLM7otCfFGFLdL7HxLI4nzMDjOVxvLAFU EIG5AyFMSwkjgOzeEyJA0yw0CN4RkYuqWFDind+gjhoHLvapt0yHDmwKV95VCv/K uSyqetH0+FetAC4tClykVG/iTYH5UbIQL0sXi3O67Q7cfE0arm1t1MCohVbp/RiC lR+iAM/V3fRVX43f4oyLRB5ZPp1YCAI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:02 2025 by rpki-client