$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12f44f3e-5673-3d7c-9a21-084709a6155b.roa File: 12f44f3e-5673-3d7c-9a21-084709a6155b.roa (raw, json) Hash identifier: /641D8PQnmsr98tXzgyTROX/Jh/qigjz6u0mkS+1y3E= Subject key identifier: 78:8B:45:0E:59:F6:0A:3F:5C:13:DD:16:3C:FB:28:F4:ED:6F:49:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24D19D0E32D030E26C600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12f44f3e-5673-3d7c-9a21-084709a6155b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.109.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4d:19:d0:e3:2d:03:0e:26:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4256547b-9e64-4a9a-a870-43cccdf3917b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:84:e9:61:26:54:58:5c:13:fb:84:fe:27: 90:1d:35:ed:b9:d6:1c:cf:27:61:9d:4f:0b:99:ca: 95:e5:67:de:a5:d4:e9:88:df:88:50:00:40:33:94: 85:d3:92:5e:fb:a9:bc:1e:58:1f:4f:83:bd:ea:f1: 7e:3b:90:44:5a:31:34:83:0f:cd:aa:71:e5:b6:d9: 1c:ea:be:44:36:32:90:8e:23:0e:6e:40:79:45:60: 31:9d:ea:ee:ae:68:3a:d7:b4:0e:5f:35:68:88:ce: 28:33:92:bb:f5:dd:f6:1e:6e:3d:08:7a:cd:2c:c7: bd:8b:11:3e:3a:8b:d4:14:91:40:cb:22:71:1b:6c: 12:49:35:f6:9c:65:64:e9:3b:9a:35:98:a0:de:ad: 5d:89:6d:a1:f3:fb:c1:88:01:86:0c:ad:88:3b:96: 05:c3:6b:03:3b:06:ea:9f:f4:ad:6e:43:7b:d7:00: 49:88:c6:8c:9b:95:1a:f3:d4:aa:25:6c:13:ba:9a: 92:3c:6e:e9:f4:05:f7:22:86:20:e0:a0:1d:8e:9a: 49:01:0c:5f:ca:12:8c:9c:48:00:9f:1b:4c:9f:49: 3c:98:3e:b8:6f:41:1e:ac:24:4b:9a:95:25:5a:1d: 08:44:a1:d4:57:84:68:80:cf:3e:c9:2c:12:6b:72: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:45:0E:59:F6:0A:3F:5C:13:DD:16:3C:FB:28:F4:ED:6F:49:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12f44f3e-5673-3d7c-9a21-084709a6155b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6f:4b:95:e6:a4:17:2b:0a:d8:d1:ee:29:7b:84:f5:22:6a: e3:4b:3f:4d:2b:8e:5d:55:05:cd:53:1e:1d:8e:47:c0:a7:db: eb:79:a8:35:26:d3:a1:34:2a:0a:96:76:84:03:7c:71:15:32: 9b:57:c1:bd:5e:27:bd:98:96:1b:a1:a6:f1:8b:92:82:7e:c6: 0c:9e:0b:cb:3d:5b:b9:89:5f:a1:80:54:45:0c:fd:fe:9f:78: ec:e7:82:19:dc:a9:05:98:af:8d:34:41:e7:c4:23:f7:aa:d1: 6d:26:16:b7:d6:00:5b:2c:9a:2c:fa:0e:53:b7:82:d8:cf:af: 3a:d1:f8:a2:40:e0:d8:a6:f9:5d:62:41:4a:d7:6f:42:c2:df: 59:18:ac:c6:5c:fe:68:3a:24:6c:51:6d:26:4d:db:1d:c5:68: 11:a2:d5:7c:d9:1b:61:ff:fd:63:7e:5e:41:84:7c:76:66:55: 18:3f:99:5f:14:bf:08:3b:09:a4:35:35:99:5e:34:5f:78:82: d9:f5:88:49:bc:5b:ff:af:f3:2c:3d:5b:c5:16:d0:69:ce:98: 53:f4:94:29:de:74:b9:dc:e1:e0:d8:ff:f3:6a:2c:ab:b4:9e: 2a:aa:1c:ea:b8:89:89:2f:ae:74:2d:ad:76:0b:bd:2f:76:b5: a2:db:5e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k0Z0OMtAw4mxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDI1NjU0N2ItOWU2NC00YTlhLWE4NzAtNDNjY2NkZjM5MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPaE6WEmVFhcE/uE/ieQHTXtudYczydhnU8L mcqV5WfepdTpiN+IUABAM5SF05Je+6m8HlgfT4O96vF+O5BEWjE0gw/NqnHlttkc 6r5ENjKQjiMObkB5RWAxnerurmg617QOXzVoiM4oM5K79d32Hm49CHrNLMe9ixE+ OovUFJFAyyJxG2wSSTX2nGVk6TuaNZig3q1diW2h8/vBiAGGDK2IO5YFw2sDOwbq n/StbkN71wBJiMaMm5Ua89SqJWwTupqSPG7p9AX3IoYg4KAdjppJAQxfyhKMnEgA nxtMn0k8mD64b0EerCRLmpUlWh0IRKHUV4RogM8+ySwSa3Lc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiLRQ5Z9go/XBPdFjz7KPTtb0nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTJmNDRmM2UtNTY3My0z ZDdjLTlhMjEtMDg0NzA5YTYxNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1vS5XmpBcrCtjR7il7hPUiauNLP00rjl1VBc1THh2OR8Cn2+t5qDUm 06E0KgqWdoQDfHEVMptXwb1eJ72YlhuhpvGLkoJ+xgyeC8s9W7mJX6GAVEUM/f6f eOznghncqQWYr400QefEI/eq0W0mFrfWAFssmiz6DlO3gtjPrzrR+KJA4Nim+V1i QUrXb0LC31kYrMZc/mg6JGxRbSZN2x3FaBGi1XzZG2H//WN+XkGEfHZmVRg/mV8U vwg7CaQ1NZleNF94gtn1iEm8W/+v8yw9W8UW0GnOmFP0lCnedLnc4eDY//NqLKu0 niqqHOq4iYkvrnQtrXYLvS92taLbXuI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:50 2025 by rpki-client