$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1988e975-bd99-3729-b05a-8f6b694f0d2d.roa File: 1988e975-bd99-3729-b05a-8f6b694f0d2d.roa (raw, json) Hash identifier: 7jO3aIH0EYBXMRIJ4TamHq5NH9iFAJSaVqIN/fjvWd0= Subject key identifier: 6B:7E:6A:61:54:5F:4F:CE:34:90:EE:DE:BE:FB:32:D0:8A:4E:A9:17 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26A2D62202F230FA21280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1988e975-bd99-3729-b05a-8f6b694f0d2d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6a:2d:62:20:2f:23:0f:a2:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=716731b0-053d-4c11-8c57-be32eb48c0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:3f:f3:e5:31:2c:40:99:36:48:88:67:fe: c0:f6:e2:bc:81:c5:83:02:e9:28:ba:c4:f4:65:61: 55:46:d0:1a:79:cf:4c:10:eb:a5:fa:c3:d6:ab:7a: de:7a:87:99:cf:14:75:e4:04:22:7b:27:6d:fa:6c: d1:2b:be:70:18:2e:4f:0c:cd:3f:1b:de:5d:7e:8f: 41:c7:41:e9:c8:d1:00:63:ce:53:86:eb:3c:47:db: c5:2e:f8:c1:62:69:a3:a0:69:eb:50:1b:a0:b5:d3: 24:1a:76:e0:fb:ce:1a:e6:65:0d:0f:c9:ca:83:ac: ba:b1:f7:6d:cd:33:91:fa:31:a8:93:d2:f6:d8:63: 5d:f9:63:09:77:26:dc:be:54:a5:c9:0a:16:09:0a: 4c:ee:da:d6:4b:17:ab:03:ac:c3:42:fa:3e:61:e8: 33:a7:a7:18:52:7f:a7:1d:af:da:45:fe:2c:7a:12: 7d:18:ff:8f:b1:f4:4c:a7:26:99:87:aa:9f:37:da: c2:5c:dd:d0:3d:66:71:09:fa:01:7f:12:01:c8:80: 4b:77:ad:1e:7d:86:62:f8:da:51:79:3b:a3:f9:e2: 2a:ee:58:8a:05:2e:0a:63:52:c6:83:21:1f:e4:19: ea:4a:b9:f6:f5:71:a0:8c:09:72:72:28:99:4a:c5: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7E:6A:61:54:5F:4F:CE:34:90:EE:DE:BE:FB:32:D0:8A:4E:A9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1988e975-bd99-3729-b05a-8f6b694f0d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3f:65:a7:43:f4:43:69:67:54:56:e8:5f:36:da:e4:46:00: 50:77:37:ff:ba:62:36:91:4c:7c:e0:96:bf:33:f0:31:ad:db: 46:70:69:fa:df:5e:61:3e:8c:e0:9d:19:53:a0:81:bd:14:65: 35:ae:37:c5:70:42:43:71:69:57:f0:36:c5:45:8c:aa:16:00: 9d:55:d3:56:58:d0:e9:6f:1a:79:d1:b4:91:04:db:70:79:8b: 33:08:e8:04:ad:00:8a:9f:68:d5:ba:e8:19:34:31:44:e9:31: b1:45:ea:e7:9a:a3:73:e3:ef:dc:45:b1:d0:a4:10:b5:dc:22: f7:3c:7e:30:ca:15:67:2e:6d:45:99:95:4a:0b:66:23:db:29: 9a:22:ee:22:38:f4:61:47:b6:a4:55:38:53:ff:39:24:ff:d6: 74:fc:09:2a:a7:4f:0b:f3:f4:66:fb:4e:8e:d8:1e:c8:3d:48: 28:90:68:db:bd:9d:5a:cd:80:05:21:3a:17:3e:ae:f8:e1:4f: bc:6f:5d:d8:06:df:b9:85:43:f1:36:b0:87:c0:a0:58:95:db: d0:c2:6a:c6:25:7a:52:5b:58:61:ce:48:d9:fd:41:bc:5e:81: c6:55:e9:44:3a:3e:4c:62:fd:23:5a:ea:55:19:57:b9:e9:b6: 14:ef:93:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28motYiAvIw+iEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzE2NzMxYjAtMDUzZC00YzExLThjNTctYmUzMmViNDhjMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ8/8+UxLECZNkiIZ/7A9uK8gcWDAukousT0 ZWFVRtAaec9MEOul+sPWq3reeoeZzxR15AQieydt+mzRK75wGC5PDM0/G95dfo9B x0HpyNEAY85Thus8R9vFLvjBYmmjoGnrUBugtdMkGnbg+84a5mUND8nKg6y6sfdt zTOR+jGok9L22GNd+WMJdybcvlSlyQoWCQpM7trWSxerA6zDQvo+Yegzp6cYUn+n Ha/aRf4sehJ9GP+PsfRMpyaZh6qfN9rCXN3QPWZxCfoBfxIByIBLd60efYZi+NpR eTuj+eIq7liKBS4KY1LGgyEf5BnqSrn29XGgjAlyciiZSsUaBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt+amFUX0/ONJDu3r77MtCKTqkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTk4OGU5NzUtYmQ5OS0z NzI5LWIwNWEtOGY2YjY5NGYwZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw/ZadD9ENpZ1RW6F822uRGAFB3N/+6YjaRTHzglr8z8DGt20Zwafrf XmE+jOCdGVOggb0UZTWuN8VwQkNxaVfwNsVFjKoWAJ1V01ZY0OlvGnnRtJEE23B5 izMI6AStAIqfaNW66Bk0MUTpMbFF6ueao3Pj79xFsdCkELXcIvc8fjDKFWcubUWZ lUoLZiPbKZoi7iI49GFHtqRVOFP/OST/1nT8CSqnTwvz9Gb7To7YHsg9SCiQaNu9 nVrNgAUhOhc+rvjhT7xvXdgG37mFQ/E2sIfAoFiV29DCasYlelJbWGHOSNn9Qbxe gcZV6UQ6Pkxi/SNa6lUZV7npthTvk1s= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:07 2025 by rpki-client