$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bf133f5-415b-331f-b14d-a17d48799e2e.roa File: 1bf133f5-415b-331f-b14d-a17d48799e2e.roa (raw, json) Hash identifier: clavsBmGDBSwPviTapwZDaXDryRmWWfQFzjNCX+4h9o= Subject key identifier: 76:25:00:20:51:68:61:1F:6B:69:C4:1C:53:97:73:4B:19:53:00:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29643EBA4821B140726C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bf133f5-415b-331f-b14d-a17d48799e2e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:96:43:eb:a4:82:1b:14:07:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c2cd900c-de84-4cb1-a62f-783eab0226a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:b8:d8:73:e3:a0:73:db:db:67:bf:1c:b8: 11:35:a6:64:ed:d7:31:97:e5:c8:f4:dc:a5:2a:74: 20:2f:da:b6:87:b6:6d:c6:c7:16:9d:07:73:e6:5f: 43:20:a6:cf:0b:5e:83:3a:f3:9a:2e:7a:a5:d8:60: 8e:b0:af:54:1d:d5:0e:1b:e6:ac:74:7d:a6:be:8f: 28:02:52:ad:ed:7d:cc:24:ac:b3:b3:68:69:06:55: 10:ba:cb:76:3d:73:69:bf:48:c5:f5:ec:8b:39:40: 03:f0:71:91:ba:e6:45:23:dc:7e:4e:de:22:ed:89: ac:0f:b4:d4:d6:d2:14:d6:5c:06:e4:19:e6:86:51: 90:30:d2:8d:87:2d:51:95:10:d3:30:0d:52:b1:a2: c6:18:85:e9:f6:c9:df:01:9c:a9:e9:5b:1a:1b:b2: ee:32:04:93:a9:11:fc:74:0d:a4:d8:29:cc:58:79: b2:a5:8d:85:39:3e:88:ee:9b:d2:3e:6d:e5:d0:fb: f8:f1:b7:c6:32:ec:93:64:1f:1a:cb:8e:f7:e7:fe: 66:01:06:ee:b4:d7:fd:78:80:7d:98:17:c6:bb:6d: 65:35:4c:4c:3b:9c:fb:6a:55:8e:ae:71:e7:bd:75: 2b:9b:1b:6f:4a:dc:6f:53:87:dd:39:88:27:a0:37: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:25:00:20:51:68:61:1F:6B:69:C4:1C:53:97:73:4B:19:53:00:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bf133f5-415b-331f-b14d-a17d48799e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:81:72:dc:64:aa:18:72:dd:11:61:40:24:97:ea:b3:21:3e: cc:7c:2c:c8:a5:fc:6b:d5:c6:f6:5f:e8:8c:4a:fb:0d:b0:6c: 84:5c:b4:7e:71:89:40:1c:26:e3:65:2a:05:56:ab:1f:35:df: e5:12:45:c4:2c:ac:d6:5c:c9:0b:b7:81:87:f3:8b:b0:2c:37: 43:2f:77:00:65:da:1a:85:e9:36:b9:9e:2c:96:d7:97:7c:5f: c3:90:60:14:b3:2d:9e:f0:c0:b1:a9:91:c0:56:83:1f:24:16: 53:6b:52:19:0d:a4:69:74:f4:4a:01:d9:7e:93:26:56:ab:cf: 40:95:db:2d:5d:dc:35:7e:c1:bb:bd:56:2e:53:38:a0:48:36: 84:4c:fe:69:f4:57:eb:da:c7:46:10:f1:8e:b4:1e:ec:64:5a: 34:3e:e3:56:b7:77:8c:1a:6d:fc:96:95:9a:79:9d:fd:0a:aa: 72:ca:ed:30:57:b9:9e:39:fa:39:15:c2:d4:43:d2:ee:9b:b5: c8:49:d1:aa:a8:0c:41:59:3a:8a:f6:37:1e:10:39:e1:7c:bf: 44:ff:14:1a:93:bf:23:ce:14:60:4b:13:f8:e4:69:d4:53:0a: 07:4b:b1:ee:d5:5c:09:c0:cb:1a:95:8f:5c:ed:5e:16:5e:7d: bb:c6:f6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pZD66SCGxQHJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzJjZDkwMGMtZGU4NC00Y2IxLWE2MmYtNzgzZWFiMDIyNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaS42HPjoHPb22e/HLgRNaZk7dcxl+XI9Nyl KnQgL9q2h7ZtxscWnQdz5l9DIKbPC16DOvOaLnql2GCOsK9UHdUOG+asdH2mvo8o AlKt7X3MJKyzs2hpBlUQust2PXNpv0jF9eyLOUAD8HGRuuZFI9x+Tt4i7YmsD7TU 1tIU1lwG5BnmhlGQMNKNhy1RlRDTMA1SsaLGGIXp9snfAZyp6VsaG7LuMgSTqRH8 dA2k2CnMWHmypY2FOT6I7pvSPm3l0Pv48bfGMuyTZB8ay4735/5mAQbutNf9eIB9 mBfGu21lNUxMO5z7alWOrnHnvXUrmxtvStxvU4fdOYgnoDfeJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYlACBRaGEfa2nEHFOXc0sZUwAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWJmMTMzZjUtNDE1Yi0z MzFmLWIxNGQtYTE3ZDQ4Nzk5ZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAnjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Bctxkqhhy3RFhQCSX6rMhPsx8LMil/GvVxvZf6IxK+w2wbIRctH5x iUAcJuNlKgVWqx813+USRcQsrNZcyQu3gYfzi7AsN0MvdwBl2hqF6Ta5niyW15d8 X8OQYBSzLZ7wwLGpkcBWgx8kFlNrUhkNpGl09EoB2X6TJlarz0CV2y1d3DV+wbu9 Vi5TOKBINoRM/mn0V+vax0YQ8Y60HuxkWjQ+41a3d4wabfyWlZp5nf0KqnLK7TBX uZ45+jkVwtRD0u6btchJ0aqoDEFZOor2Nx4QOeF8v0T/FBqTvyPOFGBLE/jkadRT CgdLse7VXAnAyxqVj1ztXhZefbvG9lE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:20 2025 by rpki-client