$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa File: 200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa (raw, json) Hash identifier: Q4HAQom95jnShr5g04bnKD9L807qMfpw1Lq0M3dcAo0= Subject key identifier: 31:18:66:D5:4D:DA:04:2A:D7:F3:4B:DC:27:FD:91:1B:E8:F7:5C:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28ABA9438E86E94F7F100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8a:ba:94:38:e8:6e:94:f7:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=cd86dd79-fbd3-470d-a4fa-4f964c24c982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:56:25:82:ba:d4:d2:50:4d:de:51:ae:33: 8d:e7:42:3d:bf:69:15:49:a2:00:07:1b:92:d2:06: 0d:ae:87:d3:8d:d9:18:00:76:e2:fe:4e:70:75:ac: 7e:ac:b6:16:d4:48:12:74:b9:06:ec:6c:07:1b:00: 84:05:0b:48:30:c6:9d:1f:9e:7c:10:5b:5f:b9:17: 9b:35:de:31:cc:77:78:1c:f5:3d:f3:d5:13:14:00: 79:ce:9b:7a:01:9d:f6:f2:bf:52:4e:00:6f:67:f6: 4e:93:19:32:85:9e:72:2c:d1:82:d7:64:ef:90:bf: 99:af:b9:c1:92:a6:eb:04:b2:9a:8a:d8:c8:06:b1: 5a:10:fe:a8:b0:fc:84:10:64:6d:67:48:b5:85:9e: 53:b8:6b:9e:91:78:5c:fc:fa:4c:63:51:1c:c2:e9: 09:ce:bf:87:2c:16:14:c8:a2:8e:06:3c:f8:0a:0a: ed:55:cb:79:ff:04:2d:31:00:bf:30:77:ab:f3:f9: c8:f4:82:42:68:15:9e:27:10:89:84:0c:c6:b8:df: 0d:31:b4:91:a7:8d:ca:a9:e2:0d:ee:5b:21:85:51: ac:68:c5:ae:cb:56:26:6b:0d:22:ee:bb:23:85:f1: ef:ed:89:07:4f:dc:fd:ab:07:5a:f7:46:af:04:bc: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:66:D5:4D:DA:04:2A:D7:F3:4B:DC:27:FD:91:1B:E8:F7:5C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:60:3a:27:f3:e0:9c:fd:d6:2d:55:f2:76:2f:4f:02:82:a4: 7d:60:d7:5d:10:96:62:04:d3:6d:97:46:1d:ce:07:c2:b9:cd: 60:15:02:f6:e9:90:fe:8b:e7:99:07:a3:53:b2:40:07:28:4f: d8:6a:d1:e6:01:a8:88:ae:7e:8b:43:3f:8d:e7:12:0a:dc:2d: 4d:99:b9:72:07:65:2a:8c:6b:26:11:2e:87:80:33:5b:6c:63: e3:aa:ff:86:ad:e8:61:bf:f6:db:43:60:ca:75:33:1f:2f:9f: 53:30:1b:43:db:9d:2d:46:dd:e5:4d:f7:57:e5:87:0d:81:6f: 39:2f:c4:a3:3b:7a:82:92:0c:d3:0d:16:0f:b2:41:40:79:77: 92:dc:2c:38:f0:b9:34:df:1c:70:20:06:8e:8b:52:9e:6f:28: 45:55:be:08:79:2b:42:63:18:38:b1:c5:92:3c:b4:2b:8e:2d: 2a:3a:c8:e9:23:7d:ad:05:d6:d9:81:78:f5:4f:09:a4:f9:67: 93:eb:5c:01:a5:09:0f:eb:bd:f1:2f:51:c0:85:e4:51:ff:95: 0b:c6:5f:44:7c:f0:3c:da:7b:3a:66:52:2b:49:a1:d7:d6:60: 36:9d:95:1f:4c:df:c6:07:e2:02:02:96:25:bf:45:32:71:84: 0b:fa:a4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oq6lDjobpT38QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2Q4NmRkNzktZmJkMy00NzBkLWE0ZmEtNGY5NjRjMjRjOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqpWJYK61NJQTd5RrjON50I9v2kVSaIABxuS 0gYNrofTjdkYAHbi/k5wdax+rLYW1EgSdLkG7GwHGwCEBQtIMMadH558EFtfuReb Nd4xzHd4HPU989UTFAB5zpt6AZ328r9STgBvZ/ZOkxkyhZ5yLNGC12TvkL+Zr7nB kqbrBLKaitjIBrFaEP6osPyEEGRtZ0i1hZ5TuGuekXhc/PpMY1EcwukJzr+HLBYU yKKOBjz4CgrtVct5/wQtMQC/MHer8/nI9IJCaBWeJxCJhAzGuN8NMbSRp43KqeIN 7lshhVGsaMWuy1Ymaw0i7rsjhfHv7YkHT9z9qwda90avBLzOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEYZtVN2gQq1/NL3Cf9kRvo91wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjAwYzJmN2ItM2MzNy0z Y2E4LWIxNjMtZDVjMDc0YzFkZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARArXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxgOifz4Jz91i1V8nYvTwKCpH1g110QlmIE022XRh3OB8K5zWAVAvbp kP6L55kHo1OyQAcoT9hq0eYBqIiufotDP43nEgrcLU2ZuXIHZSqMayYRLoeAM1ts Y+Oq/4at6GG/9ttDYMp1Mx8vn1MwG0PbnS1G3eVN91flhw2BbzkvxKM7eoKSDNMN Fg+yQUB5d5LcLDjwuTTfHHAgBo6LUp5vKEVVvgh5K0JjGDixxZI8tCuOLSo6yOkj fa0F1tmBePVPCaT5Z5PrXAGlCQ/rvfEvUcCF5FH/lQvGX0R88DzaezpmUitJodfW YDadlR9M38YH4gICliW/RTJxhAv6pGg= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:05 2025 by rpki-client