$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa File: 21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa (raw, json) Hash identifier: eWSvMK2BZwFNrhdetDQY1II2K2gQ/QYOXihJBYRhXig= Subject key identifier: A6:60:CB:E3:C5:CE:5F:88:FE:38:42:2F:CD:CE:90:12:7C:62:18:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F270320821B2096A9C5D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.230.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:70:32:08:21:b2:09:6a:9c:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ff3a0de9-0893-481c-89a3-c20872b0f207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:aa:bf:48:38:a7:70:1d:20:a4:c1:39:48: 6f:6d:15:1c:ab:93:da:84:c9:01:f6:fe:1c:d5:67: 4e:c4:eb:39:f2:98:51:e9:e4:41:a3:1b:2d:01:71: b0:85:bc:3e:32:15:b7:bb:a6:55:c5:3b:7e:64:10: ce:be:2e:53:f2:43:05:4f:9f:e9:c6:b5:4b:44:cf: 8f:ad:99:83:9c:a4:25:36:33:68:c9:ac:b4:96:92: 16:b5:c6:29:65:cb:ec:41:cd:4d:80:c3:11:6e:10: e8:bf:6a:89:71:30:47:4a:a8:a6:74:e5:74:a0:00: c1:1b:9c:4f:23:23:e2:52:1d:63:21:09:e4:5d:87: 0c:34:09:46:17:22:ed:c7:18:31:cf:5f:25:c7:c2: 98:ae:e6:25:2a:73:bb:f3:de:74:9f:de:5c:d0:fa: 64:a5:54:ee:d6:2c:9f:45:15:ee:e3:50:71:86:79: 3d:17:26:94:94:43:02:78:61:5e:ab:f2:5b:8f:3a: 84:81:18:70:e5:40:cf:00:28:04:bb:d1:66:66:42: bd:26:c7:06:f8:e2:b6:c7:16:1b:1b:ee:c9:e2:2e: 06:f2:03:fb:c5:e5:af:41:7f:c8:e4:54:f9:6a:d5: 04:46:48:8d:51:5d:e1:51:41:71:f8:cf:55:a7:da: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:CB:E3:C5:CE:5F:88:FE:38:42:2F:CD:CE:90:12:7C:62:18:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21ff86e0-edd5-3698-af9c-bfde94db4a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c8:73:34:c0:f6:ba:ba:49:bb:cd:b3:22:e7:83:83:d7:ae: 0b:d0:41:d3:b5:57:46:0f:7d:6c:86:6e:d2:4e:af:07:18:29: f1:cb:49:6d:a8:4e:a1:96:34:a0:97:3e:35:3e:33:ed:27:db: d3:de:15:e5:a0:af:f5:29:57:07:7a:bc:3e:47:d6:ee:d7:f3: ba:b9:57:0b:f3:c4:c5:f9:e4:d1:75:e6:e5:89:ed:a4:db:76: fa:bc:88:d9:94:7d:f9:9f:92:6e:3d:e6:9a:5f:b1:63:48:e6: 94:de:35:9c:cc:63:7f:ad:a2:56:c8:27:8a:32:a0:4a:59:5c: 9c:cb:c0:f3:25:f6:03:65:ce:b7:b3:57:b1:9a:ef:15:69:14: c6:8d:0a:fc:89:47:29:e8:f5:1a:d7:ec:43:4b:6d:59:7f:40: e2:9e:48:c2:33:da:db:6f:ee:36:67:02:e9:46:f5:24:91:33: be:35:bd:71:8f:1d:8b:6e:2d:de:18:fb:39:b2:fe:32:30:18: 3f:c6:27:9e:85:25:ce:d5:31:98:87:1b:df:1c:71:93:9b:a2: 51:bd:b6:48:ca:66:6c:01:49:7d:f3:17:3b:0b:55:03:76:60: fb:08:cf:89:4b:e8:f3:5a:7a:f4:6f:6b:f4:01:7c:57:89:16: 2b:bf:f2:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nAyCCGyCWqcXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZmYzYTBkZTktMDg5My00ODFjLTg5YTMtYzIwODcyYjBmMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRqqv0g4p3AdIKTBOUhvbRUcq5PahMkB9v4c 1WdOxOs58phR6eRBoxstAXGwhbw+MhW3u6ZVxTt+ZBDOvi5T8kMFT5/pxrVLRM+P rZmDnKQlNjNoyay0lpIWtcYpZcvsQc1NgMMRbhDov2qJcTBHSqimdOV0oADBG5xP IyPiUh1jIQnkXYcMNAlGFyLtxxgxz18lx8KYruYlKnO78950n95c0PpkpVTu1iyf RRXu41Bxhnk9FyaUlEMCeGFeq/JbjzqEgRhw5UDPACgEu9FmZkK9JscG+OK2xxYb G+7J4i4G8gP7xeWvQX/I5FT5atUERkiNUV3hUUFx+M9Vp9pasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZgy+PFzl+I/jhCL83OkBJ8YhgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFmZjg2ZTAtZWRkNS0z Njk4LWFmOWMtYmZkZTk0ZGI0YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRObOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXIczTA9rq6SbvNsyLng4PXrgvQQdO1V0YPfWyGbtJOrwcYKfHLSW2o TqGWNKCXPjU+M+0n29PeFeWgr/UpVwd6vD5H1u7X87q5VwvzxMX55NF15uWJ7aTb dvq8iNmUffmfkm495ppfsWNI5pTeNZzMY3+tolbIJ4oyoEpZXJzLwPMl9gNlzrez V7Ga7xVpFMaNCvyJRyno9RrX7ENLbVl/QOKeSMIz2ttv7jZnAulG9SSRM741vXGP HYtuLd4Y+zmy/jIwGD/GJ56FJc7VMZiHG98ccZObolG9tkjKZmwBSX3zFzsLVQN2 YPsIz4lL6PNaevRva/QBfFeJFiu/8r4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:26 2025 by rpki-client