$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23189055-d140-32ae-b18f-bfcc17da7501.roa File: 23189055-d140-32ae-b18f-bfcc17da7501.roa (raw, json) Hash identifier: +X518IspidpEOKaPslRdS6GtvtnMZE8Ee1AqV3KAHN8= Subject key identifier: 93:3E:5F:82:05:6D:49:23:33:B0:F3:9E:8E:51:E3:AE:2F:FD:2C:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F1FE62C8EDC8303E05484E Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23189055-d140-32ae-b18f-bfcc17da7501.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f1:fe:62:c8:ed:c8:30:3e:05:48:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c7a71e99-3393-4588-882d-9417b6410b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:4d:25:dc:e9:27:5c:ce:b6:96:c1:56:51: a4:80:8d:78:44:ba:3b:1b:2a:c0:8d:5c:77:ef:e9: 71:29:55:f2:e1:40:c0:69:99:78:4b:bf:65:30:a2: 0b:5b:23:d9:86:8e:f8:5f:c3:af:7b:af:0c:83:df: df:47:e3:a5:0d:ff:50:5d:78:1a:ef:1d:f5:9b:35: bf:8f:b7:84:76:fa:3a:31:4a:78:5d:1a:89:4c:3e: 03:6f:5d:12:eb:1a:53:55:40:ca:52:92:08:07:5f: 12:c2:2a:f3:cd:6c:dc:d5:d5:08:37:f8:23:c4:9b: 0b:3b:27:b2:34:8c:90:24:1e:77:be:0f:b8:80:3d: a5:75:56:77:34:87:81:e3:5d:db:8f:83:3f:0b:aa: 9b:08:f3:73:93:82:54:49:f7:69:46:8a:ff:a0:75: 5b:37:64:56:77:77:37:d3:b2:88:78:ee:ab:e0:9d: 27:00:a5:5e:11:77:a8:1f:98:55:00:b6:4c:47:52: 71:19:40:c6:12:ea:fc:88:c1:12:ba:ce:80:9b:de: 78:91:57:46:45:dc:0c:f1:c8:96:2b:b0:01:af:99: a7:a0:dc:87:3c:75:b3:cc:83:cf:e3:b9:b1:33:61: b1:db:bc:b9:50:14:f0:17:51:82:f7:0b:7e:42:e3: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:5F:82:05:6D:49:23:33:B0:F3:9E:8E:51:E3:AE:2F:FD:2C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23189055-d140-32ae-b18f-bfcc17da7501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:32:29:c3:5e:3a:e6:07:aa:a7:bb:09:9c:68:4c:23:8c:53: 47:8f:0f:e4:c5:66:ef:c9:c2:99:a3:26:47:f1:10:bf:27:a4: 9c:55:74:bf:81:36:c6:23:eb:a4:8b:b0:2b:9b:ac:29:a2:a6: 25:9c:17:1d:50:32:32:e1:d4:eb:76:8d:b2:59:72:9d:ca:58: 71:ea:f2:9e:c1:90:ca:8f:c7:c3:33:b8:6c:c8:81:2a:45:9d: 85:35:64:9c:a6:e2:e0:eb:2b:d2:49:1c:f7:7e:92:5b:7a:8a: b9:b5:dd:fc:61:b0:b8:6c:e4:6f:e1:c7:bb:e5:d3:42:84:96: db:40:88:3d:61:a4:45:78:c9:10:cb:f9:f9:7b:33:ec:3c:1e: 23:4e:41:a1:38:0f:df:94:95:e8:7a:68:3a:56:9c:f4:14:39: 81:ad:97:f6:71:8c:f6:07:ec:26:9b:24:f2:f8:a0:cb:b6:03: ec:c5:d7:dc:74:7f:55:6e:ac:03:64:81:3d:1b:de:fc:e0:f2: ba:2d:62:29:c7:cc:ee:28:2e:d9:84:5e:2d:ee:75:fa:d6:6e: b2:c0:b7:03:6c:22:f9:5f:2d:8d:b3:5c:28:f0:1d:f4:23:42: 62:0f:86:a6:c3:02:0c:49:0c:8f:d7:21:54:e5:46:88:fe:f7: 35:92:96:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28f5iyO3IMD4FSE4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzdhNzFlOTktMzM5My00NTg4LTg4MmQtOTQxN2I2NDEwYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEtNJdzpJ1zOtpbBVlGkgI14RLo7GyrAjVx3 7+lxKVXy4UDAaZl4S79lMKILWyPZho74X8Ove68Mg9/fR+OlDf9QXXga7x31mzW/ j7eEdvo6MUp4XRqJTD4Db10S6xpTVUDKUpIIB18SwirzzWzc1dUIN/gjxJsLOyey NIyQJB53vg+4gD2ldVZ3NIeB413bj4M/C6qbCPNzk4JUSfdpRor/oHVbN2RWd3c3 07KIeO6r4J0nAKVeEXeoH5hVALZMR1JxGUDGEur8iMESus6Am954kVdGRdwM8ciW K7ABr5mnoNyHPHWzzIPP47mxM2Gx27y5UBTwF1GC9wt+QuMHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJM+X4IFbUkjM7Dzno5R464v/SzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMxODkwNTUtZDE0MC0z MmFlLWIxOGYtYmZjYzE3ZGE3NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRApoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgyKcNeOuYHqqe7CZxoTCOMU0ePD+TFZu/JwpmjJkfxEL8npJxVdL+B NsYj66SLsCubrCmipiWcFx1QMjLh1Ot2jbJZcp3KWHHq8p7BkMqPx8MzuGzIgSpF nYU1ZJym4uDrK9JJHPd+klt6irm13fxhsLhs5G/hx7vl00KElttAiD1hpEV4yRDL +fl7M+w8HiNOQaE4D9+Uleh6aDpWnPQUOYGtl/ZxjPYH7CabJPL4oMu2A+zF19x0 f1VurANkgT0b3vzg8rotYinHzO4oLtmEXi3udfrWbrLAtwNsIvlfLY2zXCjwHfQj QmIPhqbDAgxJDI/XIVTlRoj+9zWSlhk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:47:58 2025 by rpki-client