$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc175e-ff33-3ef6-83ef-cae91b51184a.roa File: 28dc175e-ff33-3ef6-83ef-cae91b51184a.roa (raw, json) Hash identifier: HIq9yF3ahsPX9z7HxlQ1D4pFu20TamnKjjDh5UUISOQ= Subject key identifier: 22:B7:46:98:DC:15:13:7A:17:F7:49:E5:52:5A:CE:49:65:D0:70:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26CDDD342C0DAA59721FA Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc175e-ff33-3ef6-83ef-cae91b51184a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.105.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6c:dd:d3:42:c0:da:a5:97:21:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2ccd5114-0fe9-4778-8966-6576eb94160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:6b:36:32:53:93:b2:e3:a2:24:39:07:f5: 42:9e:a3:14:ff:3e:ed:1b:0a:c2:77:8d:b4:db:83: da:06:87:da:d3:f2:ff:26:93:7d:a1:0a:50:9e:a8: f8:7e:ca:34:29:c5:db:5b:94:9e:4f:3c:36:08:e3: 53:f9:3e:2e:e3:ad:55:6e:cf:c3:e9:91:1a:37:c0: a3:46:04:73:8b:74:a8:6a:8e:95:23:0f:a9:e1:df: a1:7a:b9:1b:5e:5f:29:29:75:69:58:62:8e:41:b5: 5f:13:32:fd:45:be:0d:a2:3c:14:62:c4:41:18:52: b9:06:87:40:ac:bc:73:60:44:93:6b:85:23:86:a9: ba:94:8d:d2:bc:9d:53:00:42:a1:99:7c:03:44:43: f9:f5:1e:58:36:b7:ec:8a:0d:37:dd:51:04:4c:4f: 30:9e:0b:3b:95:6a:33:7d:dd:62:33:aa:a1:29:93: 7a:62:a6:29:54:e2:a4:ea:96:27:8a:7c:0a:51:1c: 85:94:4c:3f:6c:1c:cd:b9:d2:91:d2:47:da:16:b0: 51:d2:43:65:30:bf:17:7e:c6:33:b2:2e:47:85:28: 77:5a:c0:a0:c1:dc:ce:be:8a:4b:65:ad:f9:ca:c1: 0f:22:ce:9d:53:81:15:41:4b:38:5a:57:89:86:7f: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B7:46:98:DC:15:13:7A:17:F7:49:E5:52:5A:CE:49:65:D0:70:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc175e-ff33-3ef6-83ef-cae91b51184a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.105.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d3:72:7e:43:c6:d2:1c:5d:23:e4:9f:6e:6b:4d:88:42:4a: 14:84:42:5f:e1:dd:a7:26:3b:f0:66:48:f1:d4:8e:39:0c:fe: 81:da:46:59:b5:b8:99:6e:26:0a:9b:38:0c:47:9a:dd:e8:03: c8:67:27:7e:00:24:9a:03:3b:fe:3c:53:da:a4:4f:35:d9:df: 3a:ec:bd:78:e6:33:63:70:a6:f8:5b:e3:12:0e:30:b5:02:21: 44:1f:10:8d:aa:a4:78:7e:15:9e:b0:1a:71:49:82:57:24:fb: 16:3a:0a:be:5d:f3:53:85:52:a5:82:0c:66:e6:5c:42:dc:f9: 9d:0e:f1:0e:84:72:1b:8f:e5:ae:a7:80:78:52:b3:c0:2e:6d: f0:f4:00:f4:fb:5a:41:30:64:b7:28:67:62:c0:86:e2:19:9f: 0a:19:d8:8e:a8:7b:0e:bf:c3:46:be:f3:f6:a7:61:ff:f3:63: b7:80:cc:35:35:22:85:4f:5b:97:49:ba:71:e8:5e:0b:17:d3: 4b:fe:bb:57:af:b4:64:4b:6d:79:16:87:ff:2c:15:91:0e:71: 58:c3:76:1b:00:89:00:d2:a4:2d:b1:0e:e5:78:a4:12:58:29: 28:71:1d:a3:65:7d:14:74:9a:5b:2d:56:52:99:82:56:1c:08: f0:7c:e5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mzd00LA2qWXIfowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmNjZDUxMTQtMGZlOS00Nzc4LTg5NjYtNjU3NmViOTQxNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5rNjJTk7LjoiQ5B/VCnqMU/z7tGwrCd420 24PaBofa0/L/JpN9oQpQnqj4fso0KcXbW5SeTzw2CONT+T4u461Vbs/D6ZEaN8Cj RgRzi3Soao6VIw+p4d+herkbXl8pKXVpWGKOQbVfEzL9Rb4NojwUYsRBGFK5BodA rLxzYESTa4Ujhqm6lI3SvJ1TAEKhmXwDREP59R5YNrfsig033VEETE8wngs7lWoz fd1iM6qhKZN6YqYpVOKk6pYninwKURyFlEw/bBzNudKR0kfaFrBR0kNlML8XfsYz si5HhSh3WsCgwdzOvopLZa35ysEPIs6dU4EVQUs4WleJhn/XWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK3RpjcFRN6F/dJ5VJazkll0HCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhkYzE3NWUtZmYzMy0z ZWY2LTgzZWYtY2FlOTFiNTExODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnTcn5DxtIcXSPkn25rTYhCShSEQl/h3acmO/BmSPHUjjkM/oHaRlm1 uJluJgqbOAxHmt3oA8hnJ34AJJoDO/48U9qkTzXZ3zrsvXjmM2Nwpvhb4xIOMLUC IUQfEI2qpHh+FZ6wGnFJglck+xY6Cr5d81OFUqWCDGbmXELc+Z0O8Q6EchuP5a6n gHhSs8AubfD0APT7WkEwZLcoZ2LAhuIZnwoZ2I6oew6/w0a+8/anYf/zY7eAzDU1 IoVPW5dJunHoXgsX00v+u1evtGRLbXkWh/8sFZEOcVjDdhsAiQDSpC2xDuV4pBJY KShxHaNlfRR0mlstVlKZglYcCPB85aM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:50 2025 by rpki-client