$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29ec400e-b1df-38a6-827c-17e06fd9e08d.roa File: 29ec400e-b1df-38a6-827c-17e06fd9e08d.roa (raw, json) Hash identifier: wzG0IudkxV6EASff5eWjcNvdBZwc7sysliu/sBFfQEs= Subject key identifier: 30:39:13:DF:C7:65:35:85:74:C1:4E:B7:BF:A1:CC:90:6B:57:9F:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2082558C50591FEC67600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29ec400e-b1df-38a6-827c-17e06fd9e08d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:08:25:58:c5:05:91:fe:c6:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e268762d-2a31-4c1b-aa27-b18b192646b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:4f:00:7e:1e:1f:1a:ad:02:6b:b5:86:42: a4:ef:31:08:f5:a2:8d:67:a4:a4:7a:c0:4e:42:87: 9d:6d:c0:75:36:c5:77:c0:9f:0c:74:84:5c:fa:01: 03:b5:6a:fb:a6:e0:64:85:8c:2f:8e:5c:29:87:88: fc:a7:f2:5b:fd:13:6d:ed:18:79:6b:27:60:0e:7b: fb:67:89:df:bd:32:e2:fa:aa:0b:a7:ff:34:c8:d4: b6:41:e0:b8:6e:be:eb:a2:10:c8:a8:49:57:27:81: 60:56:68:fe:d1:d7:f7:9f:bc:f5:5e:3f:f1:e4:4a: 96:8c:c9:a4:7f:19:67:18:5c:c2:7a:ad:9c:86:1e: 0f:99:e5:7d:d6:05:e0:57:20:60:81:86:20:44:86: 9b:64:1a:97:aa:dd:e4:41:b9:c7:8e:fb:7a:8b:c8: 78:d7:25:40:ca:ed:5e:a0:8a:bc:a6:77:8e:10:81: 9c:87:29:d1:dc:b4:93:d1:4e:16:3c:87:84:9a:f3: b7:4b:2e:34:26:d0:db:a6:47:8b:8f:ff:be:37:3d: b0:28:15:ec:e3:02:8c:c3:f6:27:df:23:78:02:83: 4b:1e:16:d7:6a:25:ec:ae:7e:2c:62:1e:38:e9:89: d8:b3:42:84:0b:c0:d9:58:2f:e4:77:17:dd:85:43: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:39:13:DF:C7:65:35:85:74:C1:4E:B7:BF:A1:CC:90:6B:57:9F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29ec400e-b1df-38a6-827c-17e06fd9e08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:03:7a:4f:d7:a2:40:1e:91:af:ce:58:d9:94:91:33:59:58: 24:d9:48:74:f6:54:b6:43:8c:7e:3b:71:bd:a5:10:9e:be:87: ea:06:e8:91:58:d0:5c:1e:ed:91:48:fc:0a:20:a6:7b:c1:6d: 5d:06:a5:7b:0e:97:a8:c7:6d:30:86:cc:b1:22:6a:f6:4e:b6: dd:e9:fd:3c:13:22:eb:b2:85:b2:7f:fe:38:d4:42:c4:7a:b2: 7c:75:a8:d1:74:14:70:e8:3f:ef:46:1f:b1:57:97:dd:8a:7b: 6f:ec:08:49:cd:da:0f:b9:58:14:36:d9:ed:f2:88:b6:6c:25: 83:fe:c6:6e:36:82:4f:40:2d:f7:af:f8:71:19:40:d7:2b:a6: d6:f4:34:56:1b:ce:30:15:38:e4:9c:48:5d:16:44:29:02:a1: 70:98:2e:b4:30:0a:2e:99:1e:91:07:45:0a:9f:ea:62:d6:0e: b4:8e:d8:aa:8e:a0:dc:53:a1:92:08:55:bb:13:61:42:74:57: 1e:70:f4:68:5e:7b:c6:c2:e8:db:19:80:e7:42:4f:8c:7b:0d: f1:fa:bb:f3:3c:1c:01:46:d5:29:32:36:41:20:30:0a:d3:4c: f8:9c:b7:38:26:57:f2:20:76:43:c6:9a:78:f9:b3:3d:42:a0: 12:a1:f4:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gglWMUFkf7GdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTI2ODc2MmQtMmEzMS00YzFiLWFhMjctYjE4YjE5MjY0NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+dPAH4eHxqtAmu1hkKk7zEI9aKNZ6SkesBO QoedbcB1NsV3wJ8MdIRc+gEDtWr7puBkhYwvjlwph4j8p/Jb/RNt7Rh5aydgDnv7 Z4nfvTLi+qoLp/80yNS2QeC4br7rohDIqElXJ4FgVmj+0df3n7z1Xj/x5EqWjMmk fxlnGFzCeq2chh4PmeV91gXgVyBggYYgRIabZBqXqt3kQbnHjvt6i8h41yVAyu1e oIq8pneOEIGchynR3LST0U4WPIeEmvO3Sy40JtDbpkeLj/++Nz2wKBXs4wKMw/Yn 3yN4AoNLHhbXaiXsrn4sYh446YnYs0KEC8DZWC/kdxfdhUOopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA5E9/HZTWFdMFOt7+hzJBrV58gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjllYzQwMGUtYjFkZi0z OGE2LTgyN2MtMTdlMDZmZDllMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0Dek/XokAeka/OWNmUkTNZWCTZSHT2VLZDjH47cb2lEJ6+h+oG6JFY 0Fwe7ZFI/AogpnvBbV0GpXsOl6jHbTCGzLEiavZOtt3p/TwTIuuyhbJ//jjUQsR6 snx1qNF0FHDoP+9GH7FXl92Ke2/sCEnN2g+5WBQ22e3yiLZsJYP+xm42gk9ALfev +HEZQNcrptb0NFYbzjAVOOScSF0WRCkCoXCYLrQwCi6ZHpEHRQqf6mLWDrSO2KqO oNxToZIIVbsTYUJ0Vx5w9Ghee8bC6NsZgOdCT4x7DfH6u/M8HAFG1SkyNkEgMArT TPictzgmV/IgdkPGmnj5sz1CoBKh9GI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:43:50 2025 by rpki-client