$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b4ad690-1de8-3372-8439-8532b6d41655.roa File: 2b4ad690-1de8-3372-8439-8532b6d41655.roa (raw, json) Hash identifier: JIX+VnxTyCpqlJsnPFRIU72eXmu9vsBMd7temUg94XU= Subject key identifier: 84:C5:63:DB:E3:1A:E5:C2:EF:B9:BC:F7:95:0F:22:57:81:DC:F5:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F274E3E00C36DFE7D558C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b4ad690-1de8-3372-8439-8532b6d41655.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.101.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:74:e3:e0:0c:36:df:e7:d5:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=85cf647e-f3eb-4d7e-baf3-ac84b9c6b019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:ed:61:76:68:e5:bc:0d:76:ff:28:39:a9: 86:2b:cb:2b:0b:01:58:1d:1f:3b:89:3b:4b:2a:0e: b9:dd:2f:e9:e3:c1:b2:af:59:fa:96:84:e4:43:d9: c6:f7:34:17:fe:a0:cd:a9:d0:04:a5:dd:f8:ed:11: e7:70:85:5a:a9:92:54:62:fd:9b:63:5b:e7:f3:33: b7:41:0d:1a:a3:65:66:8b:28:ee:82:5b:70:75:f6: d3:3a:09:39:b5:9f:09:b3:91:86:1d:4f:25:62:49: cf:a7:9b:3c:45:af:37:8f:b0:20:72:c5:f2:84:d0: 36:c2:33:71:5d:f8:4b:2b:06:3f:9e:6b:a1:a9:89: 4d:03:b8:b1:11:80:93:d4:65:c4:ae:c6:59:d2:07: e5:cf:0c:59:60:38:35:d8:68:62:85:0b:02:2e:d0: 49:0f:da:0e:5e:0f:50:bb:b0:28:26:ca:03:f6:6e: fa:03:eb:11:5a:f1:ea:30:57:b0:18:59:08:7f:ce: ae:c0:e3:f4:22:2d:67:ac:22:de:62:e2:a8:ad:81: 1e:b3:50:86:bf:c0:0d:b6:6c:fe:58:a3:6a:dc:fe: 86:ba:9a:a8:af:11:e2:98:2c:fd:69:01:96:ce:c1: 23:f7:ac:d9:df:f1:5b:df:11:79:f8:ad:7f:11:9d: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C5:63:DB:E3:1A:E5:C2:EF:B9:BC:F7:95:0F:22:57:81:DC:F5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b4ad690-1de8-3372-8439-8532b6d41655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f5:4a:09:9c:ad:f8:99:ac:2a:78:ae:58:f8:12:11:89:21: 52:26:f0:22:45:19:de:74:f9:fe:e6:8c:ca:8b:9a:b9:cf:ec: 9d:8c:e2:ad:04:4e:66:85:f9:28:e4:0d:bd:6c:de:52:73:c3: 3c:5a:8e:8a:79:36:12:ae:8d:d4:67:8c:02:78:d9:4b:85:11: 7d:16:03:5a:a4:f8:b1:34:bf:87:46:16:0c:47:60:92:bf:ed: ee:5b:d2:16:b0:52:86:f2:7c:d3:c3:b2:70:ac:01:8e:b1:4e: cc:08:95:62:04:35:49:e3:91:4b:d3:41:c8:59:61:a6:a5:c7: 20:86:14:85:79:24:e9:9f:45:67:68:d5:9b:24:23:c2:07:ad: 60:6e:50:21:1b:44:ae:ee:7a:c6:f9:b5:17:4a:38:aa:46:1f: 67:2b:b3:10:e6:64:08:9d:b9:99:86:e6:82:36:87:19:ed:3d: a6:ba:3e:ff:f1:9a:3a:06:8f:b2:12:d8:4a:2f:f0:62:b2:9b: 9d:f6:28:2d:53:3e:2a:81:9e:39:26:36:be:d8:a9:3b:e4:14: 95:30:73:74:ef:82:c3:b2:8d:5b:9b:31:58:a6:54:28:ed:8f: 3f:30:cb:86:32:43:e3:67:48:0b:dc:01:46:54:15:b0:66:84: 67:83:06:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nTj4Aw23+fVWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODVjZjY0N2UtZjNlYi00ZDdlLWJhZjMtYWM4NGI5YzZiMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAXtYXZo5bwNdv8oOamGK8srCwFYHR87iTtL Kg653S/p48Gyr1n6loTkQ9nG9zQX/qDNqdAEpd347RHncIVaqZJUYv2bY1vn8zO3 QQ0ao2VmiyjugltwdfbTOgk5tZ8Js5GGHU8lYknPp5s8Ra83j7AgcsXyhNA2wjNx XfhLKwY/nmuhqYlNA7ixEYCT1GXErsZZ0gflzwxZYDg12GhihQsCLtBJD9oOXg9Q u7AoJsoD9m76A+sRWvHqMFewGFkIf86uwOP0Ii1nrCLeYuKorYEes1CGv8ANtmz+ WKNq3P6GupqorxHimCz9aQGWzsEj96zZ3/Fb3xF5+K1/EZ3r/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITFY9vjGuXC77m895UPIleB3PUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI0YWQ2OTAtMWRlOC0z MzcyLTg0MzktODUzMmI2ZDQxNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX1SgmcrfiZrCp4rlj4EhGJIVIm8CJFGd50+f7mjMqLmrnP7J2M4q0E TmaF+SjkDb1s3lJzwzxajop5NhKujdRnjAJ42UuFEX0WA1qk+LE0v4dGFgxHYJK/ 7e5b0hawUobyfNPDsnCsAY6xTswIlWIENUnjkUvTQchZYaalxyCGFIV5JOmfRWdo 1ZskI8IHrWBuUCEbRK7uesb5tRdKOKpGH2crsxDmZAiduZmG5oI2hxntPaa6Pv/x mjoGj7IS2Eov8GKym532KC1TPiqBnjkmNr7YqTvkFJUwc3TvgsOyjVubMVimVCjt jz8wy4YyQ+NnSAvcAUZUFbBmhGeDBsU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:19 2025 by rpki-client