$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa File: 30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa (raw, json) Hash identifier: AEoiVl3Qfl5sjsYqtqbCXGM9z15l8TQGkvO03IpC/B4= Subject key identifier: 4B:26:0C:3E:57:0C:85:21:6E:31:59:C8:D1:8E:1A:99:81:1F:E5:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27063E32752D33C2E5A10 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.96.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:70:63:e3:27:52:d3:3c:2e:5a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=399efb81-4faf-45c8-a559-0fc1976408af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:e8:15:8f:96:de:5c:b8:d9:5c:eb:1c:b6: 84:fa:fc:45:8f:16:1d:82:95:3f:c4:95:70:ba:80: b0:53:e0:b8:10:64:4e:18:35:7c:cf:37:4f:57:dd: 8e:6b:9b:c1:d2:e7:86:01:14:61:83:33:28:cf:8d: 5d:66:42:92:03:2a:5f:b1:fc:19:57:d0:0d:67:89: a0:62:93:f3:25:aa:ce:ab:70:77:4b:83:93:7e:01: bd:cd:74:52:50:e9:7e:fb:24:ad:56:b7:15:40:ce: c7:f2:bf:18:82:b6:2d:d5:c5:e7:fe:2d:d8:16:28: 32:db:15:61:60:f6:5d:6f:31:15:a9:8a:bd:65:89: 2e:be:cd:4e:5f:76:77:4b:ea:2a:55:e9:66:f7:7b: f2:76:50:47:38:7a:d7:f5:c4:77:f6:84:c4:1d:0f: 28:ec:f8:fa:6f:fb:c8:ad:d9:c8:5f:fc:22:74:1a: 55:c2:0a:c6:dd:6a:fd:17:f9:d8:b8:aa:e4:06:99: db:da:99:0a:4b:9b:b0:55:5d:a4:36:9c:e1:83:8e: 58:50:dd:89:9f:5a:b9:85:65:7e:95:40:dd:46:67: 74:d5:c0:dd:79:5f:9a:42:a0:11:6d:bd:1d:57:60: 53:f7:81:76:d2:da:7d:de:95:62:55:93:c3:d1:ca: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:26:0C:3E:57:0C:85:21:6E:31:59:C8:D1:8E:1A:99:81:1F:E5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:45:e3:a2:1c:62:a7:f7:f4:c4:c0:3f:34:b1:6e:42:d6:16: 65:3d:37:5c:87:53:f5:35:94:65:b6:94:e7:76:1a:81:1e:74: 63:24:02:5f:15:d1:d4:3e:3b:ef:41:57:21:d8:84:b9:57:53: 90:55:08:ab:18:2e:89:78:67:44:a9:6f:4e:28:6d:c0:e0:85: 66:b1:6b:1e:43:6b:83:4e:dc:3c:89:fb:f3:43:f2:4a:16:7b: 67:9d:a2:78:aa:1f:a3:7d:f1:9b:57:16:4a:db:0e:e1:84:ea: 50:53:fe:d4:0b:44:ec:ee:b3:15:39:f0:2c:3a:65:08:8b:9a: 4c:73:e8:ff:84:bb:f7:9d:46:c1:76:72:3e:1e:96:37:c1:f6: 6b:9c:4c:24:b1:69:2e:fe:c6:da:77:b3:22:87:c2:9e:4f:14: 34:09:38:87:d7:90:3f:3f:0d:a5:55:f3:db:4e:ef:2d:01:10: 7e:19:80:ae:d3:2a:81:64:f0:b5:eb:57:20:17:86:ad:a5:55: 10:fa:59:4d:aa:71:fd:01:ad:fa:7a:52:c2:17:3b:cf:50:56: 1e:12:8b:05:b3:ad:3c:90:16:85:01:50:dd:21:e8:df:fd:06: 0c:22:50:ce:66:c3:f1:5c:ce:4a:23:69:99:d2:08:46:83:9a: e6:4f:68:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nBj4ydS0zwuWhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Mzk5ZWZiODEtNGZhZi00NWM4LWE1NTktMGZjMTk3NjQwOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykroFY+W3ly42VzrHLaE+vxFjxYdgpU/xJVw uoCwU+C4EGROGDV8zzdPV92Oa5vB0ueGARRhgzMoz41dZkKSAypfsfwZV9ANZ4mg YpPzJarOq3B3S4OTfgG9zXRSUOl++yStVrcVQM7H8r8YgrYt1cXn/i3YFigy2xVh YPZdbzEVqYq9ZYkuvs1OX3Z3S+oqVelm93vydlBHOHrX9cR39oTEHQ8o7Pj6b/vI rdnIX/widBpVwgrG3Wr9F/nYuKrkBpnb2pkKS5uwVV2kNpzhg45YUN2Jn1q5hWV+ lUDdRmd01cDdeV+aQqARbb0dV2BT94F20tp93pViVZPD0cqLXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsmDD5XDIUhbjFZyNGOGpmBH+WvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzBjMGRlZDgtY2EwNy0z NzgxLWJjMzItOGZjNDYxYzdmM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxF46IcYqf39MTAPzSxbkLWFmU9N1yHU/U1lGW2lOd2GoEedGMkAl8V 0dQ+O+9BVyHYhLlXU5BVCKsYLol4Z0Spb04obcDghWaxax5Da4NO3DyJ+/ND8koW e2edoniqH6N98ZtXFkrbDuGE6lBT/tQLROzusxU58Cw6ZQiLmkxz6P+Eu/edRsF2 cj4eljfB9mucTCSxaS7+xtp3syKHwp5PFDQJOIfXkD8/DaVV89tO7y0BEH4ZgK7T KoFk8LXrVyAXhq2lVRD6WU2qcf0Brfp6UsIXO89QVh4SiwWzrTyQFoUBUN0h6N/9 BgwiUM5mw/FczkojaZnSCEaDmuZPaEM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:25 2025 by rpki-client