$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3930adbc-8c7b-31db-b274-add7d1a5ee56.roa File: 3930adbc-8c7b-31db-b274-add7d1a5ee56.roa (raw, json) Hash identifier: A/m5OKi1MccTnEqk7V9A/cXldu9i9jDdB1g9QAx3Adk= Subject key identifier: 27:DB:D3:F1:31:73:53:F3:62:17:B6:E7:8F:EA:2A:1E:9B:C7:A2:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20C551619AB8BC51D2E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3930adbc-8c7b-31db-b274-add7d1a5ee56.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0c:55:16:19:ab:8b:c5:1d:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=67d0f241-0ab4-4d2c-a09e-b518a1f5e315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:fc:ca:38:f0:2d:17:a0:3d:30:75:dc:c4: 85:90:8e:b3:52:1a:98:bb:28:7f:63:dc:27:7b:be: c0:99:ef:06:b2:dc:93:5f:cd:f5:03:fb:c7:c3:b0: 27:3d:bc:c4:ad:ef:0b:83:bf:83:71:cf:4b:83:22: b5:0b:a3:4e:18:03:a4:4e:68:32:29:f3:9c:c5:de: 35:46:08:3f:e6:9d:fb:07:fd:1f:26:40:35:42:60: 61:fe:6b:ec:02:bb:fd:12:fe:bd:80:07:a9:bc:6c: 77:d5:55:41:c5:dd:70:51:53:0c:4c:71:d1:b3:2f: 99:26:9a:4d:de:8d:c0:a5:65:8e:0b:aa:af:2d:ba: fe:d0:47:f0:6f:48:31:39:fc:a8:8c:5b:c3:9b:75: 13:7a:0f:d0:10:8a:be:dd:7b:4d:34:77:47:69:ef: ac:0f:cb:0d:e7:d7:03:0b:b4:4f:33:7a:92:fb:14: 78:57:78:b0:f7:01:f0:07:66:7a:e0:3f:42:db:98: d6:ef:10:6d:36:51:e6:c5:1b:e3:0d:14:dc:f9:e3: d4:ef:9c:a5:af:32:49:31:62:71:8a:3d:7a:39:4c: a4:f5:11:df:d1:95:00:64:bf:99:0e:1d:ae:ad:2e: d9:89:0d:ea:e7:39:71:c8:ca:12:2d:22:a2:4e:85: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DB:D3:F1:31:73:53:F3:62:17:B6:E7:8F:EA:2A:1E:9B:C7:A2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3930adbc-8c7b-31db-b274-add7d1a5ee56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9d:a2:d0:00:e6:55:1a:82:fe:4e:2e:75:77:82:4f:49:c5: 89:5f:27:f4:c1:5f:f6:bc:24:0d:4c:de:92:5f:41:93:cb:46: 25:e7:90:e9:30:74:3e:97:d1:01:aa:38:59:94:e7:5a:fe:73: 8c:61:e4:88:61:ff:e7:40:01:3e:2c:f3:9a:a8:56:66:87:97: f9:34:a0:ef:91:07:74:3e:9f:e9:c3:27:18:26:e4:16:18:56: 95:eb:af:2f:62:75:07:fc:f6:23:c3:20:c1:5c:ce:c4:8d:04: 65:d1:5d:5f:51:92:6a:b0:0a:b5:30:fb:35:5d:4c:b8:88:16: 2c:4e:ce:3e:d1:f6:a3:08:29:4d:09:33:d0:dc:a1:11:ba:d3: 9d:6f:98:fe:00:b2:cd:b4:19:47:41:ad:5b:62:af:15:4d:cf: f4:cc:ac:ed:83:ac:f0:6a:d2:71:46:2f:4d:42:fc:ed:a5:25: 09:91:e2:71:0e:b6:64:47:40:fd:c2:2b:0f:4f:f2:5a:e1:86: 82:44:8a:74:92:b7:a6:4c:40:8c:bf:a0:f2:42:12:e7:5e:35: 76:f4:0a:f6:13:9e:7b:7a:fe:e3:a9:21:d7:17:ea:ce:bb:4f: 1e:a7:aa:bd:78:b5:f2:fd:de:14:25:98:1f:87:99:77:d4:d6: f5:68:1c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gxVFhmri8UdLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjdkMGYyNDEtMGFiNC00ZDJjLWEwOWUtYjUxOGExZjVlMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3X8yjjwLRegPTB13MSFkI6zUhqYuyh/Y9wn e77Ame8GstyTX831A/vHw7AnPbzEre8Lg7+Dcc9LgyK1C6NOGAOkTmgyKfOcxd41 Rgg/5p37B/0fJkA1QmBh/mvsArv9Ev69gAepvGx31VVBxd1wUVMMTHHRsy+ZJppN 3o3ApWWOC6qvLbr+0Efwb0gxOfyojFvDm3UTeg/QEIq+3XtNNHdHae+sD8sN59cD C7RPM3qS+xR4V3iw9wHwB2Z64D9C25jW7xBtNlHmxRvjDRTc+ePU75ylrzJJMWJx ij16OUyk9RHf0ZUAZL+ZDh2urS7ZiQ3q5zlxyMoSLSKiToVNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfb0/Exc1PzYhe254/qKh6bx6LOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzkzMGFkYmMtOGM3Yi0z MWRiLWIyNzQtYWRkN2QxYTVlZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2dotAA5lUagv5OLnV3gk9JxYlfJ/TBX/a8JA1M3pJfQZPLRiXnkOkw dD6X0QGqOFmU51r+c4xh5Ihh/+dAAT4s85qoVmaHl/k0oO+RB3Q+n+nDJxgm5BYY VpXrry9idQf89iPDIMFczsSNBGXRXV9RkmqwCrUw+zVdTLiIFixOzj7R9qMIKU0J M9DcoRG6051vmP4Ass20GUdBrVtirxVNz/TMrO2DrPBq0nFGL01C/O2lJQmR4nEO tmRHQP3CKw9P8lrhhoJEinSSt6ZMQIy/oPJCEudeNXb0CvYTnnt6/uOpIdcX6s67 Tx6nqr14tfL93hQlmB+HmXfU1vVoHK0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:37 2025 by rpki-client