$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42021149-4a4b-34c0-bd4d-1ea6cc158c99.roa File: 42021149-4a4b-34c0-bd4d-1ea6cc158c99.roa (raw, json) Hash identifier: H7axpr+ru5xqZbIg2etokvm91vz2/NrhDwywaQzO59c= Subject key identifier: 1C:1E:13:3E:1E:AD:C6:10:8E:21:71:8F:28:E7:DD:32:3E:E9:CF:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21D996053D7D0484E5B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42021149-4a4b-34c0-bd4d-1ea6cc158c99.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1d:99:60:53:d7:d0:48:4e:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a88cc61d-3f09-4566-bc9d-1d1d68e76611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:e3:ff:a2:dc:53:e6:3b:88:c6:a3:71:e1: a0:a4:19:72:19:15:47:4f:36:df:4e:97:03:7c:24: a3:81:98:08:b3:50:c1:49:40:b1:6c:88:92:b1:32: d3:bc:77:c4:e4:d2:17:f9:b6:e9:59:2d:16:1c:48: 49:d9:89:aa:7c:4f:6f:99:82:d5:df:88:a3:23:78: 40:39:c4:3f:14:90:03:fe:19:e7:29:18:5c:1e:2d: aa:9e:1a:0c:e2:d2:68:c9:e9:d1:52:47:69:d4:d7: 49:4b:55:ff:65:94:e4:2b:59:24:7e:d6:5e:87:b8: d1:1b:81:6b:6a:d5:48:f5:a1:22:ea:11:69:1b:78: c0:fa:c1:3e:e6:37:c6:45:f7:d8:e1:a0:57:25:2d: a1:13:cc:da:7f:0f:66:a3:a5:4c:3c:84:7b:28:17: 9b:9d:2c:74:2d:2d:cb:f8:d8:a2:eb:b6:dc:d7:7a: 69:fb:ee:16:1f:ea:8e:69:f4:2a:12:90:d5:57:b5: 1b:79:9c:98:de:3d:48:a6:15:18:b6:24:bd:54:48: d7:be:88:15:cf:1e:13:b2:78:3d:27:1c:d1:4a:99: 88:12:80:61:99:9e:39:72:7f:1b:9b:57:ca:ca:3a: f9:32:77:3b:a5:6d:66:02:02:e6:52:24:72:4d:d8: 50:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1E:13:3E:1E:AD:C6:10:8E:21:71:8F:28:E7:DD:32:3E:E9:CF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42021149-4a4b-34c0-bd4d-1ea6cc158c99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ac:57:ca:e2:17:48:b1:c0:4f:09:36:d4:bd:e6:fb:16:4e: 9b:46:d9:e9:06:0a:5a:6c:6f:72:a9:84:b9:ed:da:ae:ff:8a: b3:a2:72:48:ac:b3:7b:e2:55:9c:73:57:f0:30:f8:6f:fe:7d: 47:c8:55:0b:6a:ed:bd:a8:82:d7:40:5b:f4:69:9e:1b:74:90: ca:e1:8b:29:64:b1:a6:8d:dd:0e:8e:52:47:22:e8:d1:4b:28: 48:2b:94:ed:0f:93:89:f9:39:ad:3a:4f:db:15:73:85:cc:e2: 1c:44:80:c0:0f:70:cd:d3:f6:7e:7f:28:b0:47:ac:dd:84:a3: 31:dc:15:2a:66:b6:06:5e:2f:d6:3b:cb:92:65:58:ab:ed:a1: 39:0d:7a:c9:51:ac:a8:d9:fd:d1:f0:0e:54:0b:4f:a7:42:da: c3:71:cd:94:dc:71:85:84:4a:82:59:ef:7c:2f:fd:6c:ff:48: 86:38:09:1f:6b:d0:ac:39:98:d9:60:b5:a5:0e:f4:61:a7:27: 8e:91:d9:2d:b0:07:41:6f:34:b2:f6:61:01:5a:00:b9:a1:5d: 5e:8b:b0:2b:82:fc:0f:0a:57:87:32:4b:b9:3d:d4:3d:ff:e9: 08:04:4d:0f:d8:d7:73:b9:d1:26:ea:72:f4:33:ce:84:95:6f: 39:b5:a7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28h2ZYFPX0EhOW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTg4Y2M2MWQtM2YwOS00NTY2LWJjOWQtMWQxZDY4ZTc2NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk3j/6LcU+Y7iMajceGgpBlyGRVHTzbfTpcD fCSjgZgIs1DBSUCxbIiSsTLTvHfE5NIX+bbpWS0WHEhJ2YmqfE9vmYLV34ijI3hA OcQ/FJAD/hnnKRhcHi2qnhoM4tJoyenRUkdp1NdJS1X/ZZTkK1kkftZeh7jRG4Fr atVI9aEi6hFpG3jA+sE+5jfGRffY4aBXJS2hE8zafw9mo6VMPIR7KBebnSx0LS3L +Nii67bc13pp++4WH+qOafQqEpDVV7UbeZyY3j1IphUYtiS9VEjXvogVzx4Tsng9 JxzRSpmIEoBhmZ45cn8bm1fKyjr5Mnc7pW1mAgLmUiRyTdhQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBweEz4ercYQjiFxjyjn3TI+6c/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDIwMjExNDktNGE0Yi0z NGMwLWJkNGQtMWVhNmNjMTU4Yzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+sV8riF0ixwE8JNtS95vsWTptG2ekGClpsb3KphLnt2q7/irOickis s3viVZxzV/Aw+G/+fUfIVQtq7b2ogtdAW/Rpnht0kMrhiylksaaN3Q6OUkci6NFL KEgrlO0Pk4n5Oa06T9sVc4XM4hxEgMAPcM3T9n5/KLBHrN2EozHcFSpmtgZeL9Y7 y5JlWKvtoTkNeslRrKjZ/dHwDlQLT6dC2sNxzZTccYWESoJZ73wv/Wz/SIY4CR9r 0Kw5mNlgtaUO9GGnJ46R2S2wB0FvNLL2YQFaALmhXV6LsCuC/A8KV4cyS7k91D3/ 6QgETQ/Y13O50SbqcvQzzoSVbzm1p0M= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:30 2025 by rpki-client