$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42a09306-7bc1-3e80-9cfc-6a2faa288094.roa File: 42a09306-7bc1-3e80-9cfc-6a2faa288094.roa (raw, json) Hash identifier: yzohGNJ0UAxrhuWBx7oqe0RRUcEO0sXV6phTjtc4WnA= Subject key identifier: 56:8F:39:AB:B7:58:47:2A:D7:CC:18:0E:E8:E5:97:74:2E:96:97:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26329F4A15832A7F9FE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42a09306-7bc1-3e80-9cfc-6a2faa288094.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:63:29:f4:a1:58:32:a7:f9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=50dbc4c6-a921-4f70-b286-9ec95f10b36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:6a:b5:6b:15:ac:4c:76:62:c8:3c:69:ec: b9:54:a7:aa:53:7d:2a:33:d1:73:96:a1:70:64:76: b3:be:30:ce:4b:8c:2a:05:92:51:33:95:9f:32:db: b9:a6:bd:86:58:d2:8e:a4:29:19:f7:a1:4d:a8:7f: 21:f9:44:e2:bd:16:2a:d7:8c:e5:39:79:0b:dd:a5: 97:90:33:1a:3a:0b:cf:b0:16:71:78:b3:54:ac:35: da:3c:b4:d9:40:82:cb:45:bb:bf:bf:1b:24:9f:80: 1a:7a:83:8d:00:f6:67:01:e6:af:4b:5f:8c:ad:da: c2:0e:2d:2e:42:82:61:d6:80:c5:59:74:78:4b:ae: 2c:c5:63:9a:bc:23:56:d4:56:2a:07:1c:5b:63:bc: 8b:ba:07:d6:35:d1:c2:d3:c9:d5:90:61:58:a4:0e: 6d:57:3d:c9:b8:19:91:9f:5a:6b:32:98:e1:cd:9a: b5:2e:44:79:f2:28:ba:2d:68:16:b3:cf:1a:16:6b: 13:e3:53:20:ec:91:d3:04:29:a4:37:a6:9f:87:93: b2:eb:7a:8b:00:41:69:38:a0:f8:32:e4:21:77:77: e0:bf:0c:f6:87:b6:98:6c:b0:15:14:5c:89:d2:84: 67:85:15:de:a2:64:57:71:a8:2e:fa:df:db:54:59: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:39:AB:B7:58:47:2A:D7:CC:18:0E:E8:E5:97:74:2E:96:97:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42a09306-7bc1-3e80-9cfc-6a2faa288094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:00:83:08:81:ea:6a:af:fc:89:da:c0:91:28:c0:fa:b8:3f: bc:58:56:e3:bc:01:cf:fe:3e:ba:eb:05:02:69:5d:5a:86:5a: fa:51:3d:b0:f5:9e:9f:b5:36:d7:56:27:32:8f:7d:24:00:ae: 3f:dd:5f:0c:dc:7b:52:84:10:33:ea:99:e2:30:cb:52:47:18: f0:54:c8:17:e1:56:11:a7:50:dc:b1:38:62:0a:a2:77:e6:17: 6a:d2:2a:2e:ff:e3:83:03:ee:35:55:ae:4b:2d:d1:4d:5d:28: 54:35:be:09:98:6f:bc:d8:aa:7a:8e:5c:1e:f0:e1:99:55:6e: 4f:ab:cd:96:a4:2f:9a:e2:3a:e4:e8:ba:21:31:46:b9:95:07: 91:6d:9f:a9:9c:34:ed:ac:fb:69:98:8f:94:70:7b:68:69:9b: 25:a0:cc:37:af:7a:a6:fa:d8:c9:e5:77:7d:93:6c:e2:58:60: 24:17:03:4c:61:9e:57:9c:39:2d:e7:0e:7e:03:87:f0:0e:ec: b6:86:6c:86:8d:13:43:9f:7f:ae:0a:4a:4c:4a:b3:fc:4c:a4: e2:74:45:a7:8b:80:63:08:0a:1c:37:9c:14:e1:bf:7f:28:f2: 02:81:37:dd:b1:f8:09:71:18:2f:c7:39:0a:86:52:b2:bc:ba: 9c:59:ec:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mMp9KFYMqf5/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTBkYmM0YzYtYTkyMS00ZjcwLWIyODYtOWVjOTVmMTBiMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoNqtWsVrEx2Ysg8aey5VKeqU30qM9FzlqFw ZHazvjDOS4wqBZJRM5WfMtu5pr2GWNKOpCkZ96FNqH8h+UTivRYq14zlOXkL3aWX kDMaOgvPsBZxeLNUrDXaPLTZQILLRbu/vxskn4AaeoONAPZnAeavS1+MrdrCDi0u QoJh1oDFWXR4S64sxWOavCNW1FYqBxxbY7yLugfWNdHC08nVkGFYpA5tVz3JuBmR n1prMpjhzZq1LkR58ii6LWgWs88aFmsT41Mg7JHTBCmkN6afh5Oy63qLAEFpOKD4 MuQhd3fgvwz2h7aYbLAVFFyJ0oRnhRXeomRXcagu+t/bVFk9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaPOau3WEcq18wYDujll3QulpekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJhMDkzMDYtN2JjMS0z ZTgwLTljZmMtNmEyZmFhMjg4MDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4AgwiB6mqv/InawJEowPq4P7xYVuO8Ac/+PrrrBQJpXVqGWvpRPbD1 np+1NtdWJzKPfSQArj/dXwzce1KEEDPqmeIwy1JHGPBUyBfhVhGnUNyxOGIKonfm F2rSKi7/44MD7jVVrkst0U1dKFQ1vgmYb7zYqnqOXB7w4ZlVbk+rzZakL5riOuTo uiExRrmVB5Ftn6mcNO2s+2mYj5Rwe2hpmyWgzDeveqb62Mnld32TbOJYYCQXA0xh nlecOS3nDn4Dh/AO7LaGbIaNE0Off64KSkxKs/xMpOJ0RaeLgGMIChw3nBThv38o 8gKBN92x+AlxGC/HOQqGUrK8upxZ7FQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:48:02 2025 by rpki-client