$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471bbc1a-78cc-3142-a892-46654e3a587c.roa File: 471bbc1a-78cc-3142-a892-46654e3a587c.roa (raw, json) Hash identifier: c3y1/gyzYGClfEOqfBvVM0K3shemtitrgbJXAmrDC5g= Subject key identifier: 80:6C:9C:68:DE:09:F3:DB:65:38:B9:81:D1:C0:E5:5F:C7:6D:49:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29DA7DF58C42ED4F9F200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471bbc1a-78cc-3142-a892-46654e3a587c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.111.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9d:a7:df:58:c4:2e:d4:f9:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d6cd1c3f-0aae-4fbd-86be-a3ffc45e3f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:29:46:4d:a2:22:c8:98:e4:44:3b:a5:5b: c8:2d:11:0d:95:07:5d:75:92:5d:d6:0b:98:f9:f3: da:eb:20:48:73:10:c3:84:15:b8:00:9c:41:1c:60: 4e:1d:63:91:b2:01:6c:f6:9c:9b:15:3e:45:1e:b3: de:03:3d:e5:51:68:a7:f0:0d:10:2c:7e:c7:6d:41: ca:00:8c:03:a2:34:74:a2:dc:fe:23:cc:04:5d:df: dd:31:78:16:80:9a:ee:7d:43:5c:90:dc:07:fd:16: 5f:73:bf:c0:e4:fd:f7:7a:ec:78:3c:17:c9:b0:91: d7:2d:12:cc:43:35:aa:25:ae:09:c3:6e:f5:25:f2: 4b:81:fa:42:a1:e7:52:a9:ab:7f:bc:5f:b7:69:b7: fd:62:64:31:4f:da:60:c4:bf:0b:a9:16:7c:ff:5e: 8d:25:fe:0c:92:16:de:1b:18:d7:cf:41:d1:c3:99: 56:9e:8e:6f:c5:f3:12:38:75:19:57:ad:cf:b4:a6: 7a:41:86:4a:79:33:66:1c:3a:66:38:35:1c:ca:c3: 36:e2:c7:69:40:49:86:42:48:68:9c:e3:2c:78:df: 1d:01:ef:f8:9e:3a:c1:5e:c4:8c:5a:96:de:aa:8c: f3:2e:d5:59:d7:d5:c8:0b:4f:50:b3:45:91:1d:15: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6C:9C:68:DE:09:F3:DB:65:38:B9:81:D1:C0:E5:5F:C7:6D:49:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471bbc1a-78cc-3142-a892-46654e3a587c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0a:17:3e:51:63:74:ce:42:aa:e2:c4:96:78:1a:fd:bd:24: e1:5a:b0:95:c1:77:83:41:dd:fd:90:12:b2:af:de:ac:76:0a: 65:bf:9d:3c:40:80:31:2f:71:5a:55:7e:03:78:b7:53:16:d0: 12:8d:0c:b8:25:5f:2c:8e:c2:a2:a2:c3:1f:97:ce:74:73:ec: cb:b0:05:6a:19:bb:96:60:77:50:eb:b0:b1:d2:70:5a:1c:3a: 6a:8b:ab:4e:3b:35:de:f4:09:41:1c:c9:a2:8a:a3:12:e6:2d: 35:6e:59:ec:f1:2c:ba:6c:85:0b:2a:08:b5:05:4a:be:79:32: b1:40:88:18:0b:24:a8:f8:e4:07:e7:9a:a5:05:45:fe:a7:e5: df:39:92:a8:9a:37:78:e0:d2:da:9b:b7:c5:12:1f:24:49:cb: 7c:7f:1d:c9:1b:df:5a:8c:0c:c0:eb:df:60:1c:35:62:17:44: 1c:6a:33:d9:25:3f:e8:a8:a6:a3:df:64:04:f6:38:17:bb:4d: 1c:61:c3:b1:93:15:9f:73:15:22:cd:02:72:78:8f:71:b0:c8: f7:30:09:7a:f1:70:ef:94:90:fa:49:4e:dc:62:61:1e:1a:72: 80:a7:53:2e:ef:6c:b0:d7:0d:cf:db:df:50:2f:55:50:8c:d9: 40:23:40:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28p2n31jELtT58gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDZjZDFjM2YtMGFhZS00ZmJkLTg2YmUtYTNmZmM0NWUzZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBEpRk2iIsiY5EQ7pVvILRENlQdddZJd1guY +fPa6yBIcxDDhBW4AJxBHGBOHWORsgFs9pybFT5FHrPeAz3lUWin8A0QLH7HbUHK AIwDojR0otz+I8wEXd/dMXgWgJrufUNckNwH/RZfc7/A5P33eux4PBfJsJHXLRLM QzWqJa4Jw271JfJLgfpCoedSqat/vF+3abf9YmQxT9pgxL8LqRZ8/16NJf4Mkhbe GxjXz0HRw5lWno5vxfMSOHUZV63PtKZ6QYZKeTNmHDpmODUcysM24sdpQEmGQkho nOMseN8dAe/4njrBXsSMWpbeqozzLtVZ19XIC09Qs0WRHRVuBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBsnGjeCfPbZTi5gdHA5V/HbUmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDcxYmJjMWEtNzhjYy0z MTQyLWE4OTItNDY2NTRlM2E1ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEKFz5RY3TOQqrixJZ4Gv29JOFasJXBd4NB3f2QErKv3qx2CmW/nTxA gDEvcVpVfgN4t1MW0BKNDLglXyyOwqKiwx+XznRz7MuwBWoZu5Zgd1DrsLHScFoc OmqLq047Nd70CUEcyaKKoxLmLTVuWezxLLpshQsqCLUFSr55MrFAiBgLJKj45Afn mqUFRf6n5d85kqiaN3jg0tqbt8USHyRJy3x/Hckb31qMDMDr32AcNWIXRBxqM9kl P+iopqPfZAT2OBe7TRxhw7GTFZ9zFSLNAnJ4j3GwyPcwCXrxcO+UkPpJTtxiYR4a coCnUy7vbLDXDc/b31AvVVCM2UAjQHk= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:49 2025 by rpki-client