$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4756cdf9-dbdb-316f-9804-46d9feac8da1.roa File: 4756cdf9-dbdb-316f-9804-46d9feac8da1.roa (raw, json) Hash identifier: Prt7reEx8IaQ+xCTSAT5VqNYL3OlN6hu0lBdGHU7V1E= Subject key identifier: 90:33:33:BD:BE:89:5A:C3:E8:D1:3D:E7:3D:42:B6:46:06:2C:1E:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2132C0C869FF40812A3AE Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4756cdf9-dbdb-316f-9804-46d9feac8da1.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:13:2c:0c:86:9f:f4:08:12:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=90638510-567b-402a-8c00-73e3ccbf1d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:fe:f1:c2:aa:c9:53:c0:86:44:a6:3b:fa: f8:70:49:d7:35:a3:b8:26:98:ee:6b:66:8b:78:b8: 9a:8c:44:79:56:01:e2:4d:68:0a:8b:67:15:9f:0f: 5a:77:96:f5:61:ed:81:54:b1:58:13:ee:22:80:45: e9:6e:49:5e:cc:15:ee:2c:4e:32:e4:47:e0:7d:4a: 4f:5b:7a:f3:04:57:58:90:c3:a8:a0:d4:80:b1:1b: ee:0e:f0:c9:99:e9:20:3d:c6:be:e6:50:d0:93:dc: ee:a1:50:f9:76:c5:a9:53:51:fc:ef:fb:f5:f8:e0: d1:49:c5:87:f8:06:8c:f9:87:5e:9f:6e:23:a2:1b: fb:35:4d:68:84:ac:6c:a4:ee:16:ba:8f:96:72:89: 8e:b9:6d:04:df:77:7f:1a:4d:11:5c:4d:36:d1:2a: eb:8a:45:82:ac:d1:65:3c:47:a7:6d:0b:f7:e5:8c: d7:e2:c3:1f:7a:e6:b5:8e:ee:0a:4a:ac:5b:53:1f: cf:54:7d:d9:f7:2f:6f:19:3d:60:db:6b:de:88:1c: e4:ae:bc:df:71:d5:c8:18:54:7f:d2:62:73:53:3b: 79:e1:91:9e:a1:0c:b7:ff:1a:57:f9:df:e4:85:c2: 58:8b:2f:2c:be:0c:f4:65:ba:c3:a2:7b:54:2d:db: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:33:33:BD:BE:89:5A:C3:E8:D1:3D:E7:3D:42:B6:46:06:2C:1E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4756cdf9-dbdb-316f-9804-46d9feac8da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:87:e8:7b:41:d4:40:40:6d:81:07:e4:45:e5:ca:ca:52:4f: e5:b2:27:6c:51:7c:31:62:4a:1c:33:1f:4d:cd:c6:c1:cd:25: 83:ce:ab:29:42:3c:e9:a0:39:e6:f1:ec:dc:7f:bc:cc:02:83: 45:29:5c:5a:57:4f:c8:1a:45:2f:91:c7:6a:18:21:89:59:f6: a0:8d:ee:b0:2b:4c:34:62:d2:1f:dd:14:c7:d5:17:cf:45:79: c5:b4:a5:43:03:3a:76:01:ac:f1:f6:43:62:92:9c:48:cd:15: 5c:4f:a6:44:df:2b:5a:f9:e1:dc:4b:1b:02:b2:95:53:68:70: 76:0d:34:78:d6:41:8d:f2:e3:d3:53:67:94:14:80:ff:68:be: d7:0d:e0:4b:cb:b0:10:a8:7d:4c:48:aa:fd:7c:3f:a7:5f:70: 93:7c:63:50:55:64:0b:34:ff:5f:48:59:ec:24:ce:a3:74:12: db:04:4d:6d:f4:17:c2:9f:e9:97:03:60:d5:43:78:3a:ea:89: 8c:42:be:8a:82:c1:ce:0f:6a:fb:f1:e9:d1:05:0c:3d:ff:e6: 3f:13:84:2a:b0:00:cb:60:aa:6e:b9:8e:55:f7:0c:f6:a2:61: 24:0a:33:c0:5b:3b:e3:35:32:c9:a9:41:50:71:26:ff:da:01: c0:ed:50:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hMsDIaf9AgSo64wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTA2Mzg1MTAtNTY3Yi00MDJhLThjMDAtNzNlM2NjYmYxZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBb+8cKqyVPAhkSmO/r4cEnXNaO4Jpjua2aL eLiajER5VgHiTWgKi2cVnw9ad5b1Ye2BVLFYE+4igEXpbklezBXuLE4y5EfgfUpP W3rzBFdYkMOooNSAsRvuDvDJmekgPca+5lDQk9zuoVD5dsWpU1H87/v1+ODRScWH +AaM+Yden24johv7NU1ohKxspO4Wuo+WcomOuW0E33d/Gk0RXE020SrrikWCrNFl PEenbQv35YzX4sMfeua1ju4KSqxbUx/PVH3Z9y9vGT1g22veiBzkrrzfcdXIGFR/ 0mJzUzt54ZGeoQy3/xpX+d/khcJYiy8svgz0ZbrDontULdt4fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAzM72+iVrD6NE95z1CtkYGLB6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc1NmNkZjktZGJkYi0z MTZmLTk4MDQtNDZkOWZlYWM4ZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+H6HtB1EBAbYEH5EXlyspST+WyJ2xRfDFiShwzH03NxsHNJYPOqylC POmgOebx7Nx/vMwCg0UpXFpXT8gaRS+Rx2oYIYlZ9qCN7rArTDRi0h/dFMfVF89F ecW0pUMDOnYBrPH2Q2KSnEjNFVxPpkTfK1r54dxLGwKylVNocHYNNHjWQY3y49NT Z5QUgP9ovtcN4EvLsBCofUxIqv18P6dfcJN8Y1BVZAs0/19IWewkzqN0EtsETW30 F8Kf6ZcDYNVDeDrqiYxCvoqCwc4Pavvx6dEFDD3/5j8ThCqwAMtgqm65jlX3DPai YSQKM8BbO+M1MsmpQVBxJv/aAcDtUIM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:00 2025 by rpki-client