$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50d324a3-cf94-3298-b7b0-15f6b12b002b.roa File: 50d324a3-cf94-3298-b7b0-15f6b12b002b.roa (raw, json) Hash identifier: 3s5FPFEo+xSwf/9qzBPlCQqwVmEbaOQSpUM4ofM0odQ= Subject key identifier: 5C:13:C9:C0:C4:FE:09:FE:8A:1F:28:E9:2A:9D:34:C9:6D:C0:4C:EB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F204C28C33B6AE5CAF4000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50d324a3-cf94-3298-b7b0-15f6b12b002b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:04:c2:8c:33:b6:ae:5c:af:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=49eb1819-ceb8-4479-934d-2b923576de0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:db:e8:15:33:fb:bd:74:af:89:1e:6d:e9: bb:7d:b5:ff:1b:8f:c6:6c:22:c7:f6:f8:10:00:aa: ae:97:e1:10:14:91:d3:9c:8c:bf:b6:b0:9f:3d:f5: 8b:37:ed:8b:fd:a7:3c:c0:06:4e:98:a5:74:12:37: dc:ca:9f:ce:85:1e:5d:c3:14:c2:0e:ee:4e:22:58: 24:f3:86:2a:51:41:2d:98:e0:e9:93:5b:88:34:e8: bc:48:84:0a:fb:bf:9a:20:e1:a8:36:a5:59:7e:8f: fc:96:bb:50:e5:95:ad:2b:c2:74:da:d5:d5:85:e2: 20:7a:f1:02:14:43:eb:23:66:2d:20:c6:93:d4:1c: 41:ed:64:04:8e:15:55:e6:77:1c:ed:d8:b3:62:0d: e4:00:65:0a:97:01:3f:eb:07:80:22:b2:8f:ad:d2: 52:d6:c8:b9:4d:c7:6e:96:75:26:0c:74:47:b7:f1: 58:00:32:87:d3:e9:a4:09:10:fb:aa:7a:df:2d:2b: 79:ea:e5:00:48:cc:f8:98:dc:9f:f2:57:18:fa:65: 2e:f0:8a:4e:36:13:f7:4d:ea:3d:de:72:ef:de:04: 63:49:40:83:5f:93:28:77:00:c0:50:49:08:0a:e4: 9c:50:5d:40:a0:f5:77:a3:29:79:83:3c:b4:f4:8e: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:13:C9:C0:C4:FE:09:FE:8A:1F:28:E9:2A:9D:34:C9:6D:C0:4C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50d324a3-cf94-3298-b7b0-15f6b12b002b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1f:b7:dc:13:93:cd:ca:06:4b:f9:5e:60:66:4e:d5:aa:77: c3:70:ce:d2:86:90:f2:fb:1c:17:b0:93:9a:4f:01:a5:85:07: 6b:bf:04:d1:e3:0a:9a:da:62:78:ba:70:c7:55:16:89:8f:ab: 53:36:fc:0e:b7:29:e7:c3:73:52:bc:cf:a3:41:ce:82:ac:da: 35:1f:f6:08:a4:cf:cc:44:9a:d8:95:9a:28:cd:10:e3:c1:7c: a9:d1:76:00:4d:c6:91:ca:88:70:df:2a:c9:a0:e9:cc:f2:d2: 02:35:27:a8:93:44:57:2b:a6:3d:30:00:9e:03:d8:74:d2:3f: 33:94:d1:8a:7c:2d:e4:f5:b1:ac:b3:33:b3:ac:58:c3:f0:79: 30:19:8b:a1:ff:0a:be:59:da:7f:c4:7e:e1:27:e4:c7:c3:3e: 87:84:7d:a9:be:f5:65:12:eb:cc:37:74:70:b8:08:57:59:a6: 54:5e:c3:d6:af:b3:e6:73:22:e3:a1:42:95:3b:13:c4:ab:97: ef:f6:23:4d:40:70:66:23:05:68:1d:4c:ee:f7:19:a6:bc:cb: 02:05:52:f1:14:df:01:d0:2e:f0:a1:44:42:af:18:15:cf:f1: e2:25:1c:5e:f9:d7:3c:16:5e:14:10:d5:c4:64:ab:88:f7:54: 40:44:49:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gTCjDO2rlyvQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDllYjE4MTktY2ViOC00NDc5LTkzNGQtMmI5MjM1NzZkZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNHb6BUz+710r4kebem7fbX/G4/GbCLH9vgQ AKqul+EQFJHTnIy/trCfPfWLN+2L/ac8wAZOmKV0Ejfcyp/OhR5dwxTCDu5OIlgk 84YqUUEtmODpk1uINOi8SIQK+7+aIOGoNqVZfo/8lrtQ5ZWtK8J02tXVheIgevEC FEPrI2YtIMaT1BxB7WQEjhVV5ncc7dizYg3kAGUKlwE/6weAIrKPrdJS1si5Tcdu lnUmDHRHt/FYADKH0+mkCRD7qnrfLSt56uUASMz4mNyf8lcY+mUu8IpONhP3Teo9 3nLv3gRjSUCDX5ModwDAUEkICuScUF1AoPV3oyl5gzy09I6wHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwTycDE/gn+ih8o6SqdNMltwEzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTBkMzI0YTMtY2Y5NC0z Mjk4LWI3YjAtMTVmNmIxMmIwMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAft9wTk83KBkv5XmBmTtWqd8NwztKGkPL7HBewk5pPAaWFB2u/BNHj CpraYni6cMdVFomPq1M2/A63KefDc1K8z6NBzoKs2jUf9gikz8xEmtiVmijNEOPB fKnRdgBNxpHKiHDfKsmg6czy0gI1J6iTRFcrpj0wAJ4D2HTSPzOU0Yp8LeT1sayz M7OsWMPweTAZi6H/Cr5Z2n/EfuEn5MfDPoeEfam+9WUS68w3dHC4CFdZplRew9av s+ZzIuOhQpU7E8Srl+/2I01AcGYjBWgdTO73Gaa8ywIFUvEU3wHQLvChREKvGBXP 8eIlHF751zwWXhQQ1cRkq4j3VEBEScU= -----END CERTIFICATE-----Generated at Thu Oct 16 02:03:41 2025 by rpki-client