$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5453c856-5144-3bba-9cb4-735c8f95353b.roa File: 5453c856-5144-3bba-9cb4-735c8f95353b.roa (raw, json) Hash identifier: MGCN5T8nU+VfxccEXe7304aKlzwOTE5mzXXJvEqpuMQ= Subject key identifier: D5:2A:92:C8:E1:0C:70:33:87:59:2C:E7:5A:49:A0:72:DA:7B:06:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F287CCD2517647A1EA33E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5453c856-5144-3bba-9cb4-735c8f95353b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:87:cc:d2:51:76:47:a1:ea:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=08a5e4b7-1248-4bb7-a8a4-52e6b5d4fe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:1f:d1:22:0a:11:3f:5a:71:d2:ac:7f:a0: 27:52:94:f8:31:f9:96:98:02:10:48:70:f2:6b:6c: 77:37:16:1f:b7:e8:00:c1:e4:f1:bd:01:cc:b6:d2: 68:72:de:90:f7:cd:9c:fa:a7:74:c6:27:e7:23:91: a7:bb:9a:34:c7:e2:88:cc:d2:c2:0f:28:fb:5d:63: 90:02:f1:be:07:3a:d2:ab:8f:3f:e2:37:6a:f4:97: 87:e2:93:2a:2b:f4:46:98:bf:a6:9c:9a:d6:1f:7a: 0f:96:4c:99:93:a1:aa:9b:3a:81:cf:22:60:e3:a5: ca:47:17:81:f9:b4:f4:54:3d:ea:c3:29:4e:b5:e7: ee:c9:f1:1d:c4:55:1c:c5:e3:32:f7:52:0a:c9:4a: d3:72:2b:6d:0a:32:ee:13:7c:8d:32:61:7a:7e:48: d1:81:1c:a7:40:1a:e1:d1:57:89:86:34:c2:10:8f: 82:09:30:74:86:91:08:50:a1:76:29:9b:68:81:d2: f6:9f:18:ac:16:a1:9a:83:2b:81:b8:2f:3e:35:4d: 45:be:9e:4d:f7:0c:ec:19:44:08:8f:a1:0e:8d:26: 5b:3b:1d:04:fd:d1:3a:df:9a:3e:57:97:17:b4:7c: 7a:ce:5e:15:23:62:eb:81:74:d7:1f:37:60:d0:b7: cc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:92:C8:E1:0C:70:33:87:59:2C:E7:5A:49:A0:72:DA:7B:06:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5453c856-5144-3bba-9cb4-735c8f95353b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:58:7d:f8:c7:e6:02:7d:e2:2d:82:2a:f1:18:e6:6f:48:f8: 1b:59:f2:c0:b1:00:c6:29:ab:9f:85:a8:2a:4a:ab:3c:39:06: db:10:38:1c:a2:8b:e0:b6:8f:53:7b:37:0a:33:da:66:9f:c3: ad:cb:c4:61:d0:2e:10:65:d2:4f:10:30:e3:ff:0f:f0:77:f1: 1e:28:17:ce:62:2d:8d:c8:d5:a5:c1:cc:71:34:5f:9e:b8:66: 7a:b4:3c:14:b0:1d:b7:54:a2:78:a2:4c:6d:ab:2c:db:35:a2: be:98:27:ff:7f:45:1a:7c:4e:d9:4d:95:6c:80:e2:1a:90:0f: b5:7e:17:02:59:62:c2:46:3d:c0:bc:88:ce:20:83:9b:f7:d3: 9d:5f:b6:2e:9d:9b:8e:70:af:01:51:29:26:18:ea:d0:19:b9: db:cd:13:42:c8:fa:40:b3:3c:b4:77:bb:83:ac:57:de:60:d4: b4:db:f0:5f:40:df:6e:68:a3:06:0c:39:ab:a9:17:3d:fe:76: f4:da:06:bc:52:d3:be:80:5d:07:98:5d:f8:e5:61:28:33:79: 6f:39:94:26:fd:02:db:fb:94:cb:2d:62:e0:94:08:c0:f3:af: 68:61:12:49:d0:ac:b4:4b:5e:e0:74:f2:01:73:11:e1:73:65: f4:b1:0b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ofM0lF2R6HqM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDhhNWU0YjctMTI0OC00YmI3LWE4YTQtNTJlNmI1ZDRmZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaIf0SIKET9acdKsf6AnUpT4MfmWmAIQSHDy a2x3NxYft+gAweTxvQHMttJoct6Q982c+qd0xifnI5Gnu5o0x+KIzNLCDyj7XWOQ AvG+BzrSq48/4jdq9JeH4pMqK/RGmL+mnJrWH3oPlkyZk6GqmzqBzyJg46XKRxeB +bT0VD3qwylOtefuyfEdxFUcxeMy91IKyUrTcittCjLuE3yNMmF6fkjRgRynQBrh 0VeJhjTCEI+CCTB0hpEIUKF2KZtogdL2nxisFqGagyuBuC8+NU1Fvp5N9wzsGUQI j6EOjSZbOx0E/dE635o+V5cXtHx6zl4VI2LrgXTXHzdg0LfMEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUqksjhDHAzh1ks51pJoHLaewbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTQ1M2M4NTYtNTE0NC0z YmJhLTljYjQtNzM1YzhmOTUzNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAgsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFYffjH5gJ94i2CKvEY5m9I+BtZ8sCxAMYpq5+FqCpKqzw5BtsQOByi i+C2j1N7Nwoz2mafw63LxGHQLhBl0k8QMOP/D/B38R4oF85iLY3I1aXBzHE0X564 Znq0PBSwHbdUoniiTG2rLNs1or6YJ/9/RRp8TtlNlWyA4hqQD7V+FwJZYsJGPcC8 iM4gg5v3051fti6dm45wrwFRKSYY6tAZudvNE0LI+kCzPLR3u4OsV95g1LTb8F9A 325oowYMOaupFz3+dvTaBrxS076AXQeYXfjlYSgzeW85lCb9Atv7lMstYuCUCMDz r2hhEknQrLRLXuB08gFzEeFzZfSxC98= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:27 2025 by rpki-client