$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/558bf66b-dc18-39f1-b0e6-f1219a07095f.roa File: 558bf66b-dc18-39f1-b0e6-f1219a07095f.roa (raw, json) Hash identifier: UgT0ljdZM3taGVXRqVdN8n9/BcBBtAod3E4rR2PZF6A= Subject key identifier: EA:76:C0:1F:2A:45:28:45:80:AE:0D:2F:4D:BF:43:07:94:22:00:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26B83706B8263814CF680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/558bf66b-dc18-39f1-b0e6-f1219a07095f.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6b:83:70:6b:82:63:81:4c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9e8b0894-b78d-46ce-b2fd-20ceb79c5d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:06:26:4c:c9:32:69:8d:bb:50:17:8d:12: 80:2b:07:34:48:b1:23:be:a8:2e:cf:62:ad:e6:cc: b2:b5:84:c5:cb:23:6f:4e:b9:d8:80:fa:ff:39:32: d4:b7:98:db:25:16:eb:17:5d:05:3a:f4:70:a1:39: 85:ad:1f:bd:63:87:c3:5d:0c:18:7d:17:5e:a4:e2: e0:d8:ea:0a:b6:0a:12:97:b7:9d:21:35:44:43:22: 81:24:fb:a7:cb:fb:03:23:ec:5d:8d:3e:f5:c4:bc: 8d:35:df:e7:44:ee:02:84:6c:d7:6e:3a:0b:35:95: 37:7b:c0:7e:0c:2d:9e:ec:e0:41:34:83:b3:e0:12: 95:61:48:09:2a:44:89:cd:30:bf:06:6f:66:00:25: c9:65:63:bf:75:6e:bd:c8:79:6d:58:c1:1f:30:19: 29:1f:e4:8e:fb:ec:e5:7b:54:81:b1:49:40:1d:ad: 53:86:6f:d6:35:65:cb:c9:cf:d5:33:ce:5e:42:6e: 77:8e:25:18:1d:6f:94:0d:37:09:e7:91:b1:87:53: 7d:3a:ae:ef:f7:d6:9d:89:1b:cc:be:78:bd:23:80: 33:9d:8f:c6:1b:83:5a:be:0c:52:ed:54:56:a1:4a: 11:82:83:23:c5:8a:c3:ce:ac:17:39:b9:14:79:c5: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:76:C0:1F:2A:45:28:45:80:AE:0D:2F:4D:BF:43:07:94:22:00:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/558bf66b-dc18-39f1-b0e6-f1219a07095f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:41:76:eb:f7:60:90:d8:1b:4d:15:a8:ab:0f:07:40:12:83: 6d:84:fc:ff:cd:24:ce:1e:c7:6b:50:49:21:b0:c6:b8:27:78: c2:7e:45:df:9f:6b:5d:92:18:0d:9b:70:42:23:10:c8:a1:a9: b4:98:10:af:55:71:52:5b:4f:93:da:10:f4:9a:9a:fc:87:46: a6:42:00:3d:43:ff:cd:2e:3b:c4:21:62:fb:a9:4e:2c:90:1c: ca:1a:67:b0:ae:9c:03:5f:bc:16:1d:c1:bf:b9:14:85:74:6d: bc:98:e3:7a:f9:67:96:2b:47:dd:0b:66:ff:01:4c:4a:80:07: ec:dc:46:64:6a:5d:f0:7b:09:60:6b:15:d4:5a:3b:da:59:6a: c8:56:d1:dc:f9:68:f4:81:b4:ff:47:25:87:21:19:cb:54:ca: 4b:46:67:03:f9:45:8e:02:f1:ee:ba:14:94:3f:81:71:7b:c1: 72:10:39:53:d7:92:cd:17:eb:4b:bb:0e:73:d5:62:5c:cd:84: ed:d6:19:1b:5a:2b:1d:88:a6:1c:f7:93:f1:ac:2c:3b:cc:33: 1f:3e:2f:a5:35:64:78:8b:74:65:95:6c:97:e7:ac:26:cb:d7: 59:a1:92:28:9b:ea:38:9f:3c:58:68:61:5a:bb:63:a5:02:0e: 9e:62:6f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28muDcGuCY4FM9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWU4YjA4OTQtYjc4ZC00NmNlLWIyZmQtMjBjZWI3OWM1ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr0GJkzJMmmNu1AXjRKAKwc0SLEjvqguz2Kt 5syytYTFyyNvTrnYgPr/OTLUt5jbJRbrF10FOvRwoTmFrR+9Y4fDXQwYfRdepOLg 2OoKtgoSl7edITVEQyKBJPuny/sDI+xdjT71xLyNNd/nRO4ChGzXbjoLNZU3e8B+ DC2e7OBBNIOz4BKVYUgJKkSJzTC/Bm9mACXJZWO/dW69yHltWMEfMBkpH+SO++zl e1SBsUlAHa1Thm/WNWXLyc/VM85eQm53jiUYHW+UDTcJ55Gxh1N9Oq7v99adiRvM vni9I4AznY/GG4NavgxS7VRWoUoRgoMjxYrDzqwXObkUecVBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp2wB8qRShFgK4NL02/QweUIgDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTU4YmY2NmItZGMxOC0z OWYxLWIwZTYtZjEyMTlhMDcwOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAiSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhBduv3YJDYG00VqKsPB0ASg22E/P/NJM4ex2tQSSGwxrgneMJ+Rd+f a12SGA2bcEIjEMihqbSYEK9VcVJbT5PaEPSamvyHRqZCAD1D/80uO8QhYvupTiyQ HMoaZ7CunANfvBYdwb+5FIV0bbyY43r5Z5YrR90LZv8BTEqAB+zcRmRqXfB7CWBr FdRaO9pZashW0dz5aPSBtP9HJYchGctUyktGZwP5RY4C8e66FJQ/gXF7wXIQOVPX ks0X60u7DnPVYlzNhO3WGRtaKx2Iphz3k/GsLDvMMx8+L6U1ZHiLdGWVbJfnrCbL 11mhkiib6jifPFhoYVq7Y6UCDp5ib6Q= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:06 2025 by rpki-client