$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a7537b7-66ca-30d2-ad35-f3d05c1ebe5c.roa File: 5a7537b7-66ca-30d2-ad35-f3d05c1ebe5c.roa (raw, json) Hash identifier: waO5LqGxIJJETYXVKVHIEkmeeLLanTerei7VJncu+og= Subject key identifier: F2:87:FC:B7:64:84:F5:19:F8:85:B7:8C:EC:11:5E:49:A4:BA:1C:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27ABEC8AC2CC8BEBF0380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a7537b7-66ca-30d2-ad35-f3d05c1ebe5c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7a:be:c8:ac:2c:c8:be:bf:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c2d79fc8-2e50-470e-b04f-aa7f79767b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:08:34:ab:83:00:5b:a2:56:4d:1e:01:bc:b5: 14:3d:ee:5d:10:de:40:96:df:27:78:42:79:dd:64: 35:95:64:6c:fc:3d:da:f2:fa:bb:76:c9:f0:3f:8a: cb:1b:8c:3d:8d:37:c1:72:a7:4d:d7:45:7f:64:ec: ef:9d:9a:22:a7:36:f9:cc:ae:d7:7f:dc:5a:5f:07: 1a:af:ac:51:a5:6c:a7:41:94:58:d6:95:30:20:e1: e6:3d:94:99:5e:50:09:59:46:83:2c:20:9a:d0:8b: 96:f6:1b:b7:b0:ed:69:5d:00:42:ac:ad:6c:9e:6f: 5c:3d:82:44:1d:fb:b5:ed:b4:26:f6:af:d8:7f:b3: be:75:61:ac:9b:8f:b6:46:04:06:0d:1f:28:cb:e6: b1:bb:17:f5:98:6a:31:e7:60:21:92:ec:a9:b9:72: 91:0a:26:fa:80:46:fa:a5:3a:5a:2b:c7:1c:2b:64: 04:f9:fc:dd:93:15:2e:d4:1b:18:cb:b6:da:f1:6e: 44:57:05:6f:81:77:ff:a8:57:40:d7:a5:c5:a3:89: 96:06:b4:1b:da:6b:10:a4:4d:20:ef:65:c4:fd:fe: e9:98:ec:d0:8f:df:1e:a0:65:87:80:42:14:0a:13: fd:bd:0e:bd:0e:4a:9d:c4:2a:33:fb:f6:02:fd:a4: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:87:FC:B7:64:84:F5:19:F8:85:B7:8C:EC:11:5E:49:A4:BA:1C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a7537b7-66ca-30d2-ad35-f3d05c1ebe5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:aa:01:2c:02:23:f6:dd:16:bd:cb:8e:d7:f0:18:c7:90:69: d8:46:19:c9:d2:23:e2:9e:85:2b:e8:19:10:04:1c:21:79:da: d0:91:d2:e5:05:83:ab:25:32:67:08:34:35:7b:6e:bc:8d:31: ac:c4:a2:83:c7:f0:60:60:06:ed:1e:ab:c0:c4:7a:3c:19:ba: b0:85:6a:09:d1:39:e5:e3:bf:a2:3b:eb:40:8d:9c:4d:1c:9f: 7f:8e:31:e1:53:f7:26:65:c4:76:a1:1d:ab:55:be:ce:d5:15: 6f:7b:51:54:c1:73:10:c6:db:98:8b:9e:cb:50:51:7b:7d:d2: cb:7f:43:61:df:69:29:c8:ef:0e:90:f0:5e:b0:c1:bf:53:0f: c4:60:52:0f:99:57:87:9e:67:a9:fe:d3:c9:1a:b6:c8:07:27: 8c:27:61:3e:cb:0e:03:bb:7a:96:f0:58:5d:61:07:32:45:6b: 8b:c9:81:b7:26:62:67:12:08:e8:bd:5f:1f:f3:96:07:8f:98: 6a:f3:22:c0:50:86:fd:4f:d4:34:66:db:30:97:e3:ba:99:61: 12:11:70:e9:68:63:a0:36:a1:4e:b6:70:05:84:1b:bf:92:5b: 16:41:a9:88:35:de:69:90:1b:b1:a6:2a:5f:ab:28:da:3e:36: 58:96:01:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nq+yKwsyL6/A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzJkNzlmYzgtMmU1MC00NzBlLWIwNGYtYWE3Zjc5NzY3YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ag0q4MAW6JWTR4BvLUUPe5dEN5Alt8neEJ5 3WQ1lWRs/D3a8vq7dsnwP4rLG4w9jTfBcqdN10V/ZOzvnZoipzb5zK7Xf9xaXwca r6xRpWynQZRY1pUwIOHmPZSZXlAJWUaDLCCa0IuW9hu3sO1pXQBCrK1snm9cPYJE Hfu17bQm9q/Yf7O+dWGsm4+2RgQGDR8oy+axuxf1mGox52AhkuypuXKRCib6gEb6 pTpaK8ccK2QE+fzdkxUu1BsYy7ba8W5EVwVvgXf/qFdA16XFo4mWBrQb2msQpE0g 72XE/f7pmOzQj98eoGWHgEIUChP9vQ69DkqdxCoz+/YC/aQ6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKH/LdkhPUZ+IW3jOwRXkmkuhxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWE3NTM3YjctNjZjYS0z MGQyLWFkMzUtZjNkMDVjMWViZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAh+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+qASwCI/bdFr3LjtfwGMeQadhGGcnSI+KehSvoGRAEHCF52tCR0uUF g6slMmcINDV7bryNMazEooPH8GBgBu0eq8DEejwZurCFagnROeXjv6I760CNnE0c n3+OMeFT9yZlxHahHatVvs7VFW97UVTBcxDG25iLnstQUXt90st/Q2HfaSnI7w6Q 8F6wwb9TD8RgUg+ZV4eeZ6n+08katsgHJ4wnYT7LDgO7epbwWF1hBzJFa4vJgbcm YmcSCOi9Xx/zlgePmGrzIsBQhv1P1DRm2zCX47qZYRIRcOloY6A2oU62cAWEG7+S WxZBqYg13mmQG7GmKl+rKNo+NliWAVM= -----END CERTIFICATE-----Generated at Thu Oct 16 04:57:25 2025 by rpki-client