$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c9564ac-2d81-306e-8179-854a78fe2c10.roa File: 5c9564ac-2d81-306e-8179-854a78fe2c10.roa (raw, json) Hash identifier: ovnUS3TXmPEaDzJoJIYuqPDHguXkW5oIkk2NteASvlQ= Subject key identifier: 72:A7:26:ED:8B:3A:9E:B1:AF:1B:60:FE:42:9E:C3:C8:DF:8A:3A:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2950DD800C75EB4444800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c9564ac-2d81-306e-8179-854a78fe2c10.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.101.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:95:0d:d8:00:c7:5e:b4:44:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=05523eef-9a15-4a8f-ac04-6c83fa294989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:ac:db:9d:95:f7:1b:d4:f9:f4:2c:79:0c: bd:36:b6:db:60:8e:74:a2:cf:d5:4e:a0:b9:bd:c6: d3:a1:02:81:e5:a3:95:91:4c:44:bf:69:88:8f:4a: 53:df:3c:ef:b2:09:86:77:de:fc:43:49:4a:92:ea: 6b:f9:b9:1c:d9:60:1a:f5:23:90:1c:87:e6:36:7d: d0:2c:64:fd:e5:20:a1:64:c6:17:5a:33:bd:d7:c9: 76:66:b3:11:4a:3e:3b:84:21:70:67:3b:d3:f8:f6: 24:f6:67:b5:45:ce:ac:46:2b:53:29:c8:e0:70:34: 1c:92:4e:59:ee:ae:6d:5b:16:e2:04:3b:ac:c1:64: 1c:be:fe:50:a6:7b:80:2a:fc:c7:f7:b1:74:47:d1: f6:18:a7:51:66:19:2e:c9:dd:95:15:c5:90:5b:4f: 91:51:e9:14:42:57:5b:cd:0b:73:87:a1:47:37:79: eb:e8:9b:b5:d4:34:25:2f:b6:3f:7c:9b:44:ff:f0: b7:30:83:9c:e8:d7:6c:20:3f:6e:ed:b2:f5:6c:9e: 96:56:21:6c:4d:d8:26:97:c2:ff:fa:36:4f:d9:7a: 6e:be:27:a4:d7:68:d9:3a:0a:dc:14:11:00:27:0c: fb:19:65:e3:07:e8:3d:7c:24:20:83:43:51:2b:1f: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:26:ED:8B:3A:9E:B1:AF:1B:60:FE:42:9E:C3:C8:DF:8A:3A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c9564ac-2d81-306e-8179-854a78fe2c10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f1:96:a3:06:75:87:b8:42:98:cf:35:5b:6c:39:e7:52:9b: bb:07:a1:7d:04:f7:bc:53:c0:d1:f5:a4:87:63:e4:12:0c:3c: f6:11:5a:0e:6e:1b:0f:78:d9:84:f4:0d:7b:f1:82:b7:cc:69: 2a:a0:80:0b:df:57:dc:ff:81:88:94:f2:a5:8d:5b:83:11:15: ec:0f:93:fd:21:85:58:34:c3:85:fb:91:22:46:fd:d4:da:3a: da:04:d4:db:e8:74:60:a2:7e:51:69:6f:ac:b3:52:bc:97:e9: 04:06:06:e1:83:98:4d:06:de:dc:88:f4:78:6e:a2:79:67:e7: d2:be:eb:2b:39:b6:0e:92:ba:54:b0:0b:1d:01:ba:2c:2d:5e: fa:16:76:aa:f5:d9:02:43:f5:51:4c:e1:b4:24:82:23:f7:a4: df:43:e3:c7:28:79:36:4f:42:40:02:1d:54:f6:45:a5:82:39: 05:97:91:7a:b6:bf:54:bf:ce:ca:1b:86:fe:f2:1c:c3:1f:a1: ce:b2:e0:b1:9d:3e:c2:f0:de:5b:eb:63:51:98:2b:16:32:fc: 68:57:f2:cd:34:7d:2a:2e:e2:71:0c:ca:c7:67:78:0a:7b:c5: ea:01:a7:c3:85:19:a1:c6:d3:e4:6e:0c:f0:3d:e5:f2:5f:c7: 79:dd:66:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pUN2ADHXrRESAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDU1MjNlZWYtOWExNS00YThmLWFjMDQtNmM4M2ZhMjk0OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDis252V9xvU+fQseQy9NrbbYI50os/VTqC5 vcbToQKB5aOVkUxEv2mIj0pT3zzvsgmGd978Q0lKkupr+bkc2WAa9SOQHIfmNn3Q LGT95SChZMYXWjO918l2ZrMRSj47hCFwZzvT+PYk9me1Rc6sRitTKcjgcDQckk5Z 7q5tWxbiBDuswWQcvv5QpnuAKvzH97F0R9H2GKdRZhkuyd2VFcWQW0+RUekUQldb zQtzh6FHN3nr6Ju11DQlL7Y/fJtE//C3MIOc6NdsID9u7bL1bJ6WViFsTdgml8L/ +jZP2Xpuviek12jZOgrcFBEAJwz7GWXjB+g9fCQgg0NRKx+q0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKnJu2LOp6xrxtg/kKew8jfijqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM5NTY0YWMtMmQ4MS0z MDZlLTgxNzktODU0YTc4ZmUyYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3xlqMGdYe4QpjPNVtsOedSm7sHoX0E97xTwNH1pIdj5BIMPPYRWg5u Gw942YT0DXvxgrfMaSqggAvfV9z/gYiU8qWNW4MRFewPk/0hhVg0w4X7kSJG/dTa OtoE1NvodGCiflFpb6yzUryX6QQGBuGDmE0G3tyI9Hhuonln59K+6ys5tg6SulSw Cx0BuiwtXvoWdqr12QJD9VFM4bQkgiP3pN9D48coeTZPQkACHVT2RaWCOQWXkXq2 v1S/zsobhv7yHMMfoc6y4LGdPsLw3lvrY1GYKxYy/GhX8s00fSou4nEMysdneAp7 xeoBp8OFGaHG0+RuDPA95fJfx3ndZjo= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:52 2025 by rpki-client