$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa File: 5e39a210-5acc-3748-95db-29bf2d518642.roa (raw, json) Hash identifier: ikUNACds1PTgfZPV3InzEYwKT0P9Z5Wz/IMlKQq30x8= Subject key identifier: E7:56:76:8A:6C:68:90:B0:FC:62:37:A7:0E:01:60:FE:DB:EE:EF:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B5571E39D7F1E73D34830D0B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.227.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e3:9d:7f:1e:73:d3:48:30:d0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=db71fbef-141e-4938-a0b2-621e70fdc779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:56:71:a6:34:b2:d9:f4:48:3a:a6:77:d3: a9:d4:0b:a8:b6:9d:00:f3:7d:c3:ff:56:43:13:d5: 4c:f8:03:22:cd:73:25:58:6a:f3:8c:99:be:43:c9: 7b:81:9c:c3:38:48:34:1e:3f:f2:c4:ce:26:74:96: 28:4c:e1:fa:85:a2:5f:f4:90:2d:d4:5c:2f:84:e8: 22:21:76:f3:70:ed:79:89:8f:e8:f6:b2:bd:9b:a4: 2f:54:58:3a:2a:d2:56:43:ca:f2:33:b2:6e:0f:b3: 83:94:6d:fe:4c:ef:96:84:95:ff:9a:d0:04:3c:2b: bb:07:21:8c:c0:f8:cd:e7:e2:d7:79:2a:c5:e5:aa: f0:61:84:41:38:fb:0e:e9:a3:cc:0f:16:e4:b8:df: 28:23:8c:95:8f:c3:a7:84:f9:c4:c2:95:e7:ba:7f: 91:de:97:fb:5b:3c:d6:26:1c:c0:99:00:8f:d0:b4: f5:d7:80:9a:50:09:1a:51:3e:cf:f8:22:d4:0a:5d: f9:96:d8:9c:85:8a:d3:b8:ac:4b:4c:14:e8:83:85: 88:d1:52:ef:2f:98:6e:ec:de:b0:9d:eb:95:72:b9: 63:73:cf:b5:f9:d5:b1:d9:90:e2:a9:d5:16:7d:60: 36:29:52:1a:f7:27:69:dc:10:b9:82:a6:3f:81:b7: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:56:76:8A:6C:68:90:B0:FC:62:37:A7:0E:01:60:FE:DB:EE:EF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c5:e2:ab:b0:44:1d:bc:79:62:23:e1:b6:1f:16:de:95:e1: 8e:23:f4:6b:1b:93:ff:a5:9f:eb:97:f8:8f:69:fb:b3:b4:9b: 8e:9f:27:a5:68:44:5d:7d:9c:c6:cf:9c:eb:15:cf:c7:fb:a4: 82:c8:a6:39:65:5b:1b:0c:c5:d5:48:e1:6d:6a:9f:1b:b8:bd: eb:b4:63:bc:9c:17:1d:ec:a5:eb:c9:18:ab:90:8e:26:44:33: 98:5a:bf:12:47:4c:02:7a:41:b9:34:e7:ee:9b:73:d0:9d:5e: b7:a6:47:ce:c7:7c:bc:9b:01:37:76:5f:24:1c:e6:9d:b6:b3: c6:d7:5b:3c:c1:0b:9f:ed:66:f2:64:19:ec:13:8e:c2:04:8c: 70:f9:c2:eb:47:b9:93:6d:ed:70:95:ac:36:73:f2:cc:d1:a2: 3d:51:87:ba:06:c5:48:3f:69:de:10:7e:59:ad:2e:10:ff:3a: 1a:45:95:2b:b8:5a:3b:d6:3c:82:29:2f:f2:1e:0a:f4:57:2f: de:39:17:fa:59:47:25:4a:6c:ef:a9:2c:b6:02:d9:be:c1:2d: fc:34:3c:88:92:7e:f9:4a:15:b9:2a:d3:7d:7f:b0:e4:02:5c: 46:5d:96:88:8b:9d:00:7c:76:f8:cf:29:03:33:0a:0d:b2:46: d4:e0:31:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceOdfx5z00gw0LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGI3MWZiZWYtMTQxZS00OTM4LWEwYjItNjIxZTcwZmRjNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI5WcaY0stn0SDqmd9Op1Auotp0A833D/1ZD E9VM+AMizXMlWGrzjJm+Q8l7gZzDOEg0Hj/yxM4mdJYoTOH6haJf9JAt1FwvhOgi IXbzcO15iY/o9rK9m6QvVFg6KtJWQ8ryM7JuD7ODlG3+TO+WhJX/mtAEPCu7ByGM wPjN5+LXeSrF5arwYYRBOPsO6aPMDxbkuN8oI4yVj8OnhPnEwpXnun+R3pf7WzzW JhzAmQCP0LT114CaUAkaUT7P+CLUCl35ltichYrTuKxLTBTog4WI0VLvL5hu7N6w neuVcrljc8+1+dWx2ZDiqdUWfWA2KVIa9ydp3BC5gqY/gbeGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdWdopsaJCw/GI3pw4BYP7b7u+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUzOWEyMTAtNWFjYy0z NzQ4LTk1ZGItMjliZjJkNTE4NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHF4quwRB28eWIj4bYfFt6V4Y4j9Gsbk/+ln+uX+I9p+7O0m46fJ6Vo RF19nMbPnOsVz8f7pILIpjllWxsMxdVI4W1qnxu4veu0Y7ycFx3spevJGKuQjiZE M5havxJHTAJ6Qbk05+6bc9CdXremR87HfLybATd2XyQc5p22s8bXWzzBC5/tZvJk GewTjsIEjHD5wutHuZNt7XCVrDZz8szRoj1Rh7oGxUg/ad4QflmtLhD/OhpFlSu4 WjvWPIIpL/IeCvRXL945F/pZRyVKbO+pLLYC2b7BLfw0PIiSfvlKFbkq031/sOQC XEZdloiLnQB8dvjPKQMzCg2yRtTgMRY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:16 2025 by rpki-client