$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5ed75247-6f27-3bf5-87d8-a615c38a28be.roa File: 5ed75247-6f27-3bf5-87d8-a615c38a28be.roa (raw, json) Hash identifier: JwtL7ZATmKtAaQRfwVz8e50VUdERrczL7oY021iROcQ= Subject key identifier: 39:35:45:A5:44:E8:1A:1D:3A:CE:63:CE:52:A1:1F:BB:90:06:3D:18 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B98CAF303EAA8FF99A328E780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5ed75247-6f27-3bf5-87d8-a615c38a28be.roa Signing time: Tue 21 Oct 2025 15:59:29 +0000 ROA not before: Tue 21 Oct 2025 15:59:29 +0000 ROA not after: Mon 19 Jan 2026 16:59:29 +0000 asID: 22773 IP address blocks: 68.9.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:ca:f3:03:ea:a8:ff:99:a3:28:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 21 15:59:29 2025 GMT Not After : Jan 19 16:59:29 2026 GMT Subject: CN=bbd4b0cd-16a1-42e8-89f5-889d79cde445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f9:fa:da:c4:07:37:b9:a8:dd:b3:19:cc:9f: e8:94:8a:6c:66:4d:14:31:e8:dc:5d:3f:77:d6:6d: 4c:b6:2a:4b:bb:6d:56:64:7e:47:ad:80:cc:b1:10: 27:2e:44:c1:ef:93:37:0f:71:91:e0:c2:5e:91:7f: fb:f8:fe:d3:e2:03:5c:4b:57:94:ea:ff:0e:d8:e4: ba:6e:90:74:aa:49:10:b0:49:9f:00:85:e6:8a:a7: 80:2d:d2:a7:67:19:7e:2d:e8:b7:1e:59:3e:b2:90: a9:9d:20:a0:b7:81:f9:b8:e8:b8:5d:5e:d5:e0:e0: 4c:72:73:43:b6:58:b3:1b:e3:41:d7:c5:42:9b:33: 49:ab:e3:87:11:3e:4a:af:e3:b9:11:9c:6c:13:aa: d5:4d:3a:13:81:49:95:46:4a:a8:6a:e0:60:f1:e5: d6:2f:87:9e:bc:c2:13:96:fc:35:6d:20:d2:b3:ca: 3a:36:9c:d4:53:52:7c:dc:a3:ae:10:a3:c6:bb:b6: 74:93:6b:18:79:43:93:98:45:bd:7d:af:f9:74:a9: 97:08:d2:e9:36:d6:39:4e:dd:09:79:01:da:ff:89: 0b:03:27:a8:7e:92:2d:26:95:f6:a8:6d:07:c3:9f: 39:25:24:f4:31:a7:e5:d3:28:05:a1:64:55:67:0b: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:45:A5:44:E8:1A:1D:3A:CE:63:CE:52:A1:1F:BB:90:06:3D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5ed75247-6f27-3bf5-87d8-a615c38a28be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:77:77:1a:f2:c0:4d:d4:11:d7:43:cb:50:e0:f7:3c:b2:22: 69:a7:06:6d:18:94:f3:95:6a:16:96:8d:8d:a5:0f:ed:73:34: fa:36:50:ed:f8:6a:08:fc:89:0f:9f:e9:78:ba:c8:c3:04:5b: 4a:2e:27:bf:89:82:ab:28:93:21:69:5a:d8:d6:de:99:37:f4: a3:39:4d:36:ee:5d:8a:70:1d:e5:34:8e:8c:ad:a9:75:a0:d7: b4:59:52:4b:23:5b:c4:15:0f:1f:ff:06:ee:a2:05:7c:cf:d3: 61:a4:0c:20:11:fb:b2:f7:ef:d7:ff:f8:19:29:b5:d1:61:eb: 8c:82:f8:14:dd:3e:e1:29:6c:d1:83:48:18:1a:bf:40:ed:48: 36:ac:c1:a1:5a:90:f0:61:19:89:ab:a6:46:c7:17:2e:7b:1e: dc:eb:45:7f:1f:c3:e6:f1:60:50:6c:a9:10:c1:29:77:67:72: eb:12:9f:0a:2b:e9:4d:00:79:99:a7:06:9f:64:63:09:f2:d6: e5:02:4a:d4:41:c7:58:32:12:98:c3:3e:a3:5a:77:3f:64:1e: 48:3c:61:c6:77:1c:a9:11:c9:a9:47:46:5e:4b:81:9a:ec:34: f2:bc:49:09:bb:27:f8:16:e0:19:a8:a9:9a:28:e3:5c:8c:77: a2:d9:bd:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYyvMD6qj/maMo54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyMTE1NTkyOVoXDTI2MDExOTE2NTkyOVowLzEtMCsGA1UEAxMk YmJkNGIwY2QtMTZhMS00MmU4LTg5ZjUtODg5ZDc5Y2RlNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPn62sQHN7mo3bMZzJ/olIpsZk0UMejcXT93 1m1MtipLu21WZH5HrYDMsRAnLkTB75M3D3GR4MJekX/7+P7T4gNcS1eU6v8O2OS6 bpB0qkkQsEmfAIXmiqeALdKnZxl+Lei3Hlk+spCpnSCgt4H5uOi4XV7V4OBMcnND tlizG+NB18VCmzNJq+OHET5Kr+O5EZxsE6rVTToTgUmVRkqoauBg8eXWL4eevMIT lvw1bSDSs8o6NpzUU1J83KOuEKPGu7Z0k2sYeUOTmEW9fa/5dKmXCNLpNtY5Tt0J eQHa/4kLAyeofpItJpX2qG0Hw585JST0Mafl0ygFoWRVZwubzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk1RaVE6BodOs5jzlKhH7uQBj0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWVkNzUyNDctNmYyNy0z YmY1LTg3ZDgtYTYxNWMzOGEyOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR3dxrywE3UEddDy1Dg9zyyImmnBm0YlPOVahaWjY2lD+1zNPo2UO34 agj8iQ+f6Xi6yMMEW0ouJ7+JgqsokyFpWtjW3pk39KM5TTbuXYpwHeU0joytqXWg 17RZUksjW8QVDx//Bu6iBXzP02GkDCAR+7L379f/+BkptdFh64yC+BTdPuEpbNGD SBgav0DtSDaswaFakPBhGYmrpkbHFy57HtzrRX8fw+bxYFBsqRDBKXdncusSnwor 6U0AeZmnBp9kYwny1uUCStRBx1gyEpjDPqNadz9kHkg8YcZ3HKkRyalHRl5LgZrs NPK8SQm7J/gW4BmoqZoo41yMd6LZvSw= -----END CERTIFICATE-----Generated at Mon Nov 3 17:16:06 2025 by rpki-client