$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6187edf5-9ed4-3d9f-b533-32c702b523c9.roa File: 6187edf5-9ed4-3d9f-b533-32c702b523c9.roa (raw, json) Hash identifier: hvHuZltp/dOJ+3xnMdIFjrczZ3ttowJvMJLf7ugLc2Y= Subject key identifier: 49:05:B3:AC:76:67:5D:E1:B4:B4:68:F3:EB:E1:0E:6D:CC:88:C8:EB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F207DDD161B0C9A7B8B380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6187edf5-9ed4-3d9f-b533-32c702b523c9.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:07:dd:d1:61:b0:c9:a7:b8:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e045b1cf-2363-41f6-8837-5a2195848fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:30:f1:ea:f2:22:bc:8e:b6:9f:74:d8:07: f2:32:84:26:c4:df:91:89:17:5a:c4:b9:1b:36:5b: 22:f6:ba:14:bc:8c:c7:bc:3e:84:a7:3a:0e:77:c5: 2a:f2:42:6d:c0:6d:69:4d:e3:8c:f5:8f:0b:53:38: 04:68:2b:50:d8:c3:6f:c2:ef:54:a0:6c:fa:7e:f2: 10:12:c0:f1:7c:86:92:fd:f8:07:44:51:63:49:12: 05:6e:00:7e:b6:c1:9b:2b:a2:fc:0f:b7:71:b0:d8: a7:5f:09:f2:b9:df:19:89:4d:8d:ad:1a:96:8d:55: 44:61:a8:e8:be:39:36:ee:d8:e6:2e:32:0f:16:10: 53:d5:dc:78:2a:ef:6a:12:8a:54:e3:e1:1e:af:a6: 37:8f:5a:61:10:70:e7:7d:da:ff:08:d4:84:76:74: 50:60:c6:e7:b1:96:4e:eb:18:8c:be:4b:df:2c:f9: 80:30:77:3e:14:59:a6:6e:5e:3e:5e:a8:96:66:f9: c9:43:e9:b0:bb:5a:e2:db:31:ea:b2:80:80:aa:bb: 82:ee:8d:6b:6b:ea:5c:9f:64:81:18:b9:cc:48:da: b9:94:27:61:98:20:5d:27:ae:1e:bb:57:63:dc:ae: f7:31:3d:8d:3b:10:bc:17:08:8d:91:9c:39:1e:8f: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:05:B3:AC:76:67:5D:E1:B4:B4:68:F3:EB:E1:0E:6D:CC:88:C8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6187edf5-9ed4-3d9f-b533-32c702b523c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:90:29:25:c9:34:91:62:47:e0:88:be:d0:fa:d1:05:25:2f: bc:04:ea:cc:b8:1b:de:8a:7f:e9:b5:84:7f:b4:a4:d9:18:2d: f4:49:db:3a:38:11:63:64:fb:6e:5e:e7:7b:d6:7c:bb:c2:c9: a4:ec:67:3e:23:e2:02:b7:2d:ea:57:f7:27:8f:95:f1:07:10: 78:65:d9:40:c7:ef:62:66:17:c4:00:e2:4c:83:e2:e8:a0:5d: 5f:11:be:6e:e3:25:25:4f:14:d9:31:68:40:b8:48:05:98:4d: 01:0e:6e:57:0e:81:70:9f:3f:8c:62:dc:8f:92:6c:d0:0d:9c: 11:cb:f2:e6:e2:4f:c4:6c:2d:d7:4d:78:f0:ff:7c:72:b8:0a: 82:46:0d:14:19:8e:f1:95:79:41:ec:04:f9:ad:97:c8:0f:a3: d4:d8:5b:3f:52:8d:08:e7:ea:e8:77:d2:44:5a:7c:b9:41:2a: d7:43:eb:d0:03:ee:6d:7e:9a:7a:3b:09:d8:df:5b:8e:13:81: f9:89:ed:2f:77:90:0e:8b:43:c4:6f:aa:78:ee:4c:0f:bc:f3: ce:bd:70:7e:1b:ea:af:d9:eb:5c:b2:f6:c4:4e:47:1e:36:4e: f0:52:89:30:3c:f7:36:49:f9:30:6e:d7:a0:be:ab:f5:e0:cc: f7:2b:c5:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gfd0WGwyae4s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTA0NWIxY2YtMjM2My00MWY2LTg4MzctNWEyMTk1ODQ4ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvsw8eryIryOtp902AfyMoQmxN+RiRdaxLkb Nlsi9roUvIzHvD6EpzoOd8Uq8kJtwG1pTeOM9Y8LUzgEaCtQ2MNvwu9UoGz6fvIQ EsDxfIaS/fgHRFFjSRIFbgB+tsGbK6L8D7dxsNinXwnyud8ZiU2NrRqWjVVEYajo vjk27tjmLjIPFhBT1dx4Ku9qEopU4+Eer6Y3j1phEHDnfdr/CNSEdnRQYMbnsZZO 6xiMvkvfLPmAMHc+FFmmbl4+XqiWZvnJQ+mwu1ri2zHqsoCAqruC7o1ra+pcn2SB GLnMSNq5lCdhmCBdJ64eu1dj3K73MT2NOxC8FwiNkZw5Ho9vIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkFs6x2Z13htLRo8+vhDm3MiMjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjE4N2VkZjUtOWVkNC0z ZDlmLWI1MzMtMzJjNzAyYjUyM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWQKSXJNJFiR+CIvtD60QUlL7wE6sy4G96Kf+m1hH+0pNkYLfRJ2zo4 EWNk+25e53vWfLvCyaTsZz4j4gK3LepX9yePlfEHEHhl2UDH72JmF8QA4kyD4uig XV8Rvm7jJSVPFNkxaEC4SAWYTQEOblcOgXCfP4xi3I+SbNANnBHL8ubiT8RsLddN ePD/fHK4CoJGDRQZjvGVeUHsBPmtl8gPo9TYWz9SjQjn6uh30kRafLlBKtdD69AD 7m1+mno7CdjfW44TgfmJ7S93kA6LQ8RvqnjuTA+88869cH4b6q/Z61yy9sRORx42 TvBSiTA89zZJ+TBu16C+q/XgzPcrxQA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:24 2025 by rpki-client