$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/628a2953-580a-3597-bf99-518f14830194.roa File: 628a2953-580a-3597-bf99-518f14830194.roa (raw, json) Hash identifier: w7wefvUt0ag4V5fOKDciYx5Tx+JcPqwtR7vwCuk3Wtc= Subject key identifier: B1:D7:F6:60:DF:B4:69:C8:F5:A6:48:90:48:60:04:3F:F5:1D:0A:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F225E4D12448F208DE6380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/628a2953-580a-3597-bf99-518f14830194.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:25:e4:d1:24:48:f2:08:de:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ce22b68e-97d2-4558-8ac9-e615ced1543a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:04:4f:0c:48:e4:c3:86:0b:40:8f:fb:83: bc:72:7e:e7:0d:a0:8d:f6:da:3c:db:92:12:80:72: 6d:a3:2d:c0:39:a3:52:51:43:53:0d:d7:3a:a4:e1: 61:0c:e1:ef:91:4d:99:a2:d3:83:9e:e3:a5:05:fb: 8b:33:45:6a:ad:cb:4d:67:64:63:08:e4:1d:ad:90: ec:14:13:3e:b9:48:28:d7:42:c1:ff:90:fa:bf:da: ac:ed:1a:17:02:2d:c2:d8:f3:35:52:fb:2f:2a:76: f0:69:d5:88:2b:85:bb:7c:40:2b:5c:d7:f1:28:da: e3:2b:6c:7d:46:31:44:4c:36:82:55:2f:87:c4:90: a1:bf:a9:8b:c5:9b:07:9b:74:82:58:6d:f4:77:7a: 44:aa:bb:8f:63:91:6d:47:bc:b3:c8:a0:f5:30:28: 81:d5:25:e3:19:05:25:0c:c6:40:55:b2:6d:92:43: 91:01:d3:d7:05:a5:a2:06:5d:d9:e5:98:21:00:34: 33:db:31:0c:b7:49:54:7b:3c:c3:65:f7:48:f4:68: fc:8a:3c:6d:3a:42:8c:32:6d:54:d6:4f:1b:6c:a7: 60:3b:41:c6:d1:7d:01:1e:d5:70:44:8c:e1:24:88: 95:33:b4:1a:32:ab:fc:7f:33:43:e8:ca:5a:49:7c: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:F6:60:DF:B4:69:C8:F5:A6:48:90:48:60:04:3F:F5:1D:0A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/628a2953-580a-3597-bf99-518f14830194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2c:19:52:83:fb:f2:df:44:17:ee:d7:70:6a:0c:44:6e:88: f2:f4:02:78:4d:77:5e:92:3e:8d:71:db:a6:84:45:88:e9:1d: c9:b2:d4:e9:8a:06:ca:5a:c4:a8:23:99:9b:5f:65:2e:07:cc: 5e:ff:6e:08:01:10:b7:0f:97:b2:1f:20:4c:70:de:bf:f7:9f: 7d:23:b5:8b:b3:05:57:16:f9:2d:bb:fb:91:3b:9f:31:cc:43: 8f:0a:11:74:98:4b:1a:de:f4:e5:e9:f8:3b:23:d8:cb:a4:e1: 9c:11:98:1f:f0:57:41:c9:92:9e:2f:fb:2e:3f:44:4b:be:90: 56:0e:77:ee:1e:55:8e:16:fa:80:32:00:86:93:62:d7:5e:ae: de:ed:dd:f0:a2:45:d5:07:b8:71:b8:79:06:f8:9b:b4:fd:ec: 2b:5e:d8:03:ce:a7:d5:88:3a:9e:d8:fd:e8:8a:55:68:88:2d: 08:3b:56:ab:6b:ec:49:6a:60:81:34:f0:10:08:bf:74:0f:79: d1:0e:0c:8b:f9:37:dd:d9:16:f7:74:9d:5d:57:23:a8:7d:69: 9c:c6:eb:c5:21:06:ec:25:4a:c1:5c:63:65:ef:2b:1e:4e:bd: 46:3f:32:c0:79:8b:3a:41:60:14:30:71:d2:c3:7e:2b:1e:67: f3:09:e3:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iXk0SRI8gjeY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2UyMmI2OGUtOTdkMi00NTU4LThhYzktZTYxNWNlZDE1NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkysETwxI5MOGC0CP+4O8cn7nDaCN9to825IS gHJtoy3AOaNSUUNTDdc6pOFhDOHvkU2ZotODnuOlBfuLM0VqrctNZ2RjCOQdrZDs FBM+uUgo10LB/5D6v9qs7RoXAi3C2PM1UvsvKnbwadWIK4W7fEArXNfxKNrjK2x9 RjFETDaCVS+HxJChv6mLxZsHm3SCWG30d3pEqruPY5FtR7yzyKD1MCiB1SXjGQUl DMZAVbJtkkORAdPXBaWiBl3Z5ZghADQz2zEMt0lUezzDZfdI9Gj8ijxtOkKMMm1U 1k8bbKdgO0HG0X0BHtVwRIzhJIiVM7QaMqv8fzND6MpaSXxk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHX9mDftGnI9aZIkEhgBD/1HQrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjI4YTI5NTMtNTgwYS0z NTk3LWJmOTktNTE4ZjE0ODMwMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYsGVKD+/LfRBfu13BqDERuiPL0AnhNd16SPo1x26aERYjpHcmy1OmK BspaxKgjmZtfZS4HzF7/bggBELcPl7IfIExw3r/3n30jtYuzBVcW+S27+5E7nzHM Q48KEXSYSxre9OXp+Dsj2Muk4ZwRmB/wV0HJkp4v+y4/REu+kFYOd+4eVY4W+oAy AIaTYtdert7t3fCiRdUHuHG4eQb4m7T97Cte2APOp9WIOp7Y/eiKVWiILQg7Vqtr 7ElqYIE08BAIv3QPedEODIv5N93ZFvd0nV1XI6h9aZzG68UhBuwlSsFcY2XvKx5O vUY/MsB5izpBYBQwcdLDfiseZ/MJ44A= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:55 2025 by rpki-client