$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f530e98-9ae3-3a3a-b6f4-8c2670582d09.roa File: 6f530e98-9ae3-3a3a-b6f4-8c2670582d09.roa (raw, json) Hash identifier: H9Zp/UyJ1seB2eT/vgCiZp0AiW7DY3Cg5lMnfu3RDb4= Subject key identifier: 55:0E:A9:93:67:35:45:44:17:21:8C:CD:44:C4:8F:68:B3:D6:0E:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F210AC6B985C98137D8780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f530e98-9ae3-3a3a-b6f4-8c2670582d09.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.6.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:10:ac:6b:98:5c:98:13:7d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=68e5db37-4842-4099-906e-39c3e6bfa0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:23:8e:f1:17:c5:67:1a:eb:29:7f:c0:4e: 69:fa:55:c6:ea:df:95:cd:1b:81:90:71:56:4a:bc: 21:85:77:37:e1:b7:d1:0d:4e:30:0a:39:16:89:1d: 75:3b:17:00:cf:4f:d4:c1:27:90:63:b1:96:9a:23: 7f:c6:8b:d1:26:9b:a3:51:59:96:ad:a2:73:a8:ae: cf:36:e3:ad:b3:ec:f0:7f:de:65:48:47:26:aa:ba: f7:f6:b0:0f:a1:07:52:30:1d:b4:e1:71:44:37:fd: e1:08:bf:15:a7:fd:1d:2a:bf:30:b8:48:cd:81:19: 50:7e:ca:e9:10:5c:50:5c:d0:89:8b:5a:f9:48:d1: 6d:c1:fc:83:3d:ec:37:a9:b5:4d:1d:24:44:03:a0: 74:5d:74:4b:56:24:9f:6e:78:ec:fe:c8:05:35:c7: b4:0f:16:f4:19:04:37:bf:cb:5c:63:1c:bb:2a:70: 46:79:26:bf:aa:7a:a2:1f:ae:d3:e8:97:45:97:43: 9a:4b:14:22:8c:7c:f2:d0:9f:9d:29:9a:50:45:b1: fd:7e:ed:03:51:2e:2b:68:b6:e0:e7:76:67:da:0e: 78:d4:95:7d:45:10:e0:ac:02:ee:7d:58:7f:06:60: 02:2d:c0:27:01:e3:a4:0f:85:83:e2:0e:2a:07:9c: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0E:A9:93:67:35:45:44:17:21:8C:CD:44:C4:8F:68:B3:D6:0E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f530e98-9ae3-3a3a-b6f4-8c2670582d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:03:03:2f:a4:4a:98:66:66:94:c4:b4:8a:56:f1:0c:21:39: ee:98:83:31:7c:6e:62:1e:3a:e5:5a:4f:8e:dd:d3:0d:33:6b: 8e:37:b9:fc:bb:53:e6:a6:05:4b:d4:a5:6d:22:c4:2c:1f:00: 2b:20:5f:32:15:2d:75:13:6e:f2:e7:e4:48:2d:a4:6f:50:1f: c8:05:59:a2:0a:86:4f:9f:14:df:4e:aa:e0:08:8a:f1:57:0b: fb:c3:6c:a4:c5:de:59:f1:6d:5b:16:bd:0c:e4:07:4c:5d:6e: d4:f1:a2:63:e3:39:af:fc:bd:27:cc:71:03:ac:e7:5d:0c:66: ff:d1:5b:ef:a7:b2:c5:77:a3:df:34:35:9f:2d:43:da:a2:c6: e5:5e:f9:95:e4:c3:14:fd:b0:11:50:f6:34:3f:41:44:dc:26: c5:c6:f1:2c:51:51:de:3f:bf:ab:da:fb:ee:ce:1f:c7:95:17: ca:a2:8f:96:61:9c:0e:d0:2e:b8:73:a3:fe:b8:27:cd:d3:35: c8:de:97:97:3b:e8:8d:5a:96:b7:bd:81:f5:0c:87:b3:8a:22: 6f:3b:5b:6d:b0:94:a5:49:98:60:f6:4a:23:43:fe:79:c5:23: bf:3d:3c:c7:89:81:18:73:41:e9:9b:92:57:fa:d2:bd:66:66: 96:94:a6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hCsa5hcmBN9h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjhlNWRiMzctNDg0Mi00MDk5LTkwNmUtMzljM2U2YmZhMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn10jjvEXxWca6yl/wE5p+lXG6t+VzRuBkHFW SrwhhXc34bfRDU4wCjkWiR11OxcAz0/UwSeQY7GWmiN/xovRJpujUVmWraJzqK7P NuOts+zwf95lSEcmqrr39rAPoQdSMB204XFEN/3hCL8Vp/0dKr8wuEjNgRlQfsrp EFxQXNCJi1r5SNFtwfyDPew3qbVNHSREA6B0XXRLViSfbnjs/sgFNce0Dxb0GQQ3 v8tcYxy7KnBGeSa/qnqiH67T6JdFl0OaSxQijHzy0J+dKZpQRbH9fu0DUS4raLbg 53Zn2g541JV9RRDgrALufVh/BmACLcAnAeOkD4WD4g4qB5zPYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUOqZNnNUVEFyGMzUTEj2iz1g56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmY1MzBlOTgtOWFlMy0z YTNhLWI2ZjQtOGMyNjcwNTgyZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcDAy+kSphmZpTEtIpW8QwhOe6YgzF8bmIeOuVaT47d0w0za443ufy7 U+amBUvUpW0ixCwfACsgXzIVLXUTbvLn5EgtpG9QH8gFWaIKhk+fFN9OquAIivFX C/vDbKTF3lnxbVsWvQzkB0xdbtTxomPjOa/8vSfMcQOs510MZv/RW++nssV3o980 NZ8tQ9qixuVe+ZXkwxT9sBFQ9jQ/QUTcJsXG8SxRUd4/v6va++7OH8eVF8qij5Zh nA7QLrhzo/64J83TNcjel5c76I1alre9gfUMh7OKIm87W22wlKVJmGD2SiND/nnF I789PMeJgRhzQembklf60r1mZpaUpks= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:24 2025 by rpki-client