$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71a73e26-faac-3816-9997-75f2c9eb2056.roa File: 71a73e26-faac-3816-9997-75f2c9eb2056.roa (raw, json) Hash identifier: qYgv++QykN+ivEjw9iS3RqXkO2EEck9mzcVDGA9CnyA= Subject key identifier: 62:AA:ED:72:88:40:01:9D:FE:83:59:75:75:DF:3C:81:5B:BF:0C:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F21B2C28AC809A85E92A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71a73e26-faac-3816-9997-75f2c9eb2056.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.107.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:1b:2c:28:ac:80:9a:85:e9:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ee84807a-6a13-4bd1-a726-cb4de14607a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:27:d5:4e:4a:49:13:bf:e4:7f:ca:42:5d: 0b:05:1a:65:ae:7e:9a:e1:82:7b:25:ea:c9:5c:e8: 69:c1:d2:68:46:c2:a8:e7:60:5a:0c:2d:98:a5:52: a1:de:84:83:6b:b2:c3:b6:d9:e2:14:0f:12:f0:7f: 00:4a:d9:92:a9:b5:51:c9:a1:9a:c1:18:69:a6:bb: d2:ad:44:1a:2c:14:65:2c:b0:b3:53:77:76:72:2b: 6f:e1:20:2e:11:d5:84:d0:26:c5:83:2b:94:c7:44: c5:6b:84:ea:d3:91:bf:b6:b0:62:9a:1e:db:f9:f8: af:8c:cc:89:a9:f3:86:b9:32:a0:7f:fb:0f:90:1f: 42:3d:07:b3:0c:59:25:39:58:94:2a:62:28:4d:32: 58:4b:7b:a5:e5:84:7b:55:02:25:3b:05:99:b5:f0: af:d5:b5:e6:80:f1:64:4c:f0:1e:15:74:b8:4d:d0: a2:93:a5:f5:0d:45:89:3b:01:43:ae:81:4d:b6:0b: f3:bf:4d:8a:8f:2d:8f:6e:2d:b9:73:c8:00:f1:1f: a7:74:5a:bd:1a:a1:30:a2:ac:16:9c:0b:7f:83:83: b0:9a:ea:42:70:d7:e4:99:fa:43:15:70:e1:6d:82: ae:0d:e6:98:8e:93:b7:a6:22:8c:eb:67:57:36:d4: f5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:ED:72:88:40:01:9D:FE:83:59:75:75:DF:3C:81:5B:BF:0C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71a73e26-faac-3816-9997-75f2c9eb2056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:18:20:4b:80:a2:9b:29:53:32:86:15:b3:82:11:3d:96:0e: 67:4e:96:23:5e:fe:92:38:ac:e7:81:3a:0a:e4:a6:3f:89:ba: e0:40:00:0b:b2:a7:01:ce:33:76:eb:f2:8c:71:4b:70:76:5a: bf:39:73:de:0d:e1:90:d7:e2:fb:4c:8e:58:78:94:63:3c:f2: 5c:e5:e9:7b:3d:bc:c9:c1:44:9b:c0:de:84:e9:e0:81:be:4e: 43:e0:2b:00:46:91:b7:26:cf:1a:c8:42:59:ec:c8:a7:ef:01: bd:e0:36:31:28:ea:2c:8e:d1:8b:52:50:45:b4:86:a4:96:25: f2:eb:34:74:84:c0:c6:5a:eb:3d:52:d3:14:d6:b1:e2:47:72: 19:d0:52:67:91:7d:4c:96:55:38:25:4a:37:7e:eb:ea:a2:96: b2:b8:af:11:4c:a1:ce:b0:95:c1:7d:b6:0a:e8:3c:bd:c2:7d: c2:02:d1:e3:b1:3f:06:59:f5:fc:c2:c7:c6:cd:a8:91:bb:c4: 5e:2d:fe:2d:3f:8d:9d:22:67:05:f2:30:e2:6a:15:2b:89:cb: ed:15:2d:58:08:95:9d:20:d1:5b:3c:55:76:ea:1b:4e:e2:8a: 4f:c5:89:3b:e7:42:84:88:39:cb:48:cd:0e:8c:b1:99:c6:63: 02:c9:7a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hssKKyAmoXpKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZWU4NDgwN2EtNmExMy00YmQxLWE3MjYtY2I0ZGUxNDYwN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc0n1U5KSRO/5H/KQl0LBRplrn6a4YJ7JerJ XOhpwdJoRsKo52BaDC2YpVKh3oSDa7LDttniFA8S8H8AStmSqbVRyaGawRhpprvS rUQaLBRlLLCzU3d2citv4SAuEdWE0CbFgyuUx0TFa4Tq05G/trBimh7b+fivjMyJ qfOGuTKgf/sPkB9CPQezDFklOViUKmIoTTJYS3ul5YR7VQIlOwWZtfCv1bXmgPFk TPAeFXS4TdCik6X1DUWJOwFDroFNtgvzv02Kjy2Pbi25c8gA8R+ndFq9GqEwoqwW nAt/g4OwmupCcNfkmfpDFXDhbYKuDeaYjpO3piKM62dXNtT11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKq7XKIQAGd/oNZdXXfPIFbvwyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzFhNzNlMjYtZmFhYy0z ODE2LTk5OTctNzVmMmM5ZWIyMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0YIEuAopspUzKGFbOCET2WDmdOliNe/pI4rOeBOgrkpj+JuuBAAAuy pwHOM3br8oxxS3B2Wr85c94N4ZDX4vtMjlh4lGM88lzl6Xs9vMnBRJvA3oTp4IG+ TkPgKwBGkbcmzxrIQlnsyKfvAb3gNjEo6iyO0YtSUEW0hqSWJfLrNHSEwMZa6z1S 0xTWseJHchnQUmeRfUyWVTglSjd+6+qilrK4rxFMoc6wlcF9tgroPL3CfcIC0eOx PwZZ9fzCx8bNqJG7xF4t/i0/jZ0iZwXyMOJqFSuJy+0VLVgIlZ0g0Vs8VXbqG07i ik/FiTvnQoSIOctIzQ6MsZnGYwLJeig= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:53 2025 by rpki-client