$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/797d9f0c-be7f-39bb-8d90-365f5b2e2334.roa File: 797d9f0c-be7f-39bb-8d90-365f5b2e2334.roa (raw, json) Hash identifier: hO/OQdpeCpPXvcdgeNVXuq21QwmA5ffVvmwVfEnfdhA= Subject key identifier: 22:D3:3A:6A:C4:BA:DC:9D:95:40:96:79:2F:D7:26:22:3A:FB:C7:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23781FA19903466443580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/797d9f0c-be7f-39bb-8d90-365f5b2e2334.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.0.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:37:81:fa:19:90:34:66:44:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c757b590-7709-4cb7-8d3f-c0e7034d1a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:94:33:fb:a6:63:30:7c:0f:2e:91:1f:2c: eb:70:72:de:10:ad:8f:a9:05:b9:ef:b4:0b:4d:6f: 7a:72:db:40:12:f3:86:2e:fa:63:b0:aa:39:1a:b4: 02:ce:e6:b4:00:b0:e2:61:8e:4d:a6:18:63:e9:b2: f2:e1:eb:7f:77:a3:a3:fe:d1:a0:7d:8e:1d:10:64: f1:33:b3:6a:0f:0d:f2:ec:5b:67:63:af:59:c2:99: 5d:ae:6d:2a:52:b8:9e:3c:ed:53:58:1f:a4:ce:34: 5b:c2:af:7e:12:b6:26:72:8e:33:2f:8d:f3:ea:98: d1:7d:5b:0c:3c:55:95:db:4a:4d:ce:03:6b:43:0f: 02:0c:7b:a2:45:9d:80:38:e2:39:aa:4a:84:fe:50: 16:bb:8b:b6:c8:0e:1c:23:7e:41:91:aa:47:a3:7c: 24:d5:de:f5:42:37:7a:00:64:21:dd:28:af:70:35: e0:29:62:96:3f:f2:3a:6a:2d:ed:c7:df:b1:d2:4e: 4b:4a:13:8f:98:fe:aa:f5:62:1d:13:ba:6b:5c:08: 57:6d:03:0b:9d:74:75:2d:aa:60:e4:95:10:c1:1e: 5f:bb:83:d1:bb:10:d4:5b:e2:b6:07:5e:ba:ba:67: cf:f7:ec:d1:13:23:99:7b:da:e3:07:22:40:92:d2: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:3A:6A:C4:BA:DC:9D:95:40:96:79:2F:D7:26:22:3A:FB:C7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/797d9f0c-be7f-39bb-8d90-365f5b2e2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:21:be:50:cb:76:ea:c7:1e:9d:ea:bd:09:53:95:f6:e1:d1: ad:01:29:00:8f:26:41:7b:f5:da:36:0c:18:d2:7b:67:04:24: 2a:00:ee:a3:e9:e5:bf:fd:05:8b:9b:19:d0:7b:71:66:41:d8: 39:0d:6b:91:df:36:ee:c5:1f:93:17:32:bd:3c:7b:d8:bb:2a: c8:aa:18:bb:3d:64:cd:15:2c:a6:30:4b:07:28:57:30:2b:bc: 2a:bc:e1:92:a1:a8:20:04:af:84:03:d2:58:cd:12:ee:e3:a4: 1d:3f:82:19:23:fa:8e:1c:90:49:8e:b3:58:c9:d3:62:1b:e9: 19:ec:d6:c1:c6:bf:bb:b8:cb:bd:0a:90:e6:1a:50:0d:08:be: 85:21:a9:e4:2c:8f:5d:22:fd:51:41:9d:bc:ac:14:b5:11:7c: 49:45:ec:78:65:c9:47:40:94:aa:cd:f8:ff:02:e6:29:44:e5: 3b:5f:3d:8b:48:31:61:ef:d5:8c:f5:66:1e:ea:0d:aa:76:fa: 05:7d:51:bc:ac:95:c5:29:d3:92:6c:58:3c:9a:3f:30:7d:1b: f8:1c:4e:a3:1e:b5:b5:ee:8d:62:f4:af:05:6c:7a:a1:24:ae: e0:6c:55:8f:78:5d:96:30:7a:64:f9:87:32:1d:b7:07:5e:f0: 1d:01:97:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jeB+hmQNGZENYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzc1N2I1OTAtNzcwOS00Y2I3LThkM2YtYzBlNzAzNGQxYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUSUM/umYzB8Dy6RHyzrcHLeEK2PqQW577QL TW96cttAEvOGLvpjsKo5GrQCzua0ALDiYY5Nphhj6bLy4et/d6Oj/tGgfY4dEGTx M7NqDw3y7FtnY69Zwpldrm0qUriePO1TWB+kzjRbwq9+ErYmco4zL43z6pjRfVsM PFWV20pNzgNrQw8CDHuiRZ2AOOI5qkqE/lAWu4u2yA4cI35BkapHo3wk1d71Qjd6 AGQh3SivcDXgKWKWP/I6ai3tx9+x0k5LShOPmP6q9WIdE7prXAhXbQMLnXR1Lapg 5JUQwR5fu4PRuxDUW+K2B166umfP9+zREyOZe9rjByJAktLGPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLTOmrEutydlUCWeS/XJiI6+8dKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzk3ZDlmMGMtYmU3Zi0z OWJiLThkOTAtMzY1ZjViMmUyMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRADgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwhvlDLdurHHp3qvQlTlfbh0a0BKQCPJkF79do2DBjSe2cEJCoA7qPp 5b/9BYubGdB7cWZB2DkNa5HfNu7FH5MXMr08e9i7KsiqGLs9ZM0VLKYwSwcoVzAr vCq84ZKhqCAEr4QD0ljNEu7jpB0/ghkj+o4ckEmOs1jJ02Ib6Rns1sHGv7u4y70K kOYaUA0IvoUhqeQsj10i/VFBnbysFLURfElF7HhlyUdAlKrN+P8C5ilE5TtfPYtI MWHv1Yz1Zh7qDap2+gV9UbyslcUp05JsWDyaPzB9G/gcTqMetbXujWL0rwVseqEk ruBsVY94XZYwemT5hzIdtwde8B0Bl/k= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:19 2025 by rpki-client