$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d27a970-7040-3e15-9221-56ca9ed5309e.roa File: 7d27a970-7040-3e15-9221-56ca9ed5309e.roa (raw, json) Hash identifier: 1GZSmuYwtFilffwAptnrN8ExydFZjSeEYXx4sU95ntY= Subject key identifier: BF:7D:5F:5C:53:36:92:75:6B:2C:A2:5E:FC:86:84:91:9B:B3:91:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F291DA35500A7A7EDB4700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d27a970-7040-3e15-9221-56ca9ed5309e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.99.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:91:da:35:50:0a:7a:7e:db:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b2b4433b-a306-460a-a523-0c35ae37007e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:d6:82:ef:12:8e:bc:07:11:94:be:90:44: 3d:59:7e:be:b5:2c:1f:0b:d3:6f:ee:e7:92:d9:3f: bd:99:c4:75:09:85:cc:c4:a8:05:c6:fe:74:33:9a: 82:88:11:35:69:a5:78:db:07:6e:3c:0d:dc:c0:05: 5c:18:a3:00:13:eb:8a:7e:5b:dc:ee:87:ff:5b:5c: 9b:22:c3:ff:6f:e2:62:7a:d8:0d:f0:14:8f:96:11: f9:49:90:81:a8:b5:a0:a9:92:4b:8f:8b:4d:b1:ff: 54:f5:64:82:4e:0b:8f:1e:d5:d3:58:53:b8:85:cf: 1f:2c:b4:67:d9:d3:6e:8b:cf:af:7a:02:20:19:96: 2c:f1:80:ec:10:76:67:f9:63:ca:bc:63:8f:34:1e: 1c:82:0f:46:f4:2d:4d:d7:cd:07:fd:7b:9e:e3:4f: 15:e0:ca:bb:63:4f:37:95:da:14:82:ef:cc:09:7f: be:48:6b:84:be:13:c6:9f:a3:f0:41:43:ee:44:2e: 8b:95:e9:d7:eb:ea:ac:5a:c6:d0:7b:9d:fd:d1:c4: 47:d4:3b:50:75:30:89:b0:c6:28:66:41:4e:a8:1d: c9:54:9c:dc:d1:95:70:4c:34:0f:58:dc:af:07:10: 46:39:77:ff:d2:e3:ef:83:b1:67:70:b5:fb:a4:ca: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7D:5F:5C:53:36:92:75:6B:2C:A2:5E:FC:86:84:91:9B:B3:91:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d27a970-7040-3e15-9221-56ca9ed5309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b7:9d:fb:b9:5f:90:4c:2b:4c:94:f4:b9:e1:a0:79:c0:34: 76:d9:5b:a8:4d:6f:18:fa:a5:e8:6d:e7:de:9b:95:d9:18:b9: b1:db:6c:26:7d:27:d4:4d:1c:35:81:c1:5d:8f:d4:a3:66:16: c0:8d:ca:bf:a8:ef:32:9e:cb:8c:b6:a1:0c:d3:93:b8:80:45: 89:50:9e:06:f6:3a:fc:c3:bc:a4:10:67:12:96:11:4c:62:61: bc:31:65:5f:35:1e:85:6d:03:f9:87:f3:6d:c4:fe:38:73:3b: b3:83:ca:0c:8c:36:af:2d:91:b3:8f:4d:a9:c2:18:b4:a0:dc: 6f:87:b1:ea:54:2b:a6:93:6f:a3:2f:88:52:a2:66:15:97:5f: 39:7d:18:38:cf:ce:bc:fa:e0:74:46:50:7d:09:83:f5:a1:e4: 28:f6:60:14:62:b0:72:3e:a2:82:be:82:09:61:04:1b:e3:b9: 73:36:01:fe:20:e0:18:c4:ff:e7:70:f1:53:23:29:b5:7a:82: 56:6e:9f:62:a7:a2:c8:2b:6c:72:31:4c:3f:21:a1:9a:6f:c3: 9b:1c:db:17:d1:88:4e:1f:37:9e:6a:72:fd:13:98:b2:43:1e: fc:e4:4b:33:f4:73:c7:0c:44:24:8f:c2:d4:a6:de:da:df:ce: 42:05:f0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pHaNVAKen7bRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjJiNDQzM2ItYTMwNi00NjBhLWE1MjMtMGMzNWFlMzcwMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv3Wgu8SjrwHEZS+kEQ9WX6+tSwfC9Nv7ueS 2T+9mcR1CYXMxKgFxv50M5qCiBE1aaV42wduPA3cwAVcGKMAE+uKflvc7of/W1yb IsP/b+JietgN8BSPlhH5SZCBqLWgqZJLj4tNsf9U9WSCTguPHtXTWFO4hc8fLLRn 2dNui8+vegIgGZYs8YDsEHZn+WPKvGOPNB4cgg9G9C1N180H/Xue408V4Mq7Y083 ldoUgu/MCX++SGuEvhPGn6PwQUPuRC6LlenX6+qsWsbQe5390cRH1DtQdTCJsMYo ZkFOqB3JVJzc0ZVwTDQPWNyvBxBGOXf/0uPvg7FncLX7pMoCLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL99X1xTNpJ1ayyiXvyGhJGbs5F2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2QyN2E5NzAtNzA0MC0z ZTE1LTkyMjEtNTZjYTllZDUzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm3nfu5X5BMK0yU9LnhoHnANHbZW6hNbxj6peht596bldkYubHbbCZ9 J9RNHDWBwV2P1KNmFsCNyr+o7zKey4y2oQzTk7iARYlQngb2OvzDvKQQZxKWEUxi YbwxZV81HoVtA/mH823E/jhzO7ODygyMNq8tkbOPTanCGLSg3G+HsepUK6aTb6Mv iFKiZhWXXzl9GDjPzrz64HRGUH0Jg/Wh5Cj2YBRisHI+ooK+gglhBBvjuXM2Af4g 4BjE/+dw8VMjKbV6glZun2KnosgrbHIxTD8hoZpvw5sc2xfRiE4fN55qcv0TmLJD HvzkSzP0c8cMRCSPwtSm3trfzkIF8CM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:08 2025 by rpki-client