$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a37c220-0c6f-3c46-8dd6-bab9fdf7684d.roa File: 8a37c220-0c6f-3c46-8dd6-bab9fdf7684d.roa (raw, json) Hash identifier: /hKLVADKGLk/ZEO84NadGeCQHfy27OQtqvzvdLbmMK0= Subject key identifier: 81:07:3E:DE:D2:A8:86:09:F8:7D:2E:21:47:24:07:16:C6:C3:80:EC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27FB34593CC30615D7874 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a37c220-0c6f-3c46-8dd6-bab9fdf7684d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7f:b3:45:93:cc:30:61:5d:78:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ecfee8c8-85bc-4fca-b0f6-ddd7f28052e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:c7:04:a4:13:9a:f6:a7:a2:56:bf:58:2c: 73:8a:65:09:66:a8:38:e9:03:07:3e:d0:eb:05:e7: b1:03:0f:34:1c:57:60:38:24:39:ac:b0:df:92:41: 58:cf:19:06:46:06:7f:f7:1c:7a:48:1a:b4:d3:b0: 4f:d5:e8:f7:a6:4d:e2:ad:2a:4d:d0:fd:eb:d3:a8: 0f:32:52:83:1f:e9:3b:2c:e4:b6:96:0d:04:ed:6b: f0:b2:3c:f6:47:ca:5c:b0:83:d4:98:fd:3c:58:b0: 99:27:db:f6:37:a0:43:b7:c3:28:9a:f0:6f:2f:4a: 1d:10:3d:1b:57:22:0d:81:fe:2a:87:b4:e7:85:5b: 21:ca:e8:14:3c:71:5c:e0:90:fd:94:15:ce:e3:c0: 15:90:7f:04:39:60:65:1f:8a:bd:31:07:00:40:a5: 5d:e6:0a:c4:e1:99:3d:f4:e7:cd:8f:f3:66:0c:c9: ae:38:9b:03:0b:ed:98:13:eb:7f:52:b3:e8:0f:ac: 20:15:73:a3:35:8a:98:f4:e1:51:79:2e:0e:bf:6d: 6f:5b:6a:d8:c8:95:48:a0:38:69:cc:aa:66:65:c2: e9:3e:8b:d3:70:da:0a:5b:dd:7f:29:66:be:41:0e: fd:84:89:1d:a2:e2:82:05:7c:53:f9:51:02:d2:c6: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:3E:DE:D2:A8:86:09:F8:7D:2E:21:47:24:07:16:C6:C3:80:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a37c220-0c6f-3c46-8dd6-bab9fdf7684d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:26:f6:43:1d:f5:a2:cd:f5:07:94:c1:b9:a2:f4:7a:35:98: 7e:bd:cc:c6:95:d3:d6:00:9b:88:74:f4:8c:e8:e4:50:fb:74: fa:0d:15:3d:4d:22:81:4d:95:7f:ff:d5:2b:d2:b7:38:3f:9f: 7d:84:67:9e:81:95:d6:90:0f:45:5b:15:71:33:86:3a:2c:d8: 8b:8d:27:34:04:25:0a:74:e8:99:80:64:6a:45:79:02:f0:8d: 7d:8b:0d:39:9a:1f:a9:9f:dc:e9:bc:75:1c:7d:28:1f:7e:51: 07:38:26:a1:d7:91:c8:06:bc:47:bb:a1:19:93:03:38:66:8a: 5d:6e:6a:14:16:5e:d5:09:2b:83:8b:cb:9b:d9:c5:7a:bc:5c: ea:39:4c:d9:16:69:4f:bf:b2:ce:58:61:31:f0:a2:12:98:43: 0d:77:a8:c4:4f:a5:4e:68:31:c5:29:9f:0e:19:94:2b:fc:2b: 39:0b:8d:68:a1:37:20:0e:f1:06:de:c6:8b:eb:34:92:8d:82: bd:23:58:a8:2b:d2:4f:2b:bc:14:cc:83:c6:16:dd:97:f0:d2: cc:c7:68:be:a4:ad:ec:b4:5c:88:e9:a4:3b:53:dc:09:87:73: e1:c2:c8:85:e0:bc:c3:c2:98:99:a1:8f:60:ce:9e:99:05:fb: d7:e7:06:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n+zRZPMMGFdeHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZWNmZWU4YzgtODViYy00ZmNhLWIwZjYtZGRkN2YyODA1MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mLHBKQTmvanola/WCxzimUJZqg46QMHPtDr BeexAw80HFdgOCQ5rLDfkkFYzxkGRgZ/9xx6SBq007BP1ej3pk3irSpN0P3r06gP MlKDH+k7LOS2lg0E7Wvwsjz2R8pcsIPUmP08WLCZJ9v2N6BDt8MomvBvL0odED0b VyINgf4qh7TnhVshyugUPHFc4JD9lBXO48AVkH8EOWBlH4q9MQcAQKVd5grE4Zk9 9OfNj/NmDMmuOJsDC+2YE+t/UrPoD6wgFXOjNYqY9OFReS4Ov21vW2rYyJVIoDhp zKpmZcLpPovTcNoKW91/KWa+QQ79hIkdouKCBXxT+VEC0sbA2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEHPt7SqIYJ+H0uIUckBxbGw4DsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGEzN2MyMjAtMGM2Zi0z YzQ2LThkZDYtYmFiOWZkZjc2ODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAoaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0m9kMd9aLN9QeUwbmi9Ho1mH69zMaV09YAm4h09Izo5FD7dPoNFT1N IoFNlX//1SvStzg/n32EZ56BldaQD0VbFXEzhjos2IuNJzQEJQp06JmAZGpFeQLw jX2LDTmaH6mf3Om8dRx9KB9+UQc4JqHXkcgGvEe7oRmTAzhmil1uahQWXtUJK4OL y5vZxXq8XOo5TNkWaU+/ss5YYTHwohKYQw13qMRPpU5oMcUpnw4ZlCv8KzkLjWih NyAO8QbexovrNJKNgr0jWKgr0k8rvBTMg8YW3Zfw0szHaL6krey0XIjppDtT3AmH c+HCyIXgvMPCmJmhj2DOnpkF+9fnBvU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:33 2025 by rpki-client