$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa File: 8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa (raw, json) Hash identifier: AcqPyFei0QEo0hiaK0wUQ474KIWbRxXG4p4xmdztg+Y= Subject key identifier: B9:4E:8A:82:C4:B1:03:20:06:83:2A:5E:14:BB:BA:55:51:34:CF:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F201A03809950A8A6AD700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:01:a0:38:09:95:0a:8a:6a:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1d2d337c-fe90-4c50-9f1e-87d9eb149f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:77:26:f6:b3:0f:23:dc:d9:4e:7a:a4:0f: ad:a6:8c:3e:b2:d2:28:97:fb:50:22:a3:70:8b:32: 2b:6b:c2:1d:0c:dd:15:51:5d:bc:aa:55:31:62:bb: 59:1d:f9:4f:94:60:9a:3f:3b:f9:ca:82:57:ec:05: b8:74:c4:48:4d:85:02:52:63:e6:ef:a0:cc:26:ba: 6d:2d:b0:1b:52:5f:7e:12:0f:5f:b3:72:0b:0c:91: 8e:52:53:a2:30:09:77:e8:68:52:5a:07:0b:b3:26: 4a:35:ce:fe:67:b5:c4:f9:af:38:22:fc:73:f5:e9: 81:b3:10:44:0e:95:ce:96:9d:65:fb:21:4e:74:17: 51:3a:0c:e3:af:b3:1f:46:4e:11:ba:03:fe:0e:b2: 54:b9:16:47:41:fc:dc:09:b1:3e:26:db:a7:e7:f3: db:e6:c4:aa:ec:a7:fd:a4:87:e3:ee:08:1d:13:a8: 70:9f:73:9f:4f:64:d4:85:78:3d:21:b7:c3:cb:ee: 31:a8:ba:58:a0:29:b1:3c:51:07:84:21:b3:a5:44: e9:f5:6b:ad:86:10:5e:e9:df:3b:52:22:63:34:42: 27:c2:1f:70:24:bc:56:3d:67:8f:6e:f6:5c:9a:9b: 8e:1e:64:eb:f5:21:b0:21:c1:e6:8c:99:45:6b:3b: 51:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:8A:82:C4:B1:03:20:06:83:2A:5E:14:BB:BA:55:51:34:CF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b9fd4eb-80b9-35a7-832e-ee93fdc3f285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3c:f9:d1:74:1e:f6:63:d8:18:ec:aa:f8:92:2a:0b:88:e4: 02:0f:7c:68:4b:da:17:69:f2:cf:a5:28:b6:fb:13:49:71:20: 25:10:d6:d9:e2:77:94:07:d7:0c:ad:e1:46:81:a1:00:e5:33: 86:d0:22:0b:f2:63:4f:9d:a7:e0:68:02:68:c9:76:36:30:1c: 80:99:33:19:d7:8e:ba:22:04:52:24:fa:b8:2f:95:30:03:db: 60:23:46:e7:98:7c:a6:7d:7a:d4:9b:2d:83:36:55:eb:3b:1c: bc:e8:3e:a7:80:ab:17:bd:18:ca:d1:7a:f9:e5:02:7f:ba:31: f9:7b:19:58:19:6b:3d:6d:60:fa:58:9d:26:04:6a:88:0b:fe: d4:5e:38:db:59:22:52:71:a4:37:18:b3:5d:d7:a8:c0:13:3e: d7:e5:4d:a9:8d:87:7c:33:c8:42:46:7d:d2:69:c0:99:55:07: 74:1f:eb:a0:c8:b5:c3:fe:4b:c4:88:9e:a2:36:76:54:67:fe: e0:50:7a:a6:9f:c8:8f:53:cf:81:ae:72:e1:84:88:39:ef:4a: 13:72:ab:e7:44:1a:a6:af:d9:45:39:90:e6:de:0b:6b:b0:a6: 66:5e:98:00:d3:3d:bf:f4:70:3f:78:7b:41:4c:cb:6d:a7:3c: df:3a:1b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gGgOAmVCopq1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWQyZDMzN2MtZmU5MC00YzUwLTlmMWUtODdkOWViMTQ5ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5F3JvazDyPc2U56pA+tpow+stIol/tQIqNw izIra8IdDN0VUV28qlUxYrtZHflPlGCaPzv5yoJX7AW4dMRITYUCUmPm76DMJrpt LbAbUl9+Eg9fs3ILDJGOUlOiMAl36GhSWgcLsyZKNc7+Z7XE+a84Ivxz9emBsxBE DpXOlp1l+yFOdBdROgzjr7MfRk4RugP+DrJUuRZHQfzcCbE+Jtun5/Pb5sSq7Kf9 pIfj7ggdE6hwn3OfT2TUhXg9IbfDy+4xqLpYoCmxPFEHhCGzpUTp9WuthhBe6d87 UiJjNEInwh9wJLxWPWePbvZcmpuOHmTr9SGwIcHmjJlFaztR0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlOioLEsQMgBoMqXhS7ulVRNM8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGI5ZmQ0ZWItODBiOS0z NWE3LTgzMmUtZWU5M2ZkYzNmMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE8+dF0HvZj2BjsqviSKguI5AIPfGhL2hdp8s+lKLb7E0lxICUQ1tni d5QH1wyt4UaBoQDlM4bQIgvyY0+dp+BoAmjJdjYwHICZMxnXjroiBFIk+rgvlTAD 22AjRueYfKZ9etSbLYM2Ves7HLzoPqeAqxe9GMrRevnlAn+6Mfl7GVgZaz1tYPpY nSYEaogL/tReONtZIlJxpDcYs13XqMATPtflTamNh3wzyEJGfdJpwJlVB3Qf66DI tcP+S8SInqI2dlRn/uBQeqafyI9Tz4GucuGEiDnvShNyq+dEGqav2UU5kObeC2uw pmZemADTPb/0cD94e0FMy22nPN86G+0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:36:04 2025 by rpki-client