$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e9f630f-0301-3cd4-bac4-8604170e4171.roa File: 8e9f630f-0301-3cd4-bac4-8604170e4171.roa (raw, json) Hash identifier: faZXescH0PGgeskc8/r1eBdR9hVpj6rihmTzbwvtSX4= Subject key identifier: 5B:BD:A2:55:F8:48:BB:54:62:D5:05:93:6A:15:A6:4A:1A:29:89:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F287ECD12E33EC26346380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e9f630f-0301-3cd4-bac4-8604170e4171.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:87:ec:d1:2e:33:ec:26:34:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3909b549-4f69-4e34-94f0-066b0171195f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:8d:7b:70:9a:34:33:64:2c:5f:ce:3b:11: 36:03:8d:7b:15:27:b2:24:c4:7d:07:88:9a:77:72: b6:64:2e:38:6f:37:c9:69:ac:8c:dd:2e:76:79:b0: 59:3c:8a:d5:9c:60:db:ea:2b:f4:8d:71:37:02:23: d1:e9:30:3a:1f:35:ea:32:d4:05:7b:37:18:1e:11: 5e:af:c8:71:33:b3:e5:58:89:f9:21:23:39:f3:3c: 00:91:2f:30:d5:18:03:c4:31:a8:c7:53:7a:e4:3c: 81:19:bc:17:c7:2b:30:7a:17:bc:1c:af:f3:7f:ff: 48:d3:9e:43:29:fd:ed:b2:0d:0c:55:be:20:5f:9d: d6:3f:59:34:f4:24:e1:4d:d2:a3:fd:9a:80:10:8f: 11:b6:c4:da:3e:4a:46:e8:3e:37:73:44:a3:76:55: 4c:26:a1:d3:07:15:bc:06:10:4c:3f:3f:f1:a1:6d: 4e:4e:b5:9e:46:21:e3:0e:e8:8e:fe:ee:31:f3:75: 72:5a:c1:44:4a:60:52:50:50:7e:68:f5:d4:85:dc: 84:e1:df:fc:09:8e:28:e9:df:ea:09:70:79:30:45: cf:3c:59:1d:49:4a:c2:d4:45:5b:f8:e2:7c:9f:a1: 47:ac:40:b7:27:ae:9e:17:ad:4f:5c:8b:60:e7:36: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:A2:55:F8:48:BB:54:62:D5:05:93:6A:15:A6:4A:1A:29:89:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e9f630f-0301-3cd4-bac4-8604170e4171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:4b:ee:b2:58:7d:ad:31:05:e0:c0:cf:58:4a:d7:9e:22: 96:85:39:35:ef:b4:a4:52:64:94:69:5a:d6:70:35:30:95:bc: 53:cf:77:50:e2:76:dd:bf:71:31:bc:34:58:42:4a:28:f8:47: 59:fd:d3:9c:0f:27:a8:44:1d:c3:2e:a4:df:46:4c:ac:c2:28: af:8e:cd:ff:88:1e:16:97:00:07:02:2d:84:a6:c5:66:c7:ed: 78:7b:d6:bb:51:03:32:1d:15:cd:9b:9a:e1:29:d8:d5:87:cc: c6:96:9b:f5:e5:85:5e:71:83:ca:66:22:40:3f:a9:b8:e3:3d: f6:00:a8:63:51:b7:4c:fe:48:bf:81:b5:35:77:8f:e2:26:92: e5:23:d2:d1:5c:69:a4:a7:cf:10:f1:fc:0b:7f:58:5e:94:a4: 9c:08:9f:17:d8:f0:c6:d9:8a:1d:fd:d5:bf:1a:98:53:28:c1: 05:f6:f8:e3:82:5e:91:f6:61:fc:18:41:28:22:3f:51:8e:7b: 40:1a:cb:3d:5c:28:55:66:a2:39:57:11:47:c8:c0:af:da:8e: 6a:36:96:c2:a1:69:39:76:5a:79:e9:d8:8d:91:68:71:5f:61: 48:36:7e:4b:28:e7:8b:2e:c6:ee:b5:9d:f8:65:4e:4d:a7:0c: 90:76:86:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ofs0S4z7CY0Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzkwOWI1NDktNGY2OS00ZTM0LTk0ZjAtMDY2YjAxNzExOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CmNe3CaNDNkLF/OOxE2A417FSeyJMR9B4ia d3K2ZC44bzfJaayM3S52ebBZPIrVnGDb6iv0jXE3AiPR6TA6HzXqMtQFezcYHhFe r8hxM7PlWIn5ISM58zwAkS8w1RgDxDGox1N65DyBGbwXxyswehe8HK/zf/9I055D Kf3tsg0MVb4gX53WP1k09CThTdKj/ZqAEI8RtsTaPkpG6D43c0SjdlVMJqHTBxW8 BhBMPz/xoW1OTrWeRiHjDuiO/u4x83VyWsFESmBSUFB+aPXUhdyE4d/8CY4o6d/q CXB5MEXPPFkdSUrC1EVb+OJ8n6FHrEC3J66eF61PXItg5zbWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu9olX4SLtUYtUFk2oVpkoaKYkvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGU5ZjYzMGYtMDMwMS0z Y2Q0LWJhYzQtODYwNDE3MGU0MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf1S+6yWH2tMQXgwM9YSteeIpaFOTXvtKRSZJRpWtZwNTCVvFPPd1Di dt2/cTG8NFhCSij4R1n905wPJ6hEHcMupN9GTKzCKK+Ozf+IHhaXAAcCLYSmxWbH 7Xh71rtRAzIdFc2bmuEp2NWHzMaWm/XlhV5xg8pmIkA/qbjjPfYAqGNRt0z+SL+B tTV3j+ImkuUj0tFcaaSnzxDx/At/WF6UpJwInxfY8MbZih391b8amFMowQX2+OOC XpH2YfwYQSgiP1GOe0Aayz1cKFVmojlXEUfIwK/ajmo2lsKhaTl2Wnnp2I2RaHFf YUg2fkso54suxu61nfhlTk2nDJB2hvU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:10 2025 by rpki-client