$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9128d87a-ce6a-37ad-ac4c-b9321515ac58.roa File: 9128d87a-ce6a-37ad-ac4c-b9321515ac58.roa (raw, json) Hash identifier: ipY5q8oO7nBcsJGFynRBelFIhnNUitC8+tDprAG6fSo= Subject key identifier: BD:8E:8D:4C:6F:21:C5:1E:21:F6:68:5E:B9:60:E6:AD:BF:5F:DC:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F211CEF5E2599AB9B65DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9128d87a-ce6a-37ad-ac4c-b9321515ac58.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.101.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:11:ce:f5:e2:59:9a:b9:b6:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3729409c-fa66-4bec-8bcb-2dd98645ef1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7e:c3:12:7e:5e:52:cd:94:54:5a:02:a0:e0: 57:7c:c3:d9:37:63:b4:9e:ea:3b:56:f3:55:9e:1e: 42:ec:5f:45:7f:7b:cc:30:be:a4:62:57:44:bd:d4: bf:3e:a1:a8:8d:a5:c0:16:bc:ab:80:06:b6:83:c2: 19:b5:d5:3a:f4:bb:c0:81:2a:49:8a:d6:31:d8:58: 31:da:f9:7b:12:e7:b8:38:94:ad:0d:08:ff:87:9b: 88:10:10:22:a0:0f:9a:c8:e8:3a:5e:1d:9f:2c:1b: 96:91:d6:ec:28:aa:4b:8e:95:4c:2d:9b:c0:06:ff: 13:e5:2b:10:3a:93:5a:a0:93:1c:54:11:bc:a8:d1: 72:eb:74:db:d1:1f:73:bb:02:1d:d2:cb:b9:17:61: 25:95:8f:02:99:87:db:67:10:74:91:0a:9c:09:6d: 22:87:d9:56:f5:f9:59:08:4f:1b:03:b0:95:b4:9d: 79:30:68:a8:62:a4:40:5e:d0:04:b4:27:ae:f4:a9: 2d:8c:73:25:43:5a:24:6a:0d:0e:2f:16:da:57:a7: 2d:b0:cd:ab:a3:08:d7:96:b5:f9:29:ee:3e:0e:f0: be:b1:5e:51:85:4a:3b:34:03:8d:be:d5:42:92:ac: 34:b4:27:ad:07:66:ce:f5:3f:f4:d9:24:d1:44:67: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8E:8D:4C:6F:21:C5:1E:21:F6:68:5E:B9:60:E6:AD:BF:5F:DC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9128d87a-ce6a-37ad-ac4c-b9321515ac58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5e:40:40:54:ad:b8:4b:a7:87:50:70:26:62:65:2b:f6:a5: 95:35:74:59:79:b9:e5:22:e9:d0:1f:a6:21:42:82:55:c2:69: 00:d8:34:ba:32:08:47:df:e3:db:51:74:6c:22:96:3d:b6:9e: 36:1b:3e:c7:25:06:73:bb:94:4f:57:92:46:ee:b6:c1:97:fa: 65:35:bd:35:c3:9a:dc:ca:f4:94:29:a2:fc:66:c8:39:cb:65: 31:0e:c2:f4:32:9b:c9:ea:c5:d8:ce:eb:10:e0:55:94:68:2d: 8e:7d:1e:21:02:1b:f1:b2:7b:b4:5c:f8:50:f5:eb:47:ae:d0: 67:ca:1c:6d:19:b9:7f:5a:3a:8f:c8:a8:6c:f9:88:f4:fd:92: d3:79:12:ae:d4:95:1a:7f:57:e5:d9:be:d3:e9:14:6c:8c:80: ee:e0:45:3a:eb:57:d8:28:4f:5e:c1:1e:78:17:0f:c4:4a:c5: ac:b0:b5:69:27:00:8d:21:27:6d:be:2b:6f:7d:f8:bd:37:6e: e9:de:46:12:f9:1d:ce:66:ff:d5:fc:d0:78:a0:0d:8e:4d:22: 74:ba:8a:2a:53:3a:ce:75:94:c1:b7:b5:e3:5f:a8:f5:b8:a9: 19:61:c4:e3:42:67:31:c2:ff:89:57:9b:1a:1d:92:c6:5e:3a: db:0d:0f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hHO9eJZmrm2XcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzcyOTQwOWMtZmE2Ni00YmVjLThiY2ItMmRkOTg2NDVlZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg37DEn5eUs2UVFoCoOBXfMPZN2O0nuo7VvNV nh5C7F9Ff3vMML6kYldEvdS/PqGojaXAFryrgAa2g8IZtdU69LvAgSpJitYx2Fgx 2vl7Eue4OJStDQj/h5uIEBAioA+ayOg6Xh2fLBuWkdbsKKpLjpVMLZvABv8T5SsQ OpNaoJMcVBG8qNFy63Tb0R9zuwId0su5F2EllY8CmYfbZxB0kQqcCW0ih9lW9flZ CE8bA7CVtJ15MGioYqRAXtAEtCeu9KktjHMlQ1okag0OLxbaV6ctsM2rowjXlrX5 Ke4+DvC+sV5RhUo7NAONvtVCkqw0tCetB2bO9T/02STRRGeKywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2OjUxvIcUeIfZoXrlg5q2/X9zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTEyOGQ4N2EtY2U2YS0z N2FkLWFjNGMtYjkzMjE1MTVhYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABleQEBUrbhLp4dQcCZiZSv2pZU1dFl5ueUi6dAfpiFCglXCaQDYNLoy CEff49tRdGwilj22njYbPsclBnO7lE9XkkbutsGX+mU1vTXDmtzK9JQpovxmyDnL ZTEOwvQym8nqxdjO6xDgVZRoLY59HiECG/Gye7Rc+FD160eu0GfKHG0ZuX9aOo/I qGz5iPT9ktN5Eq7UlRp/V+XZvtPpFGyMgO7gRTrrV9goT17BHngXD8RKxaywtWkn AI0hJ22+K299+L03buneRhL5Hc5m/9X80HigDY5NInS6iipTOs51lMG3teNfqPW4 qRlhxONCZzHC/4lXmxodksZeOtsND1w= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:08 2025 by rpki-client