$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94190d6e-c722-3c63-aa3e-15246d202709.roa File: 94190d6e-c722-3c63-aa3e-15246d202709.roa (raw, json) Hash identifier: NRAPhzvsYPFbZIQQ487t2ltDHwUffrqgFYUx1kSbDbw= Subject key identifier: 1C:C9:60:D0:6B:BE:22:3B:30:6B:27:0C:64:DD:F5:04:4B:85:9F:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2791E78D198599C34A400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94190d6e-c722-3c63-aa3e-15246d202709.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.6.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:79:1e:78:d1:98:59:9c:34:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=456b0526-ce1e-42da-97a2-dedce9c33f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:22:9c:8f:b5:32:96:76:c9:21:08:71:48: f5:51:85:a9:3e:87:d2:db:58:b9:9a:fc:d7:50:9e: 44:ba:aa:9b:f3:91:6b:b9:73:f1:47:04:31:d0:d9: 0e:9d:89:d8:81:c5:ee:43:db:3d:55:22:dd:af:65: ec:58:83:ce:13:85:c6:52:c7:c7:b7:f0:93:a3:3d: 8c:e8:f6:12:a2:e0:f9:0b:2d:fd:63:48:2f:69:e9: 95:5d:62:b9:3a:25:e7:02:d3:00:ba:11:17:dc:9e: 8a:70:a7:e5:92:15:fb:de:33:c7:30:50:cf:70:6a: f5:8c:01:77:73:c1:28:15:b8:dd:c1:93:a7:c7:df: ca:9f:91:c5:08:7a:83:83:04:57:65:ea:ba:a3:66: 67:e0:d3:df:ff:a8:32:06:2a:7d:34:93:1e:57:c7: f2:26:d4:2a:2f:2d:40:e4:43:19:d9:de:89:03:14: 31:32:ae:8c:a3:4c:e3:94:7d:ba:d3:c5:58:53:7a: 1d:1e:71:27:ae:60:04:6c:50:0b:e9:1c:d0:cc:24: 8c:65:41:f7:f7:97:8c:a7:fc:ab:a6:db:54:c1:03: 86:6e:34:7d:e7:bd:4f:0e:20:97:ed:91:cc:4a:17: 73:09:6e:5d:3f:2c:2d:53:40:57:ff:e1:6d:d5:ef: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C9:60:D0:6B:BE:22:3B:30:6B:27:0C:64:DD:F5:04:4B:85:9F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94190d6e-c722-3c63-aa3e-15246d202709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a5:97:9a:a0:0d:4e:6e:24:7f:70:51:5e:7a:99:1c:f7:44: d9:24:11:3b:09:39:da:a1:53:7b:8c:09:25:5d:dc:b5:eb:91: a5:49:03:d1:67:96:0d:ec:89:ec:60:84:43:6d:4a:8c:84:c5: ca:fe:e5:aa:dc:d3:15:41:ad:60:06:1c:0f:fc:e2:13:71:c7: 2c:03:d8:4c:c2:0c:e9:f8:81:7b:d3:ce:b2:a3:ef:b2:44:97: f8:4d:ef:53:05:d0:86:68:07:fd:44:f3:ba:9e:d5:be:98:17: 95:5b:16:c3:6b:4b:59:ed:90:d1:f2:e1:61:ae:98:51:52:b4: 43:3b:28:8e:88:b4:87:39:05:e6:d7:46:f4:af:24:70:80:24: 0a:bf:cf:f4:a0:7f:10:b3:97:ae:d8:b7:db:8d:70:7c:65:6f: f3:3c:13:d8:22:f6:5c:c3:e8:b5:c4:30:b2:26:03:d1:12:44: 1e:9a:c7:4d:a6:ac:70:06:9f:54:2b:8f:4a:21:8d:fe:51:21: 36:d0:61:60:65:10:71:26:4e:65:fb:02:60:b8:b0:ee:7d:9d: e6:d0:da:58:0b:1d:00:bf:b8:38:76:4f:5b:30:e7:6b:81:0c: de:77:c2:a8:cd:0f:9a:60:18:50:f0:59:5a:ac:15:15:66:e8: a2:5b:e4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nkeeNGYWZw0pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDU2YjA1MjYtY2UxZS00MmRhLTk3YTItZGVkY2U5YzMzZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuQinI+1MpZ2ySEIcUj1UYWpPofS21i5mvzX UJ5Euqqb85FruXPxRwQx0NkOnYnYgcXuQ9s9VSLdr2XsWIPOE4XGUsfHt/CToz2M 6PYSouD5Cy39Y0gvaemVXWK5OiXnAtMAuhEX3J6KcKflkhX73jPHMFDPcGr1jAF3 c8EoFbjdwZOnx9/Kn5HFCHqDgwRXZeq6o2Zn4NPf/6gyBip9NJMeV8fyJtQqLy1A 5EMZ2d6JAxQxMq6Mo0zjlH2608VYU3odHnEnrmAEbFAL6RzQzCSMZUH395eMp/yr pttUwQOGbjR9571PDiCX7ZHMShdzCW5dPywtU0BX/+Ft1e/GMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzJYNBrviI7MGsnDGTd9QRLhZ8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQxOTBkNmUtYzcyMi0z YzYzLWFhM2UtMTUyNDZkMjAyNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAbqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIill5qgDU5uJH9wUV56mRz3RNkkETsJOdqhU3uMCSVd3LXrkaVJA9Fn lg3siexghENtSoyExcr+5arc0xVBrWAGHA/84hNxxywD2EzCDOn4gXvTzrKj77JE l/hN71MF0IZoB/1E87qe1b6YF5VbFsNrS1ntkNHy4WGumFFStEM7KI6ItIc5BebX RvSvJHCAJAq/z/SgfxCzl67Yt9uNcHxlb/M8E9gi9lzD6LXEMLImA9ESRB6ax02m rHAGn1Qrj0ohjf5RITbQYWBlEHEmTmX7AmC4sO59nebQ2lgLHQC/uDh2T1sw52uB DN53wqjND5pgGFDwWVqsFRVm6KJb5LQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:39 2025 by rpki-client