$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9797a2cc-5830-329c-9949-9cd32862fe57.roa File: 9797a2cc-5830-329c-9949-9cd32862fe57.roa (raw, json) Hash identifier: 9LJrtKDop+MZdIK5LKpscvyr1f9PA4b/zZqTFF3h+1U= Subject key identifier: FF:CD:AC:8E:78:DC:64:B3:DC:92:AC:DE:65:F3:31:AC:17:81:F7:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27FF3CC4FE6FB86594E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9797a2cc-5830-329c-9949-9cd32862fe57.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7f:f3:cc:4f:e6:fb:86:59:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=25c8ad24-619f-446f-94e8-0d1f170e567a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:bc:6c:d0:cf:76:94:5b:46:b7:55:9c:2e: 19:ef:54:d6:61:ee:4b:09:44:7c:dd:8a:bb:05:cd: 21:b8:27:fa:d0:bc:8c:88:a1:f2:3c:03:2d:62:ef: be:1a:bc:84:e2:1d:42:48:1a:10:86:34:b0:a6:51: ec:15:a6:31:84:9b:d8:45:1c:d7:11:bb:f2:82:b4: b3:e9:79:9d:9d:b9:f8:16:ff:b1:c4:97:38:6a:97: c5:6b:af:23:68:ff:9e:36:30:e0:4e:f4:79:7b:55: 76:0f:2d:5f:14:dc:46:82:d4:2e:6e:15:54:a0:33: dc:3f:27:0b:36:e5:aa:52:62:a6:29:d0:16:fb:9d: b9:9c:62:dd:88:04:d9:52:c6:72:c3:87:65:24:cb: 3c:58:bd:3e:46:71:74:8f:7e:d3:96:5f:fd:cf:bf: e1:91:69:19:30:e4:f9:30:fd:2b:55:74:df:bc:cd: f0:2f:88:2d:fa:aa:4f:0d:34:19:bd:d6:69:96:5c: 01:24:cc:4d:8b:4d:06:d9:5b:7a:8c:18:d2:14:55: 31:d6:66:74:3e:54:94:7c:3c:33:28:f9:24:c5:10: 86:6f:52:38:eb:ad:17:a5:c9:e1:e5:51:2d:ee:b2: dd:31:a8:a5:ef:91:9d:f8:f8:cd:62:a3:da:d8:84: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:AC:8E:78:DC:64:B3:DC:92:AC:DE:65:F3:31:AC:17:81:F7:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9797a2cc-5830-329c-9949-9cd32862fe57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f0:16:16:33:bc:8b:70:11:29:d4:aa:0f:05:fc:fd:f8:30: ec:51:5d:ab:0d:40:88:9c:b1:94:21:65:e5:b2:79:c2:a4:3c: 39:4b:86:59:80:bc:da:72:25:fd:8e:11:45:cc:50:c9:b9:b3: e7:5c:2d:d5:2a:ae:cb:7c:46:02:46:8b:9f:1d:f2:d1:50:65: e8:77:37:fd:18:b9:05:4f:92:4d:28:73:f6:e0:40:18:58:71: 6a:61:af:3b:17:57:cd:05:67:8c:00:db:47:d7:f7:a4:7d:c7: f7:88:e9:18:f8:a0:db:0d:4d:f6:da:90:ef:ed:4f:8a:1c:b4: 70:c6:4b:24:c4:39:d0:97:25:19:cf:7b:84:b3:c3:64:25:97: af:8c:24:11:13:52:76:01:b3:95:9a:3d:4f:28:78:4e:a5:f2: 97:85:06:fd:43:23:b2:19:94:92:9a:ef:3b:d1:56:c7:49:7d: 86:20:75:bc:bc:f9:d2:a2:57:ec:cf:d6:3c:bc:bd:3a:ae:17: 71:38:81:3a:ec:36:b3:cf:50:3b:b2:cb:79:0b:05:8f:5b:5f: 1e:c2:26:01:27:86:69:0e:04:f1:90:5b:47:64:1d:65:6a:07: 55:e9:c7:01:74:3b:9d:96:35:e5:b8:d5:06:10:17:a0:b1:53: 2f:fa:86:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28n/zzE/m+4ZZToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjVjOGFkMjQtNjE5Zi00NDZmLTk0ZTgtMGQxZjE3MGU1NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9m8bNDPdpRbRrdVnC4Z71TWYe5LCUR83Yq7 Bc0huCf60LyMiKHyPAMtYu++GryE4h1CSBoQhjSwplHsFaYxhJvYRRzXEbvygrSz 6Xmdnbn4Fv+xxJc4apfFa68jaP+eNjDgTvR5e1V2Dy1fFNxGgtQubhVUoDPcPycL NuWqUmKmKdAW+525nGLdiATZUsZyw4dlJMs8WL0+RnF0j37Tll/9z7/hkWkZMOT5 MP0rVXTfvM3wL4gt+qpPDTQZvdZpllwBJMxNi00G2Vt6jBjSFFUx1mZ0PlSUfDwz KPkkxRCGb1I4660Xpcnh5VEt7rLdMail75Gd+PjNYqPa2ISTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/NrI543GSz3JKs3mXzMawXgfe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTc5N2EyY2MtNTgzMC0z MjljLTk5NDktOWNkMzI4NjJmZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHwFhYzvItwESnUqg8F/P34MOxRXasNQIicsZQhZeWyecKkPDlLhlmA vNpyJf2OEUXMUMm5s+dcLdUqrst8RgJGi58d8tFQZeh3N/0YuQVPkk0oc/bgQBhY cWphrzsXV80FZ4wA20fX96R9x/eI6Rj4oNsNTfbakO/tT4octHDGSyTEOdCXJRnP e4Szw2Qll6+MJBETUnYBs5WaPU8oeE6l8peFBv1DI7IZlJKa7zvRVsdJfYYgdby8 +dKiV+zP1jy8vTquF3E4gTrsNrPPUDuyy3kLBY9bXx7CJgEnhmkOBPGQW0dkHWVq B1XpxwF0O52WNeW41QYQF6CxUy/6htM= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:32 2025 by rpki-client