$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/999b0af5-6e05-33e2-a3f3-faf00fffd0b4.roa File: 999b0af5-6e05-33e2-a3f3-faf00fffd0b4.roa (raw, json) Hash identifier: P5S1Zm/5vLwnEIXC2k+GKBW3nhS4Mi9CeTodZ3TbljI= Subject key identifier: B1:CD:84:0F:85:A2:4D:79:D6:A2:9D:1E:3B:02:45:59:5C:98:23:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20836BAA213A937E87080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/999b0af5-6e05-33e2-a3f3-faf00fffd0b4.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.109.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:08:36:ba:a2:13:a9:37:e8:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=70ee8b10-75e4-46b7-a9c6-8d9c5dfbb639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:57:9e:3b:f0:68:50:78:52:8f:91:f9:23: d6:a2:91:49:f3:8d:74:57:fc:19:fe:ba:11:00:f1: 04:79:aa:0f:8b:ca:49:a9:bb:fa:0f:fe:42:8c:df: 83:2e:61:51:0e:25:e5:ad:14:2d:01:6c:ca:92:4b: 34:a4:4d:a9:2c:bd:c4:ea:80:86:09:39:66:bb:bb: 32:c7:d6:a8:75:e1:7d:6c:b4:a1:a7:66:8b:26:fb: 3c:6f:16:02:68:c9:6e:51:06:15:c6:24:28:76:bd: 09:7b:9b:9f:05:0d:2d:55:9a:55:23:19:c5:d5:4d: 50:03:48:a0:0d:05:dc:86:e2:36:b4:42:bb:1e:b5: d8:32:23:1a:88:b7:06:fc:e4:e6:ec:f5:6a:2d:53: 9c:0b:fa:65:48:f6:4f:23:31:c7:d6:16:0e:03:5b: 0a:08:92:01:36:c2:f2:ef:0f:ac:3c:bd:22:34:40: d0:fa:5b:3c:c5:bf:82:48:c2:f5:5c:d1:3d:a6:f7: 07:fd:d1:e7:d8:0d:ba:31:5c:9a:7e:5f:f4:dc:12: 1b:b1:dc:25:c6:c1:f9:11:75:bf:ae:75:0a:e4:0c: 6d:14:72:60:44:60:f7:a2:58:0d:ed:89:00:c7:de: 79:ac:50:f2:b7:87:b7:ac:8a:eb:ec:95:7d:69:15: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CD:84:0F:85:A2:4D:79:D6:A2:9D:1E:3B:02:45:59:5C:98:23:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/999b0af5-6e05-33e2-a3f3-faf00fffd0b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:48:c7:fa:ab:a3:cc:ce:a8:29:43:f2:4c:1d:7e:9d:ef:e8: c5:fd:b5:20:6d:84:c1:9f:5f:44:a0:a0:f5:72:23:5a:a3:b0: 50:07:0c:3c:0e:56:0e:5b:04:27:a6:6b:04:fb:69:0e:d9:3f: 13:30:c3:22:48:88:c0:7b:8d:f3:15:2f:09:f6:77:c2:08:a5: c3:d2:00:c3:66:01:1e:ff:12:a8:0c:a4:a2:93:ce:3c:d2:a0: 9b:2a:72:e0:65:c3:85:03:14:66:33:e3:54:dc:8c:c7:d8:88: 80:eb:37:ed:ff:d2:69:50:8b:f4:03:cc:46:03:ad:50:c9:f2: 11:ba:0b:d5:aa:c6:59:9b:c6:19:33:14:f1:67:93:f4:99:81: 69:bd:f3:2f:4c:e6:ca:cd:9d:d1:38:00:bf:87:8f:a9:81:0c: 6c:b2:34:05:06:39:7a:c9:5e:8f:57:16:d2:7e:91:ec:cc:4d: cd:33:b7:82:cf:aa:c2:9b:f4:24:b2:26:ca:58:5c:b3:b6:48: 24:89:40:b6:54:db:0f:76:5a:ef:bd:3e:f6:d4:49:77:9d:e3: 81:36:79:e8:3a:ae:c8:ab:f4:4a:58:e1:a9:d8:51:de:e1:03: 8a:43:fe:2d:25:2f:66:23:0a:49:35:91:5a:82:66:9c:ee:ac: 4d:6f:cc:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gg2uqITqTfocIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzBlZThiMTAtNzVlNC00NmI3LWE5YzYtOGQ5YzVkZmJiNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHRXnjvwaFB4Uo+R+SPWopFJ8410V/wZ/roR APEEeaoPi8pJqbv6D/5CjN+DLmFRDiXlrRQtAWzKkks0pE2pLL3E6oCGCTlmu7sy x9aodeF9bLShp2aLJvs8bxYCaMluUQYVxiQodr0Je5ufBQ0tVZpVIxnF1U1QA0ig DQXchuI2tEK7HrXYMiMaiLcG/OTm7PVqLVOcC/plSPZPIzHH1hYOA1sKCJIBNsLy 7w+sPL0iNEDQ+ls8xb+CSML1XNE9pvcH/dHn2A26MVyafl/03BIbsdwlxsH5EXW/ rnUK5AxtFHJgRGD3olgN7YkAx955rFDyt4e3rIrr7JV9aRXhowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHNhA+Fok151qKdHjsCRVlcmCMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk5YjBhZjUtNmUwNS0z M2UyLWEzZjMtZmFmMDBmZmZkMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9Ix/qro8zOqClD8kwdfp3v6MX9tSBthMGfX0SgoPVyI1qjsFAHDDwO Vg5bBCemawT7aQ7ZPxMwwyJIiMB7jfMVLwn2d8IIpcPSAMNmAR7/EqgMpKKTzjzS oJsqcuBlw4UDFGYz41TcjMfYiIDrN+3/0mlQi/QDzEYDrVDJ8hG6C9Wqxlmbxhkz FPFnk/SZgWm98y9M5srNndE4AL+Hj6mBDGyyNAUGOXrJXo9XFtJ+kezMTc0zt4LP qsKb9CSyJspYXLO2SCSJQLZU2w92Wu+9PvbUSXed44E2eeg6rsir9EpY4anYUd7h A4pD/i0lL2YjCkk1kVqCZpzurE1vzNI= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:53 2025 by rpki-client