$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa File: a9e9f418-93e9-3eeb-b336-c509d8583262.roa (raw, json) Hash identifier: JfT53gz/2p5I0oIlz6veDG0/+Mz3daMNDO9jK0kirqY= Subject key identifier: AF:96:0A:A2:4F:FE:4A:11:E9:94:6A:8B:30:65:BB:5E:BE:4F:BC:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26B321BA63DF590373A04 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.99.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6b:32:1b:a6:3d:f5:90:37:3a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=57a1c136-4f33-43fd-bb91-0c5af042d09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:3c:ce:f4:d1:b2:c1:2d:fe:c8:76:98:18: 64:c5:a0:9f:e7:e5:64:53:71:be:78:cd:0b:4f:50: 2c:88:dd:f8:8d:aa:b0:4f:19:28:38:c9:09:af:ee: 24:fe:c0:45:5f:76:ca:46:9b:26:51:1a:ed:f2:de: f7:73:15:4e:f1:6d:f2:76:70:58:5f:28:2a:b9:ab: cd:b3:05:ea:ff:b6:82:ba:84:38:41:54:26:3e:dd: b0:c0:58:17:da:cb:62:9c:4e:c0:4f:01:cb:5f:15: 79:95:c3:e8:94:12:2c:63:71:43:8f:a8:1c:f5:bb: fc:13:52:94:e9:4a:15:ac:66:bb:06:be:2d:26:e5: f0:bf:e4:2f:a2:f8:b5:a1:03:f3:e9:1d:b6:34:52: 8d:f4:31:d7:f3:70:87:13:54:54:b0:b4:03:2f:97: 3c:ff:16:96:56:f1:84:de:65:04:c2:db:88:07:48: f1:91:c1:62:90:61:85:00:a3:35:ff:12:c7:45:df: bf:62:74:11:f5:92:ff:86:7d:8a:68:1f:0a:1a:c5: f0:21:d7:b1:2a:c8:b8:34:22:20:d4:78:f3:f9:c9: 0d:fa:4e:7c:b3:98:b5:f7:80:fc:b7:c3:a8:34:5a: 31:f6:76:24:21:c4:60:56:db:35:d8:1f:db:13:60: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:0A:A2:4F:FE:4A:11:E9:94:6A:8B:30:65:BB:5E:BE:4F:BC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:db:39:b3:a7:dc:71:48:7a:0e:97:d8:a1:14:6b:8e:0e:15: 2c:8e:45:60:30:24:30:f1:f9:07:9d:ad:05:57:62:46:42:91: 05:3d:40:89:b9:71:84:24:fb:5c:b0:24:b7:b5:81:a9:57:1c: 5c:d6:1a:0b:b3:0f:46:5b:3c:41:05:01:9e:aa:65:74:0e:84: ed:00:21:ab:d9:c2:a9:b7:20:fe:2d:2e:6d:e6:44:3d:2a:7d: 7c:cb:1e:16:4c:a3:70:32:1a:b5:9c:8e:31:7d:8c:f8:85:67: 8b:30:5c:50:cc:43:98:69:cf:f1:cb:81:70:86:a7:d4:0d:d2: 4e:f3:94:45:1a:1f:00:fc:fc:8f:f4:8a:02:6a:aa:99:fe:03: 29:3e:49:07:58:3b:cf:8a:8a:59:6c:20:41:ff:4a:d5:f1:75: 7c:76:16:f4:44:a9:1b:ab:6f:9b:79:be:58:05:fc:07:3c:ef: 3b:de:ab:92:61:c8:6b:cf:6b:22:76:a8:13:e6:b7:d4:ae:d7: 01:c1:57:0b:43:dc:b4:ae:6b:8d:67:f2:1c:7d:bb:22:1a:76: 03:3c:09:11:71:f9:7d:b2:d5:e8:bf:b8:79:24:13:b1:68:23: c6:3e:7c:06:35:67:fd:02:0f:68:77:93:e8:88:25:74:04:9d: b1:1a:35:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28msyG6Y99ZA3OgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTdhMWMxMzYtNGYzMy00M2ZkLWJiOTEtMGM1YWYwNDJkMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohw8zvTRssEt/sh2mBhkxaCf5+VkU3G+eM0L T1AsiN34jaqwTxkoOMkJr+4k/sBFX3bKRpsmURrt8t73cxVO8W3ydnBYXygquavN swXq/7aCuoQ4QVQmPt2wwFgX2stinE7ATwHLXxV5lcPolBIsY3FDj6gc9bv8E1KU 6UoVrGa7Br4tJuXwv+Qvovi1oQPz6R22NFKN9DHX83CHE1RUsLQDL5c8/xaWVvGE 3mUEwtuIB0jxkcFikGGFAKM1/xLHRd+/YnQR9ZL/hn2KaB8KGsXwIdexKsi4NCIg 1Hjz+ckN+k58s5i194D8t8OoNFox9nYkIcRgVts12B/bE2DJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+WCqJP/koR6ZRqizBlu16+T7xDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTllOWY0MTgtOTNlOS0z ZWViLWIzMzYtYzUwOWQ4NTgzMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjbObOn3HFIeg6X2KEUa44OFSyORWAwJDDx+QedrQVXYkZCkQU9QIm5 cYQk+1ywJLe1galXHFzWGguzD0ZbPEEFAZ6qZXQOhO0AIavZwqm3IP4tLm3mRD0q fXzLHhZMo3AyGrWcjjF9jPiFZ4swXFDMQ5hpz/HLgXCGp9QN0k7zlEUaHwD8/I/0 igJqqpn+Ayk+SQdYO8+KillsIEH/StXxdXx2FvREqRurb5t5vlgF/Ac87zveq5Jh yGvPayJ2qBPmt9Su1wHBVwtD3LSua41n8hx9uyIadgM8CRFx+X2y1ei/uHkkE7Fo I8Y+fAY1Z/0CD2h3k+iIJXQEnbEaNcM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:48:00 2025 by rpki-client