$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b13b0abc-e148-3e7b-ac7f-b2beaadd60cd.roa File: b13b0abc-e148-3e7b-ac7f-b2beaadd60cd.roa (raw, json) Hash identifier: qEIJalRFoS37mUazlgQY8UlTgtylMUQFisFXWC21+YM= Subject key identifier: 49:90:1E:9C:AB:18:D1:2D:1E:B5:58:F9:86:D6:76:EB:73:25:72:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F272465B876C4C46C1D3D0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b13b0abc-e148-3e7b-ac7f-b2beaadd60cd.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:72:46:5b:87:6c:4c:46:c1:d3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=cd48cbb3-35f0-427e-854f-c152bdeaefab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:d1:99:86:d2:dd:45:5d:fa:90:f9:ce:b1: fb:3a:b8:37:ef:d5:fb:df:cb:59:51:f5:f4:17:51: 1b:89:dd:3c:91:30:3a:50:3d:ed:5c:fb:a0:39:bb: fd:ee:fb:bd:42:62:ab:b6:fa:b8:a6:15:01:1e:b2: f5:69:a5:a5:e5:65:e4:e5:40:35:3e:d9:0b:29:e0: 70:af:85:93:25:21:6d:b3:cc:cd:61:ef:b7:00:12: 14:f4:0b:32:d3:a6:f3:a5:a1:65:ff:49:a5:d9:6a: cf:6c:d9:28:87:c3:4f:b8:5b:81:15:85:7c:b2:14: 83:f0:51:b9:c9:04:2f:d5:8d:9c:a7:9f:45:74:3d: cc:be:10:d9:b8:7a:8c:73:ed:fb:42:bf:4b:e0:7a: f5:11:c9:9f:a8:c8:a5:f7:b4:02:8b:07:f6:16:42: bb:22:aa:2a:44:b2:2d:29:de:b9:eb:96:5a:09:a5: 3b:30:4e:26:37:69:fd:47:4e:94:1d:b0:d7:13:e0: 76:0e:8a:fb:4b:c6:4a:d3:1d:09:37:ac:c7:91:6a: dc:88:e4:52:15:12:56:ac:97:65:f2:43:01:a1:be: 59:2d:ec:a4:42:a3:54:a8:8b:56:3d:86:e7:56:6d: 97:d1:05:d5:7f:77:e3:3e:8e:51:46:0f:43:14:e3: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:90:1E:9C:AB:18:D1:2D:1E:B5:58:F9:86:D6:76:EB:73:25:72:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b13b0abc-e148-3e7b-ac7f-b2beaadd60cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:be:4b:5a:12:49:34:12:25:cb:c2:a2:f3:58:4b:01:75:a3: 3e:7b:4b:49:7e:8a:d7:71:7c:f4:1a:1e:f6:9d:9d:19:05:72: c0:69:46:e1:05:92:1f:e3:f4:8e:3f:ce:bc:68:2d:c8:2c:d1: ef:c7:44:5c:19:43:62:af:81:73:b7:ff:06:be:a5:3e:49:c1: f3:b6:cb:54:01:2d:b8:d1:01:cf:3b:cf:1b:06:66:15:a6:79: c4:ec:11:93:60:ad:7d:f3:13:03:1d:b4:e7:63:6d:ca:96:67: 23:bf:e9:82:26:c7:33:bd:ea:c0:c7:23:d7:88:e8:9c:e8:07: 63:97:95:ba:e4:a6:dd:0b:77:57:5e:5f:a3:59:a5:bc:51:28: ed:da:7c:7e:e7:3b:0b:ed:3d:17:66:d8:64:d4:be:76:4c:c7: f4:3c:e1:a3:d4:08:54:ae:0b:ba:74:43:9b:50:93:c8:01:30: 8c:8c:17:c9:a1:ec:51:57:fd:09:ba:78:05:21:42:5a:9a:f7: ec:a0:6b:bd:c1:7f:55:3c:2e:bf:27:bd:53:12:2f:d3:b0:70: c6:8d:17:c8:e7:d4:28:85:b1:1e:95:a9:9e:a1:a1:9e:81:f6: 5a:8c:56:9b:85:9a:8c:14:43:8a:bd:dd:a7:35:f4:58:1e:da: 5d:fc:0f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nJGW4dsTEbB09AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2Q0OGNiYjMtMzVmMC00MjdlLTg1NGYtYzE1MmJkZWFlZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomrRmYbS3UVd+pD5zrH7Org379X738tZUfX0 F1Ebid08kTA6UD3tXPugObv97vu9QmKrtvq4phUBHrL1aaWl5WXk5UA1PtkLKeBw r4WTJSFts8zNYe+3ABIU9Asy06bzpaFl/0ml2WrPbNkoh8NPuFuBFYV8shSD8FG5 yQQv1Y2cp59FdD3MvhDZuHqMc+37Qr9L4Hr1EcmfqMil97QCiwf2FkK7IqoqRLIt Kd6565ZaCaU7ME4mN2n9R06UHbDXE+B2Dor7S8ZK0x0JN6zHkWrciORSFRJWrJdl 8kMBob5ZLeykQqNUqItWPYbnVm2X0QXVf3fjPo5RRg9DFOMWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmQHpyrGNEtHrVY+YbWdutzJXJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjEzYjBhYmMtZTE0OC0z ZTdiLWFjN2YtYjJiZWFhZGQ2MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC+S1oSSTQSJcvCovNYSwF1oz57S0l+itdxfPQaHvadnRkFcsBpRuEF kh/j9I4/zrxoLcgs0e/HRFwZQ2KvgXO3/wa+pT5JwfO2y1QBLbjRAc87zxsGZhWm ecTsEZNgrX3zEwMdtOdjbcqWZyO/6YImxzO96sDHI9eI6JzoB2OXlbrkpt0Ld1de X6NZpbxRKO3afH7nOwvtPRdm2GTUvnZMx/Q84aPUCFSuC7p0Q5tQk8gBMIyMF8mh 7FFX/Qm6eAUhQlqa9+yga73Bf1U8Lr8nvVMSL9OwcMaNF8jn1CiFsR6VqZ6hoZ6B 9lqMVpuFmowUQ4q93ac19Fge2l38D+A= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:26 2025 by rpki-client