$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b28141d0-484c-3247-9c3f-b657c1ddb5c9.roa File: b28141d0-484c-3247-9c3f-b657c1ddb5c9.roa (raw, json) Hash identifier: OjHcIpqfSVEWniSUSyuUUhZaVJmBcv8oVax4hemzkhA= Subject key identifier: 2B:7F:3A:5A:46:AB:7F:B2:49:1A:D7:56:2D:5B:76:82:46:4D:19:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F277C7518F5C85C0A4E180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b28141d0-484c-3247-9c3f-b657c1ddb5c9.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:77:c7:51:8f:5c:85:c0:a4:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d72b3c01-0d02-4890-a3e0-ab9d3ee6dc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:76:08:04:30:43:19:dd:85:76:b2:df:05: ce:2c:c0:47:88:0a:44:77:af:f9:8a:c3:3a:43:66: e3:26:ec:07:61:d8:6f:d9:fe:aa:ce:c5:d9:20:b6: 04:8d:24:8a:cb:ce:ad:ba:9d:06:5d:d5:47:f3:f6: 4b:21:e6:e4:60:9c:03:e8:b8:10:1a:f8:45:e4:02: 02:51:7c:62:2a:a9:48:c9:7c:6e:0f:23:48:ff:99: a2:72:bb:3b:f8:44:19:db:65:84:fe:72:27:65:90: 39:aa:72:86:ce:24:5d:34:e0:8b:30:db:0c:a3:04: ab:da:c1:ec:39:f8:41:3d:4d:04:66:d0:33:fb:ec: 43:cc:47:df:e0:95:6a:65:c4:65:1f:4e:79:cf:86: 23:e6:0b:7d:7e:23:99:e3:bc:b1:b3:32:d6:16:51: 04:e4:61:aa:2d:59:89:07:1b:07:1d:d0:9e:9d:77: 57:9e:d1:c6:d2:3a:ad:97:b3:6d:32:9b:98:6b:77: b3:3e:94:2d:83:2b:a8:43:8c:ea:f3:a1:f2:72:e0: 97:46:99:19:9d:06:47:f7:eb:dd:1f:c9:ea:85:bd: af:80:39:2e:53:a5:2f:14:30:72:59:cc:1e:00:61: 90:80:ea:84:c6:86:a4:c1:a4:55:b4:7a:fd:6d:d3: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7F:3A:5A:46:AB:7F:B2:49:1A:D7:56:2D:5B:76:82:46:4D:19:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b28141d0-484c-3247-9c3f-b657c1ddb5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e5:c3:48:52:51:1c:b6:c3:06:8b:11:46:84:69:6c:6c:39: 9f:50:ad:9e:ed:29:f2:48:b2:36:56:67:9d:aa:7f:8e:bc:50: 83:5e:1b:71:2e:76:08:50:51:47:89:1a:c2:b4:67:29:02:b1: 8f:80:44:cb:dd:86:b1:79:9d:3b:b7:22:1a:82:84:04:bb:04: 14:e5:1d:c1:9c:d9:25:dd:57:c1:53:da:5b:dc:b6:7c:50:cb: 89:74:28:98:c5:14:6e:04:13:87:d7:6d:b5:d5:b9:90:6b:03: 0b:57:74:89:c2:d0:89:d1:b4:cc:5d:af:43:fe:0d:54:0e:62: 5b:f5:e6:81:40:30:5d:51:2b:73:e3:f1:e1:93:51:1a:73:8f: 67:ae:62:d7:3d:09:fd:4a:db:d3:2d:cb:41:34:4a:0f:7e:9a: 78:76:28:57:c3:d1:7d:0f:9e:c3:a0:4a:c4:2c:c0:d0:95:79: 0a:5c:e5:6a:a7:7b:33:8e:e6:9a:f6:f1:1e:a0:95:dd:0c:3d: 57:5b:97:0c:1f:6e:77:6f:c4:55:72:61:78:05:0a:06:43:3b: fa:a0:b0:b1:5c:f6:77:7e:b4:3a:58:01:dd:97:71:86:29:20: 65:4d:ed:4e:7b:48:5c:a6:cc:e1:bd:6a:f4:64:a8:9b:ce:6f: a8:ea:6f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nfHUY9chcCk4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDcyYjNjMDEtMGQwMi00ODkwLWEzZTAtYWI5ZDNlZTZkYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi512CAQwQxndhXay3wXOLMBHiApEd6/5isM6 Q2bjJuwHYdhv2f6qzsXZILYEjSSKy86tup0GXdVH8/ZLIebkYJwD6LgQGvhF5AIC UXxiKqlIyXxuDyNI/5micrs7+EQZ22WE/nInZZA5qnKGziRdNOCLMNsMowSr2sHs OfhBPU0EZtAz++xDzEff4JVqZcRlH055z4Yj5gt9fiOZ47yxszLWFlEE5GGqLVmJ BxsHHdCenXdXntHG0jqtl7NtMpuYa3ezPpQtgyuoQ4zq86HycuCXRpkZnQZH9+vd H8nqhb2vgDkuU6UvFDByWcweAGGQgOqExoakwaRVtHr9bdMz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt/OlpGq3+ySRrXVi1bdoJGTRnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjI4MTQxZDAtNDg0Yy0z MjQ3LTljM2YtYjY1N2MxZGRiNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7lw0hSURy2wwaLEUaEaWxsOZ9QrZ7tKfJIsjZWZ52qf468UINeG3Eu dghQUUeJGsK0ZykCsY+ARMvdhrF5nTu3IhqChAS7BBTlHcGc2SXdV8FT2lvctnxQ y4l0KJjFFG4EE4fXbbXVuZBrAwtXdInC0InRtMxdr0P+DVQOYlv15oFAMF1RK3Pj 8eGTURpzj2euYtc9Cf1K29Mty0E0Sg9+mnh2KFfD0X0PnsOgSsQswNCVeQpc5Wqn ezOO5pr28R6gld0MPVdblwwfbndvxFVyYXgFCgZDO/qgsLFc9nd+tDpYAd2XcYYp IGVN7U57SFymzOG9avRkqJvOb6jqb40= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:43 2025 by rpki-client