$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b70274aa-a158-37b4-99ac-c902f3a389c8.roa File: b70274aa-a158-37b4-99ac-c902f3a389c8.roa (raw, json) Hash identifier: fQLrXMw7tp2xJHoXlYyPnZbLPU/E9UvJoN5TP9bzoLs= Subject key identifier: 22:10:92:76:B9:2F:CB:04:03:CA:6D:FE:AD:30:47:3A:41:D7:13:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F1FB98DA8310598D08E3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b70274aa-a158-37b4-99ac-c902f3a389c8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.101.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f1:fb:98:da:83:10:59:8d:08:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1cf8e7e9-064d-4a1f-bfe7-31e9621e50ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:53:15:5c:87:4e:35:39:cd:a0:ce:83:97:9a: 5d:3d:78:dc:c6:62:de:4f:bf:57:d2:42:38:cd:c8: f7:87:88:2d:8b:85:dc:d7:a2:2f:c9:42:c1:1c:66: b4:ba:8b:7b:62:2d:c1:bd:f5:d0:31:bb:21:ff:ca: 1c:33:8e:fa:28:3c:33:74:ba:6d:f8:96:44:f1:56: 67:3d:8c:47:c9:b4:9d:4a:a2:85:cc:55:32:c6:b4: 1d:d2:20:86:b0:b2:2c:12:b3:c9:36:a0:84:69:07: c9:ae:62:98:07:d0:83:cd:2c:63:98:ee:e1:c4:1c: ce:c5:b9:d5:bc:f4:c1:9d:15:14:34:7d:b9:dd:96: cd:f4:f4:03:5a:cb:98:64:09:bc:e0:e2:31:e2:bd: b3:87:c4:1d:a1:cb:6c:e1:04:88:d4:7d:52:b7:d6: ec:b3:d4:29:02:51:87:33:46:27:d1:e6:d0:20:2e: 18:19:94:7b:18:ae:c9:65:77:09:04:56:cb:e4:1e: da:42:7d:1d:12:c2:30:31:60:05:2d:31:af:00:ad: c0:12:20:d9:b3:36:3a:5c:96:01:c9:2e:16:2b:b6: b0:6d:17:38:54:e3:3a:a7:17:c1:24:d6:9e:e0:ba: 35:be:25:46:56:8e:0a:2d:80:04:a3:6f:a9:ae:65: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:10:92:76:B9:2F:CB:04:03:CA:6D:FE:AD:30:47:3A:41:D7:13:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b70274aa-a158-37b4-99ac-c902f3a389c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c6:c0:47:c7:89:11:0b:31:a3:d4:5e:e5:d6:01:2e:44:a1: 52:3f:5a:15:29:05:a8:b3:d7:56:02:fc:9c:f1:bc:71:38:9e: fb:e7:fb:44:e6:2e:64:2b:40:89:f6:6b:f7:0f:a1:09:62:c0: 94:bb:60:0f:fd:4a:ca:77:67:bd:be:e7:33:89:c8:38:00:8b: e8:86:cb:f7:90:64:37:10:2d:34:ac:c8:21:eb:df:7e:63:ea: e1:e5:1f:8f:92:9f:28:d4:0c:35:67:02:b1:86:7d:60:a9:72: 2b:a0:be:94:49:81:08:2e:ca:73:53:77:de:eb:fc:99:0f:ad: 6e:8c:9a:fd:78:fd:a4:2c:92:ef:d0:f3:c2:d3:34:96:be:58: f8:b6:fd:c8:d6:34:36:89:ed:7d:63:df:07:e4:dd:20:4a:ff: 14:49:47:8e:62:5e:c7:6a:6c:d4:38:61:2e:12:5f:75:12:d7: 97:8f:86:96:a4:67:02:51:a9:4c:8a:28:b3:c4:1d:f3:8b:5b: 2e:a2:78:f8:a6:c3:20:3c:18:8a:87:67:e2:e0:17:d0:4d:8f: d4:1c:87:e2:4b:5e:20:20:56:eb:bc:41:67:ea:81:fe:3a:02: d3:ee:74:b3:51:47:25:cf:78:55:17:2e:4f:43:e6:12:6e:97: d3:d7:3a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28fuY2oMQWY0I48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWNmOGU3ZTktMDY0ZC00YTFmLWJmZTctMzFlOTYyMWU1MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1MVXIdONTnNoM6Dl5pdPXjcxmLeT79X0kI4 zcj3h4gti4Xc16IvyULBHGa0uot7Yi3BvfXQMbsh/8ocM476KDwzdLpt+JZE8VZn PYxHybSdSqKFzFUyxrQd0iCGsLIsErPJNqCEaQfJrmKYB9CDzSxjmO7hxBzOxbnV vPTBnRUUNH253ZbN9PQDWsuYZAm84OIx4r2zh8Qdocts4QSI1H1St9bss9QpAlGH M0Yn0ebQIC4YGZR7GK7JZXcJBFbL5B7aQn0dEsIwMWAFLTGvAK3AEiDZszY6XJYB yS4WK7awbRc4VOM6pxfBJNae4Lo1viVGVo4KLYAEo2+prmVLhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIQkna5L8sEA8pt/q0wRzpB1xN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjcwMjc0YWEtYTE1OC0z N2I0LTk5YWMtYzkwMmYzYTM4OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTGwEfHiRELMaPUXuXWAS5EoVI/WhUpBaiz11YC/JzxvHE4nvvn+0Tm LmQrQIn2a/cPoQliwJS7YA/9Ssp3Z72+5zOJyDgAi+iGy/eQZDcQLTSsyCHr335j 6uHlH4+SnyjUDDVnArGGfWCpciugvpRJgQguynNTd97r/JkPrW6Mmv14/aQsku/Q 88LTNJa+WPi2/cjWNDaJ7X1j3wfk3SBK/xRJR45iXsdqbNQ4YS4SX3US15ePhpak ZwJRqUyKKLPEHfOLWy6iePimwyA8GIqHZ+LgF9BNj9Qch+JLXiAgVuu8QWfqgf46 AtPudLNRRyXPeFUXLk9D5hJul9PXOgw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:32:02 2025 by rpki-client