$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be051bf6-8a02-3dbb-a7c0-d76e69757028.roa File: be051bf6-8a02-3dbb-a7c0-d76e69757028.roa (raw, json) Hash identifier: MfGolnuhgAzVwKssOvujyNX9HYODTyr1wWZwQFzs0C8= Subject key identifier: 31:74:D1:72:24:33:30:57:4A:C6:68:1F:31:2A:DA:CB:33:A4:69:18 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2415D7C50D7290019EF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be051bf6-8a02-3dbb-a7c0-d76e69757028.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.6.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:41:5d:7c:50:d7:29:00:19:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=fc6dc4bf-972c-4d5a-a362-5714604d2870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:ff:df:64:de:2e:ff:0a:ff:87:3d:d4:ca: 24:0e:a7:7f:47:88:31:68:4f:a3:12:bf:23:1d:c2: f8:03:b1:53:31:67:9d:1b:87:fd:e2:4a:66:31:cc: 84:14:aa:e8:e2:78:b0:9b:40:57:ac:89:00:e7:b9: f4:b8:5b:57:dc:ac:43:51:15:2d:bd:53:2f:e6:75: a4:74:26:63:86:f6:8f:74:2a:be:5b:fb:e9:3f:96: 68:cf:04:c3:6c:28:47:b5:c6:17:b3:ea:3c:ab:75: 46:6c:50:fb:d5:28:5f:f9:fb:7c:06:92:aa:09:3d: 81:26:e5:9d:7e:d2:63:25:d8:96:da:7e:04:61:ef: 34:1e:c3:4e:65:6c:f9:6d:57:cf:09:08:e8:cc:3b: a7:d3:e9:ba:18:e9:ed:10:1b:80:71:78:55:05:eb: 44:83:91:de:3b:57:9c:da:b9:d2:09:13:d2:0e:2a: 19:a6:9e:fe:a8:45:17:ec:c7:ac:8c:dd:1e:75:8a: 71:27:1e:85:c9:49:f0:c1:4d:57:3b:4d:8b:05:9e: 1c:6b:59:ea:c4:cc:89:b8:4e:79:83:87:02:21:3b: ce:da:c9:70:ef:43:d4:63:db:43:e3:f7:41:80:40: 74:6f:02:04:cb:b0:82:a9:14:7f:89:a5:c2:3a:d6: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:D1:72:24:33:30:57:4A:C6:68:1F:31:2A:DA:CB:33:A4:69:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be051bf6-8a02-3dbb-a7c0-d76e69757028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c0:48:56:1a:a3:b2:c3:bb:47:68:43:57:b5:89:a9:6d:4c: 80:d6:a8:3f:4d:c7:ba:1d:a3:d0:56:be:d2:19:8c:d2:7c:0f: e1:7b:41:ef:da:f8:93:77:2e:d4:81:4e:07:50:2a:cc:a4:fb: c8:d9:0d:e3:db:f2:a3:70:6d:b1:4c:f7:ba:14:09:df:23:f3: 24:9f:12:e0:71:76:62:22:6d:cc:eb:c8:7d:74:0b:ba:52:73: ad:ef:65:28:cc:e2:cc:c6:5b:4d:3d:e7:9b:70:47:47:f7:65: 41:a0:8c:78:67:b4:2b:30:0b:1e:73:ed:5e:63:a5:c3:aa:cb: 04:23:52:f3:93:91:68:7e:a6:a5:cc:7e:83:a1:c1:3e:3d:a2: 54:f6:ab:04:b1:a0:77:95:7b:d5:84:2e:36:0f:81:54:1e:ce: 05:b0:8b:d8:eb:01:21:36:d3:13:04:27:f7:84:cc:0d:16:4e: 0d:a5:74:b2:ae:7b:39:d5:d2:bc:0a:46:47:15:69:2b:44:4f: 1f:a1:42:e0:ec:79:c5:74:96:a9:37:a3:8e:af:e5:46:99:14: c0:3b:49:2a:04:bd:a9:46:97:61:73:bd:c1:d3:d1:3b:c6:f9: c2:b8:ef:e9:36:b9:fb:dc:c4:2c:07:77:00:93:10:13:40:d5: dc:15:c6:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kFdfFDXKQAZ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZmM2ZGM0YmYtOTcyYy00ZDVhLWEzNjItNTcxNDYwNGQyODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNH/32TeLv8K/4c91MokDqd/R4gxaE+jEr8j HcL4A7FTMWedG4f94kpmMcyEFKro4niwm0BXrIkA57n0uFtX3KxDURUtvVMv5nWk dCZjhvaPdCq+W/vpP5ZozwTDbChHtcYXs+o8q3VGbFD71Shf+ft8BpKqCT2BJuWd ftJjJdiW2n4EYe80HsNOZWz5bVfPCQjozDun0+m6GOntEBuAcXhVBetEg5HeO1ec 2rnSCRPSDioZpp7+qEUX7MesjN0edYpxJx6FyUnwwU1XO02LBZ4ca1nqxMyJuE55 g4cCITvO2slw70PUY9tD4/dBgEB0bwIEy7CCqRR/iaXCOtZnBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF00XIkMzBXSsZoHzEq2sszpGkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmUwNTFiZjYtOGEwMi0z ZGJiLWE3YzAtZDc2ZTY5NzU3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbASFYao7LDu0doQ1e1ialtTIDWqD9Nx7odo9BWvtIZjNJ8D+F7Qe/a +JN3LtSBTgdQKsyk+8jZDePb8qNwbbFM97oUCd8j8ySfEuBxdmIibczryH10C7pS c63vZSjM4szGW00955twR0f3ZUGgjHhntCswCx5z7V5jpcOqywQjUvOTkWh+pqXM foOhwT49olT2qwSxoHeVe9WELjYPgVQezgWwi9jrASE20xMEJ/eEzA0WTg2ldLKu eznV0rwKRkcVaStETx+hQuDsecV0lqk3o46v5UaZFMA7SSoEvalGl2FzvcHT0TvG +cK47+k2ufvcxCwHdwCTEBNA1dwVxg4= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:00 2025 by rpki-client