$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf56c46a-9136-3dc5-853a-c4c99e389396.roa File: bf56c46a-9136-3dc5-853a-c4c99e389396.roa (raw, json) Hash identifier: WqqcVz67edG5jOdwg+ENPJPcnT4aufnfmVQAzguqxGk= Subject key identifier: A0:76:82:CE:44:67:6A:0B:02:E3:8C:8F:6E:9F:F5:E6:33:35:FA:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F243784E05C662091F1C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf56c46a-9136-3dc5-853a-c4c99e389396.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:43:78:4e:05:c6:62:09:1f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a313e919-9d19-4e2e-9a8a-bd7c80f15e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:ce:ba:3a:e5:10:66:f7:a7:d2:c9:aa:ef: 9e:93:dd:f7:08:57:82:a1:1d:50:2b:e6:fe:eb:1d: d2:74:14:5e:89:72:e5:46:c1:6c:13:96:99:80:14: e2:9e:2c:68:bc:5a:e9:8b:f1:de:e6:a0:9a:e9:df: e9:b3:f4:28:b0:94:b8:4d:82:eb:71:29:fc:91:f1: d0:7d:cf:14:10:a0:f2:63:5e:65:0c:4e:7e:ca:07: f9:b2:76:b6:e8:4f:1c:2e:50:e1:8d:0d:d1:92:26: 0d:8e:85:7f:93:a0:6f:74:9c:9c:6e:40:30:6f:f0: 2d:28:e2:13:2a:ed:ce:c3:e7:63:0f:c0:dd:ba:ea: 76:f1:03:48:66:97:9b:0c:b1:ab:85:a3:61:1c:25: df:08:e1:dd:60:d5:b8:d7:ce:68:f8:2b:71:91:f4: 0d:a7:31:11:66:81:5b:58:92:9c:e9:d1:d9:53:d5: fd:a0:59:9e:c1:1a:49:99:cf:3b:b7:b3:98:f7:3a: a0:4e:8e:47:1c:58:6a:02:15:47:db:c9:df:e3:82: 97:ad:e1:93:93:a4:ca:68:45:26:ea:41:84:fa:fb: 31:00:3a:7a:5e:eb:46:d5:4b:a9:c7:e4:78:33:d6: 96:e5:ab:aa:6b:3d:9e:76:f2:ef:e4:b0:24:5b:a2: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:82:CE:44:67:6A:0B:02:E3:8C:8F:6E:9F:F5:E6:33:35:FA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf56c46a-9136-3dc5-853a-c4c99e389396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:77:6c:41:74:89:10:d0:c2:c9:aa:37:30:96:72:e0:a7:bc: 1c:f0:c2:65:e2:7b:57:e7:41:18:f3:4a:f2:4f:59:4b:38:4d: 67:17:3a:45:0f:ae:d6:b1:6b:2a:9b:8f:29:f8:df:16:0a:53: b0:ad:c3:ec:3f:15:49:63:53:87:7f:87:43:ae:90:4d:fd:ae: dd:bc:d7:26:a5:87:60:7d:d7:9a:d7:6c:09:4a:02:c6:4a:33: 9f:58:a9:b8:ef:2e:64:91:8b:5f:41:71:15:6b:59:a3:d4:5b: 0f:5b:32:9e:e2:9b:bc:1a:86:0f:4b:e5:41:b5:25:5c:dc:b8: 6b:81:cb:1b:2a:df:aa:7f:48:16:24:2d:d2:08:d2:51:cf:9c: 50:01:d9:e6:68:af:9c:f3:6a:10:af:ec:3c:4c:86:cd:94:8c: 5f:21:83:e2:01:25:f5:d3:63:ea:a8:b9:f6:cc:0c:6d:3d:ec: 02:c1:88:ee:6c:c9:de:68:fb:84:47:28:d0:85:02:22:e6:79: be:3f:68:17:f6:02:a8:85:13:21:05:e1:a5:ef:e5:27:d8:76: de:1e:62:c8:31:43:cb:56:bf:be:de:bd:0a:7f:35:62:1f:b5: 20:b3:dd:6a:e9:1b:7f:2a:da:d5:9d:0d:e9:7c:e5:7d:82:84: 00:84:66:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kN4TgXGYgkfHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTMxM2U5MTktOWQxOS00ZTJlLTlhOGEtYmQ3YzgwZjE1ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8jOujrlEGb3p9LJqu+ek933CFeCoR1QK+b+ 6x3SdBReiXLlRsFsE5aZgBTinixovFrpi/He5qCa6d/ps/QosJS4TYLrcSn8kfHQ fc8UEKDyY15lDE5+ygf5sna26E8cLlDhjQ3RkiYNjoV/k6BvdJycbkAwb/AtKOIT Ku3Ow+djD8Dduup28QNIZpebDLGrhaNhHCXfCOHdYNW4185o+CtxkfQNpzERZoFb WJKc6dHZU9X9oFmewRpJmc87t7OY9zqgTo5HHFhqAhVH28nf44KXreGTk6TKaEUm 6kGE+vsxADp6XutG1Uupx+R4M9aW5auqaz2edvLv5LAkW6JjJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB2gs5EZ2oLAuOMj26f9eYzNfqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmY1NmM0NmEtOTEzNi0z ZGM1LTg1M2EtYzRjOTllMzg5Mzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh3bEF0iRDQwsmqNzCWcuCnvBzwwmXie1fnQRjzSvJPWUs4TWcXOkUP rtaxayqbjyn43xYKU7Ctw+w/FUljU4d/h0OukE39rt281yalh2B915rXbAlKAsZK M59YqbjvLmSRi19BcRVrWaPUWw9bMp7im7wahg9L5UG1JVzcuGuByxsq36p/SBYk LdII0lHPnFAB2eZor5zzahCv7DxMhs2UjF8hg+IBJfXTY+qoufbMDG097ALBiO5s yd5o+4RHKNCFAiLmeb4/aBf2AqiFEyEF4aXv5SfYdt4eYsgxQ8tWv77evQp/NWIf tSCz3WrpG38q2tWdDel85X2ChACEZok= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:42 2025 by rpki-client