$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa File: c09009c5-923b-3b65-9c38-dc608e00a3d1.roa (raw, json) Hash identifier: F6htAuUoPwZv0gUu8A6qEL/L6EKWxuZSGbXMCdGgsQ4= Subject key identifier: 9B:2F:76:46:01:76:4B:E9:E3:80:53:5E:99:A9:BB:89:DF:00:5E:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2465906FFEDC600B8AE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.109.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:46:59:06:ff:ed:c6:00:b8:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=bfc7fb87-629d-4179-90c9-cb1f858a8661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:e1:a0:23:a1:bb:0c:c3:51:a7:ff:05:ac: 04:07:49:a6:3d:b5:0c:7b:ef:5c:d8:5f:30:b3:43: 70:6b:24:e3:0b:e2:1c:8f:be:81:73:2e:2a:c4:c6: 7f:2f:fd:1d:1d:f6:8a:1a:82:55:9f:5d:c7:e9:d0: 87:d8:43:6f:c4:0e:3b:cd:d4:85:f0:4f:3b:bf:e6: f1:5b:58:36:bd:23:b6:98:9c:0f:0a:6f:51:c9:e8: c5:b4:fd:62:7c:85:a2:7a:a9:ed:b0:8d:c9:b8:16: f5:82:87:fe:50:27:16:d2:aa:07:60:7c:71:3e:b9: 94:fa:4e:92:a5:95:7c:f7:e5:56:79:37:23:9d:b8: 44:22:7a:23:3f:c2:84:5e:6d:a1:0b:b1:c3:2f:3c: 27:6b:5c:ea:f3:47:7f:cf:17:e1:2c:08:6a:64:5e: a7:a4:b9:66:7e:d8:1c:c0:31:ca:ee:c7:19:13:c5: 04:fb:eb:0d:f5:34:10:1d:a9:28:35:d2:a0:83:cb: 87:50:4e:f5:16:86:16:08:b2:d1:11:05:31:86:3d: a7:cf:3b:e9:90:88:ba:39:c7:51:f5:bf:be:b3:88: 1d:51:1a:3a:1a:3e:d6:15:4c:42:34:24:d4:86:f7: 3a:97:84:34:61:9d:f3:46:7e:fb:38:88:9f:48:87: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2F:76:46:01:76:4B:E9:E3:80:53:5E:99:A9:BB:89:DF:00:5E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:1b:57:3e:43:7b:ac:1b:10:7a:4b:92:18:7c:1b:92:fd: f3:fa:02:52:f2:e6:c7:ca:81:4a:9b:c0:03:00:b4:a1:fe:af: 7d:02:6f:98:c9:97:46:ee:8e:d8:fa:09:e9:7c:1e:af:b8:34: 17:5c:fd:b8:cd:e9:8b:4e:83:c4:4f:5b:9b:d2:c4:53:23:31: 48:a6:d4:c8:01:a7:0e:d1:e1:bd:a5:23:0c:af:9a:ee:35:33: 9c:9b:90:81:1e:fb:ea:00:09:90:62:ea:b8:25:30:fc:f3:40: ae:c3:30:45:42:97:d5:24:3f:02:4c:ee:e1:35:95:d4:4f:28: 6c:e9:46:6c:8b:e7:a2:ac:56:57:a0:a7:a8:fd:34:89:54:1e: 55:3f:be:46:af:f6:2d:1d:92:f1:6d:40:6a:3b:4b:6e:dd:e4: c4:24:32:f8:d6:f6:2f:bb:02:68:3c:49:b8:7c:87:eb:b1:75: e9:54:70:b3:62:50:38:91:47:30:49:88:f9:05:1d:2b:12:8f: d3:4a:02:69:1d:a4:ad:0f:f1:4b:65:5c:7f:c9:b0:b9:5a:6e: e1:35:d4:b4:42:3e:a3:67:a5:d8:45:f6:30:59:3a:df:41:d8: 1b:c5:12:79:a6:59:16:65:71:54:e5:8e:82:4c:f5:c0:e8:92: 5f:ed:81:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kZZBv/txgC4rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmZjN2ZiODctNjI5ZC00MTc5LTkwYzktY2IxZjg1OGE4NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVzhoCOhuwzDUaf/BawEB0mmPbUMe+9c2F8w s0NwayTjC+Icj76Bcy4qxMZ/L/0dHfaKGoJVn13H6dCH2ENvxA47zdSF8E87v+bx W1g2vSO2mJwPCm9RyejFtP1ifIWieqntsI3JuBb1gof+UCcW0qoHYHxxPrmU+k6S pZV89+VWeTcjnbhEInojP8KEXm2hC7HDLzwna1zq80d/zxfhLAhqZF6npLlmftgc wDHK7scZE8UE++sN9TQQHakoNdKgg8uHUE71FoYWCLLREQUxhj2nzzvpkIi6OcdR 9b++s4gdURo6Gj7WFUxCNCTUhvc6l4Q0YZ3zRn77OIifSIdkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsvdkYBdkvp44BTXpmpu4nfAF5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzA5MDA5YzUtOTIzYi0z YjY1LTljMzgtZGM2MDhlMDBhM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMyG1c+Q3usGxB6S5IYfBuS/fP6AlLy5sfKgUqbwAMAtKH+r30Cb5jJ l0bujtj6Cel8Hq+4NBdc/bjN6YtOg8RPW5vSxFMjMUim1MgBpw7R4b2lIwyvmu41 M5ybkIEe++oACZBi6rglMPzzQK7DMEVCl9UkPwJM7uE1ldRPKGzpRmyL56KsVleg p6j9NIlUHlU/vkav9i0dkvFtQGo7S27d5MQkMvjW9i+7Amg8Sbh8h+uxdelUcLNi UDiRRzBJiPkFHSsSj9NKAmkdpK0P8UtlXH/JsLlabuE11LRCPqNnpdhF9jBZOt9B 2BvFEnmmWRZlcVTljoJM9cDokl/tgdY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:01 2025 by rpki-client