$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2f4a57d-e010-3d13-9c47-d769433b7d93.roa File: c2f4a57d-e010-3d13-9c47-d769433b7d93.roa (raw, json) Hash identifier: lFWm4H+lFidOysRheLq1STuBRV+v3tkKTywLWLlQ+Gw= Subject key identifier: 3E:20:C8:79:AD:09:62:E7:39:01:E9:96:FE:0B:67:D4:60:60:60:E9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2727956E0C66475D14E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2f4a57d-e010-3d13-9c47-d769433b7d93.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:72:79:56:e0:c6:64:75:d1:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=34bc92f9-9ef1-45dd-ba51-25945f3ea49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:c9:b4:4d:8d:81:a2:2c:a8:32:2c:60:65: ef:87:ff:41:f6:39:81:29:06:42:e4:1a:f6:6e:65: 98:4c:45:bc:2c:f3:f6:73:7e:b3:99:4c:a1:5f:24: 8b:1c:f0:fb:cb:85:de:62:67:2e:c7:63:ed:49:a6: fa:38:2f:fb:b1:d8:5f:4e:1b:de:26:7e:9f:32:88: 31:a9:db:9b:87:ac:fe:ab:e0:64:44:9a:00:db:fc: da:12:6b:40:f6:b4:44:76:1c:b9:54:07:b7:17:d9: 15:a2:5e:a3:f2:d3:29:78:1e:fc:e5:62:8b:72:6a: 8e:a7:49:98:0d:5b:36:b2:26:75:25:b2:b0:5c:f1: b5:73:5d:8e:eb:6f:15:e0:8b:40:66:90:63:51:9d: ac:88:25:69:36:b1:5e:42:ef:58:7c:8d:0e:c8:9d: 07:b9:20:32:85:f6:ff:98:b4:05:d7:df:88:e6:8f: a5:fc:7c:81:5e:c6:2c:f9:30:57:70:24:83:23:eb: ce:01:22:52:f2:45:ef:10:50:e5:d7:11:da:9a:f5: 51:0d:54:7d:18:48:a5:ef:27:f6:8b:29:56:4d:a4: cf:e5:89:14:9d:d2:e8:d8:19:81:0f:00:20:66:c6: e3:93:d4:b8:30:0e:9e:b8:4b:a1:5e:c9:ff:41:bd: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:C8:79:AD:09:62:E7:39:01:E9:96:FE:0B:67:D4:60:60:60:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2f4a57d-e010-3d13-9c47-d769433b7d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8e:58:39:3c:e3:8c:e8:ca:e2:9c:d6:f3:7c:b2:41:4a:49: 50:89:fa:73:42:c6:a2:91:bb:c5:c4:cc:7e:92:71:fe:8f:b3: b2:53:26:02:ad:47:19:f9:17:c4:4e:16:e1:95:62:ea:bb:f5: fc:db:d2:ef:d6:60:76:bb:8a:21:09:a2:c9:bc:0b:6a:16:6b: 44:96:38:2c:81:91:0c:67:06:9e:e7:a8:b8:00:b6:55:2e:c5: a3:f0:44:3b:38:f7:b7:2f:ec:f5:24:4e:aa:b0:0c:58:70:39: f8:31:9c:93:18:96:f9:e3:b9:e4:33:0d:a7:5f:c8:f0:d8:ec: 29:f1:37:c8:48:96:b5:98:20:b9:fd:de:bc:d9:ba:42:b8:03: 1c:31:10:82:50:23:fc:2a:04:3c:44:42:57:73:18:88:41:26: 64:b9:b8:e0:dc:71:22:13:1c:ab:ff:95:32:e0:70:e6:6f:1d: be:bc:df:e1:b1:60:c0:76:3b:c6:f8:c6:cf:9e:88:ad:85:8e: a9:24:2a:d1:82:83:79:e2:27:4f:18:1e:75:4b:79:47:d5:ed: d8:6f:4f:c9:68:42:53:63:cf:a0:84:c0:3f:15:5c:7f:02:7c: 90:a2:94:70:b4:3f:43:17:72:3a:65:a9:0e:1f:c0:cc:3e:5c: d9:8c:14:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nJ5VuDGZHXRTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzRiYzkyZjktOWVmMS00NWRkLWJhNTEtMjU5NDVmM2VhNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdrJtE2NgaIsqDIsYGXvh/9B9jmBKQZC5Br2 bmWYTEW8LPP2c36zmUyhXySLHPD7y4XeYmcux2PtSab6OC/7sdhfThveJn6fMogx qdubh6z+q+BkRJoA2/zaEmtA9rREdhy5VAe3F9kVol6j8tMpeB785WKLcmqOp0mY DVs2siZ1JbKwXPG1c12O628V4ItAZpBjUZ2siCVpNrFeQu9YfI0OyJ0HuSAyhfb/ mLQF19+I5o+l/HyBXsYs+TBXcCSDI+vOASJS8kXvEFDl1xHamvVRDVR9GEil7yf2 iylWTaTP5YkUndLo2BmBDwAgZsbjk9S4MA6euEuhXsn/Qb3MSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4gyHmtCWLnOQHplv4LZ9RgYGDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzJmNGE1N2QtZTAxMC0z ZDEzLTljNDctZDc2OTQzM2I3ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSOWDk844zoyuKc1vN8skFKSVCJ+nNCxqKRu8XEzH6Scf6Ps7JTJgKt Rxn5F8ROFuGVYuq79fzb0u/WYHa7iiEJosm8C2oWa0SWOCyBkQxnBp7nqLgAtlUu xaPwRDs497cv7PUkTqqwDFhwOfgxnJMYlvnjueQzDadfyPDY7CnxN8hIlrWYILn9 3rzZukK4AxwxEIJQI/wqBDxEQldzGIhBJmS5uODccSITHKv/lTLgcOZvHb683+Gx YMB2O8b4xs+eiK2FjqkkKtGCg3niJ08YHnVLeUfV7dhvT8loQlNjz6CEwD8VXH8C fJCilHC0P0MXcjplqQ4fwMw+XNmMFPg= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:13 2025 by rpki-client