$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb519f78-2527-3619-998b-ca8f9773110d.roa File: cb519f78-2527-3619-998b-ca8f9773110d.roa (raw, json) Hash identifier: 0NjBrJ3Y35lUkwNNIeiMj++htQg6X/a8MogOj0tomz8= Subject key identifier: 5B:66:D0:AC:F3:85:68:74:14:46:34:E9:C7:76:EE:E5:9F:D7:CD:C2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22063DD166C55419C4F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb519f78-2527-3619-998b-ca8f9773110d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:20:63:dd:16:6c:55:41:9c:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=85c6c24a-7609-4f9b-ab86-bff0475e18be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:d0:a5:2b:2d:68:f2:6a:c6:40:cc:e7:04: e2:8e:c1:86:ca:2a:e6:67:ab:b7:d2:0d:a5:65:f4: 45:03:bb:9c:aa:b3:e1:65:dd:22:f4:5c:d9:99:22: 24:e0:2e:81:36:a5:05:9f:d6:a2:a2:45:42:d3:56: 4d:0d:21:be:51:d4:98:3a:87:02:76:f2:c5:b8:ae: b2:c1:cb:95:85:80:04:b3:6d:4b:89:3a:e6:b5:0c: 5f:1e:1e:92:70:18:e8:00:48:b5:be:c0:35:40:7f: 12:7c:76:db:47:3d:8e:9d:86:be:ac:d6:04:d7:38: 48:13:ca:e6:4e:ec:a7:94:51:cd:73:34:25:05:ce: c7:76:b8:e3:dc:6a:b6:5f:2c:62:72:06:f2:20:a1: a8:be:c5:0f:d9:f1:c2:97:aa:81:b8:90:d1:f2:19: 5d:c9:c1:5c:08:a5:e2:bb:2e:01:52:0d:1a:63:8a: 5f:e2:d7:02:58:50:3f:76:35:85:4a:8e:e4:4d:d0: ed:e7:cd:1d:ea:8c:3e:94:eb:d5:c4:7c:d9:d8:bf: bc:64:c7:84:3a:1d:e2:5d:9a:0d:04:0c:f0:cf:b2: 8d:75:a0:84:1f:5d:50:b5:b4:9f:ef:bf:9c:a6:e6: 40:a4:00:4e:4a:c4:3d:63:d8:e6:84:95:3f:42:29: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:66:D0:AC:F3:85:68:74:14:46:34:E9:C7:76:EE:E5:9F:D7:CD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb519f78-2527-3619-998b-ca8f9773110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a0:a4:c8:70:0d:8d:9c:76:8c:a0:62:1b:70:07:82:04:be: 43:60:bf:95:ca:a5:ce:1f:ef:e9:34:15:25:24:d3:87:20:60: c9:b9:ab:5e:14:04:96:d6:59:0b:ae:98:9c:1a:af:91:15:f1: d5:e1:a2:e0:33:4f:68:5f:05:95:26:c2:2d:af:5f:44:0c:4c: 26:62:5f:dd:08:59:bf:fc:bc:94:e3:67:7c:05:75:89:90:53: 91:7e:07:65:21:ae:e1:75:6a:85:99:24:fd:0a:19:09:45:9f: 26:87:ac:4f:af:0d:36:ff:0d:26:f9:36:36:84:39:d2:ec:a7: d0:27:7f:00:58:87:2f:4d:8b:3a:41:c7:c1:d6:2a:cb:06:93: 80:b8:e9:e1:89:07:b1:6b:06:2f:c0:f9:a6:52:d1:f4:23:c6: 6b:c4:0e:95:03:f4:03:5f:92:a9:1b:64:ad:61:29:9b:b4:ad: 7b:ed:c2:a7:0c:04:b5:ea:3e:8c:d2:82:7a:71:2e:4d:63:41: 0c:7c:7d:cc:77:fc:8c:af:3d:30:cb:46:36:24:71:f4:cd:c4: d9:e0:30:33:a1:b0:a2:2c:d1:7c:f8:6d:6f:0d:1e:4b:9f:9b: ab:d3:83:b5:f8:a1:5e:92:e7:8f:f0:71:67:0f:45:5e:31:ef: 87:d0:a0:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iBj3RZsVUGcT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODVjNmMyNGEtNzYwOS00ZjliLWFiODYtYmZmMDQ3NWUxOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXvQpSstaPJqxkDM5wTijsGGyirmZ6u30g2l ZfRFA7ucqrPhZd0i9FzZmSIk4C6BNqUFn9aiokVC01ZNDSG+UdSYOocCdvLFuK6y wcuVhYAEs21LiTrmtQxfHh6ScBjoAEi1vsA1QH8SfHbbRz2OnYa+rNYE1zhIE8rm TuynlFHNczQlBc7Hdrjj3Gq2XyxicgbyIKGovsUP2fHCl6qBuJDR8hldycFcCKXi uy4BUg0aY4pf4tcCWFA/djWFSo7kTdDt580d6ow+lOvVxHzZ2L+8ZMeEOh3iXZoN BAzwz7KNdaCEH11QtbSf77+cpuZApABOSsQ9Y9jmhJU/Qin/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtm0KzzhWh0FEY06cd27uWf183CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I1MTlmNzgtMjUyNy0z NjE5LTk5OGItY2E4Zjk3NzMxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCgpMhwDY2cdoygYhtwB4IEvkNgv5XKpc4f7+k0FSUk04cgYMm5q14U BJbWWQuumJwar5EV8dXhouAzT2hfBZUmwi2vX0QMTCZiX90IWb/8vJTjZ3wFdYmQ U5F+B2UhruF1aoWZJP0KGQlFnyaHrE+vDTb/DSb5NjaEOdLsp9AnfwBYhy9NizpB x8HWKssGk4C46eGJB7FrBi/A+aZS0fQjxmvEDpUD9ANfkqkbZK1hKZu0rXvtwqcM BLXqPozSgnpxLk1jQQx8fcx3/IyvPTDLRjYkcfTNxNngMDOhsKIs0Xz4bW8NHkuf m6vTg7X4oV6S54/wcWcPRV4x74fQoPk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:02 2025 by rpki-client