$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd693e18-ca78-3fa2-a261-73751fa32b45.roa File: cd693e18-ca78-3fa2-a261-73751fa32b45.roa (raw, json) Hash identifier: Vvmael1eKeuPkDVxvFxHB9vhkeeP5YPfFKLId+1ao54= Subject key identifier: 5B:73:BC:14:5D:29:C4:8C:66:5E:E4:95:3A:C1:F0:BB:A5:42:0A:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F293878AE997B73BE31D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd693e18-ca78-3fa2-a261-73751fa32b45.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:93:87:8a:e9:97:b7:3b:e3:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4cb51729-34ba-4c40-bc76-284d7d8ea29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0c:52:82:79:46:0b:b9:24:0d:43:c3:6c:20: 4b:c1:2b:22:ea:a2:2e:4e:df:7e:06:79:66:5c:79: 8b:44:e9:bf:0e:25:ca:55:0a:11:ae:10:9b:12:26: db:d4:cf:13:6a:a0:0b:1c:03:43:42:04:64:32:60: cc:26:0a:f2:54:11:66:fa:6d:fa:f8:9d:4e:89:5b: ed:d5:13:8b:f7:3b:b1:c6:19:aa:3f:e3:9a:2d:f4: 8f:0c:30:3a:5d:1c:3c:52:ea:9e:30:97:44:5b:88: 79:e4:bc:2a:6d:30:c9:c3:86:ad:ce:bb:f8:0a:e6: 86:43:35:ba:87:db:6a:f8:a5:16:82:06:4a:25:b4: 45:b2:40:83:fa:fd:85:a7:23:ef:1a:64:7a:b1:17: f6:63:69:19:02:2b:14:09:ed:52:9f:bf:fb:7e:de: 88:6f:30:d3:04:de:dd:a0:8c:8f:70:a6:51:70:f3: b9:d3:71:5a:63:ee:33:5e:f2:a0:96:2c:5b:b5:3a: 0e:4c:f2:d0:36:4a:c1:66:18:95:79:55:88:ba:16: ca:b2:69:78:1c:48:96:ad:cb:8a:1d:6e:28:a7:b1: b5:a1:bb:c7:0b:16:bd:54:ac:36:85:c5:bd:11:25: 38:df:00:b7:f6:9d:3d:0a:c2:94:0b:2f:23:a8:b9: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:73:BC:14:5D:29:C4:8C:66:5E:E4:95:3A:C1:F0:BB:A5:42:0A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd693e18-ca78-3fa2-a261-73751fa32b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:24:c8:ec:29:fb:8e:e4:29:90:7e:1f:e1:58:b0:c6:d4:8f: ec:b9:67:16:58:10:a1:1b:3d:b2:ed:54:ad:74:ec:05:ae:e2: dd:69:8b:86:d4:f9:2c:6e:c7:79:f8:5f:a9:54:a9:c7:2e:87: d3:0e:70:7c:bf:ce:41:a2:72:c4:7c:14:85:c6:d2:6c:97:fd: ca:cc:36:ef:24:e5:e4:b7:61:db:9e:7a:67:99:60:02:07:23: b7:9f:5f:eb:cf:61:c0:f7:9f:db:cb:1a:93:fc:80:34:61:35: 8f:24:c7:91:3c:cd:8c:45:a2:43:09:19:d9:be:3b:ca:66:99: f3:f1:a3:b8:1f:a9:97:66:5d:8b:29:25:68:a0:37:85:32:14: d7:4c:b4:18:d5:7b:59:7a:a6:f3:3b:f8:0c:c1:db:4a:34:02: 95:52:10:c3:5f:42:26:d4:46:cc:89:35:04:a3:41:ff:0d:47: d3:cc:59:71:5b:68:97:97:eb:ff:80:af:f0:c7:79:ef:d1:7b: 60:be:fe:a7:af:13:47:19:9d:7d:78:3d:3a:9f:7b:4a:fe:f0: 34:27:0a:cf:6e:ee:c4:03:72:78:1e:cf:48:86:0b:5d:6c:b7: ec:e4:1c:0a:8f:40:19:86:3a:f1:78:95:c3:b7:73:ca:38:a4: c5:8f:92:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pOHiumXtzvjHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGNiNTE3MjktMzRiYS00YzQwLWJjNzYtMjg0ZDdkOGVhMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwxSgnlGC7kkDUPDbCBLwSsi6qIuTt9+Bnlm XHmLROm/DiXKVQoRrhCbEibb1M8TaqALHANDQgRkMmDMJgryVBFm+m36+J1OiVvt 1ROL9zuxxhmqP+OaLfSPDDA6XRw8UuqeMJdEW4h55LwqbTDJw4atzrv4CuaGQzW6 h9tq+KUWggZKJbRFskCD+v2FpyPvGmR6sRf2Y2kZAisUCe1Sn7/7ft6IbzDTBN7d oIyPcKZRcPO503FaY+4zXvKglixbtToOTPLQNkrBZhiVeVWIuhbKsml4HEiWrcuK HW4op7G1obvHCxa9VKw2hcW9ESU43wC39p09CsKUCy8jqLkH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtzvBRdKcSMZl7klTrB8LulQgo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q2OTNlMTgtY2E3OC0z ZmEyLWEyNjEtNzM3NTFmYTMyYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwkyOwp+47kKZB+H+FYsMbUj+y5ZxZYEKEbPbLtVK107AWu4t1pi4bU +Sxux3n4X6lUqccuh9MOcHy/zkGicsR8FIXG0myX/crMNu8k5eS3YdueemeZYAIH I7efX+vPYcD3n9vLGpP8gDRhNY8kx5E8zYxFokMJGdm+O8pmmfPxo7gfqZdmXYsp JWigN4UyFNdMtBjVe1l6pvM7+AzB20o0ApVSEMNfQibURsyJNQSjQf8NR9PMWXFb aJeX6/+Ar/DHee/Re2C+/qevE0cZnX14PTqfe0r+8DQnCs9u7sQDcngez0iGC11s t+zkHAqPQBmGOvF4lcO3c8o4pMWPko8= -----END CERTIFICATE-----Generated at Wed Oct 15 23:33:09 2025 by rpki-client