$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce190996-18b2-3c32-84f0-1c29d01a5ede.roa File: ce190996-18b2-3c32-84f0-1c29d01a5ede.roa (raw, json) Hash identifier: 4vbZ3+7l9Aw+ok75jdIHqW2BpnyZA3L/VRarFyQRLKw= Subject key identifier: 56:84:9D:8D:B4:F6:DA:AA:96:BF:D5:13:0D:1C:54:47:8B:47:72:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F23820D100F58F422EBCC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce190996-18b2-3c32-84f0-1c29d01a5ede.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.99.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:38:20:d1:00:f5:8f:42:2e:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3687f2b1-2950-4228-b678-95a658dff2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:e0:ac:9b:df:75:c0:34:0a:12:cd:90:25: 99:22:f6:ce:2c:3a:bb:17:22:5d:32:5d:61:af:f2: 02:5b:6a:8c:e8:ae:ca:35:f1:83:ed:9f:17:c1:cc: aa:08:f1:a6:c4:13:05:fd:a5:f9:33:b1:66:2f:78: 8f:66:2e:5d:b1:a5:37:15:24:b4:e2:a3:74:15:15: f0:96:ff:e6:77:6c:69:9b:3a:14:8c:56:6a:f5:2a: a0:dc:be:5d:0b:3b:72:84:e9:d5:69:5e:12:2d:cb: 64:ab:53:98:2f:b3:e7:31:e8:9a:aa:21:0b:0a:d5: 6e:46:1f:44:90:0a:22:2b:17:73:bd:95:d9:7c:90: c0:90:e6:34:02:55:7b:96:a8:c8:ae:2e:05:05:ca: d0:97:05:e7:f6:c9:3f:14:4d:70:c7:6b:cb:14:fb: fc:df:af:2e:ca:64:ec:2a:70:97:a5:ea:e1:8a:01: e9:13:aa:20:d1:14:eb:52:89:cf:7c:3e:86:c0:59: 22:00:d2:d4:4e:bf:f6:8c:3f:08:9e:0b:25:37:17: d2:ad:c8:d3:3d:a5:17:66:dd:95:b0:bf:6b:fa:32: bf:9e:b4:26:9c:1c:c7:73:a9:bb:a8:48:0d:c1:d2: 36:8c:e9:c6:81:f1:74:68:31:2b:c2:26:17:82:9a: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:84:9D:8D:B4:F6:DA:AA:96:BF:D5:13:0D:1C:54:47:8B:47:72:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce190996-18b2-3c32-84f0-1c29d01a5ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:42:2f:4f:9d:0f:48:93:c7:b9:f6:47:68:55:1e:1a:47:d4: 74:d0:09:39:2c:c9:ad:64:88:01:9a:a9:bf:d6:72:d4:81:4c: b9:f4:44:94:0f:f6:12:f2:fe:8e:2e:5c:99:85:0d:7d:c7:1d: 0d:c1:3d:3e:c5:95:6b:79:39:92:b8:1d:a9:8f:69:5d:df:9a: 7d:19:32:5f:40:4b:45:79:e1:ed:76:44:06:06:8f:9b:38:1e: 5d:bb:a8:28:29:da:41:7a:b1:f8:64:b4:da:45:a8:eb:4b:ab: d1:fa:3f:47:45:0f:90:2e:3a:f5:03:90:2f:73:a0:86:1a:71: ac:ff:58:33:6e:96:46:15:cd:a8:6a:56:9f:d2:ff:4d:12:86: c9:03:9e:35:11:24:4a:fd:2c:94:73:cb:16:e4:32:23:8c:f8: a5:21:22:e3:82:8c:37:ce:7e:75:55:3d:a0:2a:d4:83:69:09: 57:44:1f:19:e7:e5:43:0b:bf:f6:c5:08:f4:22:59:6f:f1:0b: 68:cd:99:f4:b5:28:c7:c9:4b:34:b1:f6:8f:1d:73:05:cc:97: ab:8a:18:78:1e:c8:71:e0:f7:a0:54:4e:a8:01:c1:ea:45:3f: b6:28:84:0b:6a:c0:b3:aa:35:15:5c:09:93:bd:07:de:18:ec: 7a:83:a4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jgg0QD1j0IuvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzY4N2YyYjEtMjk1MC00MjI4LWI2NzgtOTVhNjU4ZGZmMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu/grJvfdcA0ChLNkCWZIvbOLDq7FyJdMl1h r/ICW2qM6K7KNfGD7Z8XwcyqCPGmxBMF/aX5M7FmL3iPZi5dsaU3FSS04qN0FRXw lv/md2xpmzoUjFZq9Sqg3L5dCztyhOnVaV4SLctkq1OYL7PnMeiaqiELCtVuRh9E kAoiKxdzvZXZfJDAkOY0AlV7lqjIri4FBcrQlwXn9sk/FE1wx2vLFPv8368uymTs KnCXperhigHpE6og0RTrUonPfD6GwFkiANLUTr/2jD8IngslNxfSrcjTPaUXZt2V sL9r+jK/nrQmnBzHc6m7qEgNwdI2jOnGgfF0aDErwiYXgpoNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaEnY209tqqlr/VEw0cVEeLR3LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2UxOTA5OTYtMThiMi0z YzMyLTg0ZjAtMWMyOWQwMWE1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBCL0+dD0iTx7n2R2hVHhpH1HTQCTksya1kiAGaqb/WctSBTLn0RJQP 9hLy/o4uXJmFDX3HHQ3BPT7FlWt5OZK4HamPaV3fmn0ZMl9AS0V54e12RAYGj5s4 Hl27qCgp2kF6sfhktNpFqOtLq9H6P0dFD5AuOvUDkC9zoIYacaz/WDNulkYVzahq Vp/S/00ShskDnjURJEr9LJRzyxbkMiOM+KUhIuOCjDfOfnVVPaAq1INpCVdEHxnn 5UMLv/bFCPQiWW/xC2jNmfS1KMfJSzSx9o8dcwXMl6uKGHgeyHHg96BUTqgBwepF P7YohAtqwLOqNRVcCZO9B94Y7HqDpGk= -----END CERTIFICATE-----Generated at Thu Oct 16 02:01:26 2025 by rpki-client