$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0a4cbc1-e834-32c3-839f-4885799ef811.roa File: d0a4cbc1-e834-32c3-839f-4885799ef811.roa (raw, json) Hash identifier: isroGS0hK6C3ExupnXvQ2U0wjnIA+MG6UePUA8M3Yow= Subject key identifier: A8:8C:B3:D8:EB:3F:F8:48:EF:27:0B:F1:49:D3:A0:52:0F:C0:59:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F226CBC0A22D40E1FFDC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0a4cbc1-e834-32c3-839f-4885799ef811.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:26:cb:c0:a2:2d:40:e1:ff:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9db79167-4e3b-4afc-98a9-9f7d17d472f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:9a:93:c7:c1:62:56:22:1e:20:af:fe:dd: ec:97:bd:d9:62:4d:85:03:e3:6a:a3:c4:29:ce:08: b9:aa:dd:4c:df:75:33:d6:fa:47:dc:86:65:27:3e: f7:64:27:40:6c:cd:80:51:f4:67:7c:f3:0c:fa:e3: 13:c3:0e:74:21:aa:56:4b:62:0f:96:97:e6:f1:ee: b0:7d:bf:69:1a:cd:bd:2e:31:fc:8b:4a:26:41:e8: 27:aa:02:e4:b4:fe:45:01:e5:b6:be:f4:58:e4:d1: 37:34:ca:81:63:93:7e:37:7d:e9:a0:65:f8:83:d1: dd:b2:30:02:41:5a:9b:3a:cd:4f:03:af:0c:38:03: 28:0f:66:20:4f:b4:43:45:21:9f:32:68:58:48:a8: 4a:bc:8c:06:f6:1e:6d:f5:f5:b3:44:dd:0e:1b:31: 54:b7:b7:be:9a:5a:ed:38:07:dc:c1:7c:a6:f8:b1: d4:d5:64:f1:24:c6:bf:fc:37:ed:3e:d4:d3:ef:32: b8:e1:d1:40:a1:3e:8f:b2:3c:ff:ef:29:da:5d:27: 03:98:67:a7:fa:59:28:33:da:60:14:23:0e:77:8f: 0c:23:9e:4f:32:1f:2b:a4:dd:5c:12:c6:5d:7b:59: 90:2b:83:6a:08:05:c6:68:95:73:0c:51:0c:e5:5c: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:B3:D8:EB:3F:F8:48:EF:27:0B:F1:49:D3:A0:52:0F:C0:59:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d0a4cbc1-e834-32c3-839f-4885799ef811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a4:80:1b:a4:99:18:ca:ba:f9:71:b9:23:46:da:26:3b:ce: 76:8a:ee:99:7d:08:f9:40:20:f6:da:02:54:66:c0:ff:85:3b: fe:b1:c9:96:f8:10:2d:37:6c:2b:e7:82:7d:50:27:7d:33:ce: ff:68:98:07:7e:c4:de:8a:6c:9a:34:e6:79:81:02:26:37:fc: 00:b9:0d:bb:a6:2d:5c:a8:7f:36:57:5b:8f:bc:f7:02:4b:85: 13:70:f4:9b:bf:67:a2:ba:c3:43:32:00:a0:9e:c5:a3:09:fc: d0:25:85:2d:e9:a4:28:98:d0:28:47:50:04:fe:cb:1e:9a:62: 02:74:f0:82:6b:92:6f:a9:f7:30:84:31:5e:59:d9:14:5e:f2: fd:13:43:4a:4f:d8:d3:7f:9d:01:42:57:d6:75:a3:fe:55:2c: 48:44:58:d1:4f:38:4a:4d:cf:4d:ca:ae:1d:b7:fc:83:89:02: 95:30:5a:1f:5b:29:a9:ab:d5:4f:21:eb:66:4e:75:cc:9c:b7: 7c:64:62:ad:fc:7a:37:6d:9a:2b:48:b8:db:ad:66:0b:94:7a: 27:c3:3e:8b:3f:44:44:41:6a:65:29:cc:e2:b0:9d:84:0d:c9: 72:92:17:7d:89:27:70:a6:c4:2d:8d:e7:fd:f1:df:12:81:2b: da:20:2d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ibLwKItQOH/3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWRiNzkxNjctNGUzYi00YWZjLTk4YTktOWY3ZDE3ZDQ3MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskCak8fBYlYiHiCv/t3sl73ZYk2FA+Nqo8Qp zgi5qt1M33Uz1vpH3IZlJz73ZCdAbM2AUfRnfPMM+uMTww50IapWS2IPlpfm8e6w fb9pGs29LjH8i0omQegnqgLktP5FAeW2vvRY5NE3NMqBY5N+N33poGX4g9HdsjAC QVqbOs1PA68MOAMoD2YgT7RDRSGfMmhYSKhKvIwG9h5t9fWzRN0OGzFUt7e+mlrt OAfcwXym+LHU1WTxJMa//DftPtTT7zK44dFAoT6Psjz/7ynaXScDmGen+lkoM9pg FCMOd48MI55PMh8rpN1cEsZde1mQK4NqCAXGaJVzDFEM5VzYcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiMs9jrP/hI7ycL8UnToFIPwFlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDBhNGNiYzEtZTgzNC0z MmMzLTgzOWYtNDg4NTc5OWVmODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOkgBukmRjKuvlxuSNG2iY7znaK7pl9CPlAIPbaAlRmwP+FO/6xyZb4 EC03bCvngn1QJ30zzv9omAd+xN6KbJo05nmBAiY3/AC5DbumLVyofzZXW4+89wJL hRNw9Ju/Z6K6w0MyAKCexaMJ/NAlhS3ppCiY0ChHUAT+yx6aYgJ08IJrkm+p9zCE MV5Z2RRe8v0TQ0pP2NN/nQFCV9Z1o/5VLEhEWNFPOEpNz03Krh23/IOJApUwWh9b Kamr1U8h62ZOdcyct3xkYq38ejdtmitIuNutZguUeifDPos/RERBamUpzOKwnYQN yXKSF32JJ3CmxC2N5/3x3xKBK9ogLcs= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:12 2025 by rpki-client