$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2bc980d-e2f7-33de-81c2-c63104a0ef58.roa File: d2bc980d-e2f7-33de-81c2-c63104a0ef58.roa (raw, json) Hash identifier: N0iSJdLMuD3fkZB2ZXVEcgHnU3G9NGBicruAupK00Vc= Subject key identifier: 21:46:4C:74:3D:79:FD:45:28:5E:80:BA:ED:02:52:37:77:7E:13:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24EB1FABCA06E97890EE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2bc980d-e2f7-33de-81c2-c63104a0ef58.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4e:b1:fa:bc:a0:6e:97:89:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=12448357-87de-4b82-bce5-1716023c2411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:d0:ad:dd:b3:b8:c2:fb:ae:b0:fd:cd:5d: 44:bb:c8:db:32:f7:fa:ed:b8:f6:de:64:d3:24:37: 83:89:05:e8:d7:c8:a5:05:e4:fb:21:18:7d:58:18: 26:6e:5c:62:31:50:7a:ee:a6:9f:09:26:85:9a:d0: 32:8d:9d:a4:ae:7c:7c:79:97:85:d7:1b:36:1b:69: da:1b:e2:ba:8b:2e:a3:23:38:f5:a5:48:ae:c2:19: 6e:45:25:b7:e9:96:08:57:2d:46:60:09:d4:98:c4: 70:97:1f:f3:d8:3d:7d:77:9d:ca:da:89:0b:f0:de: f7:0f:2a:b8:27:48:33:1e:fb:cd:35:3f:94:33:4b: b8:ee:de:02:5b:22:ed:ef:11:f7:0c:5b:4d:6b:ce: 56:1b:37:d2:9f:98:ff:ff:fe:4c:3a:9c:fc:04:f0: 09:ec:2a:e7:cb:7f:aa:35:e4:87:3c:42:7b:f3:84: 25:6c:ed:d6:50:f1:bb:6e:aa:eb:67:22:7e:39:f4: 79:0e:17:2f:2d:9e:16:c2:c6:00:1a:54:47:6d:a8: 2d:60:0f:36:10:b5:4a:97:7a:35:88:c0:7b:fd:36: 5d:f6:39:91:1c:fe:33:0d:c2:7b:c2:ea:38:06:10: 2d:23:37:95:8d:e2:83:2b:3d:8e:0c:d3:38:67:ab: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:4C:74:3D:79:FD:45:28:5E:80:BA:ED:02:52:37:77:7E:13:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2bc980d-e2f7-33de-81c2-c63104a0ef58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:61:82:2d:eb:51:26:cd:c4:9e:1c:55:f2:08:34:6a:31:cd: 62:84:f0:d5:48:61:5d:23:81:1b:e6:b7:56:c8:02:57:2f:9a: 8e:62:1b:7d:04:6c:0b:9f:5d:f5:f3:b2:ad:35:be:a7:f8:0a: d3:95:e1:9c:56:98:83:60:83:b0:0b:d4:cc:a9:ef:ad:40:21: 6d:0c:12:6f:23:50:b0:69:8d:47:46:38:95:c4:9f:b9:a0:dd: d1:79:03:8d:7f:ce:9a:3f:76:74:df:95:71:eb:b2:5d:50:6e: 38:47:0c:9a:8e:45:74:f0:16:66:f4:32:77:61:9b:af:ce:74: 5c:e7:35:df:0e:6c:d2:fa:8a:15:00:ff:fb:09:db:03:f2:14: c1:ce:50:9a:68:fa:5d:9f:98:b0:6d:ca:33:4e:ca:4b:72:24: 72:2f:d5:c4:08:29:fb:26:bb:0e:94:54:45:89:6d:59:bb:af: 77:d1:5f:25:99:83:1d:59:8e:38:bd:c2:a8:a8:37:c2:8d:6f: f9:b1:12:03:b2:62:f0:94:0f:68:54:1d:4f:53:34:32:f3:55: 4f:e3:6b:0a:39:71:d0:7d:93:6d:7b:13:f6:3c:5a:90:81:31: 17:a5:c2:93:18:91:10:55:e5:c3:c9:00:c6:42:04:48:1a:22: cd:b5:40:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28k6x+rygbpeJDuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTI0NDgzNTctODdkZS00YjgyLWJjZTUtMTcxNjAyM2MyNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD3Qrd2zuML7rrD9zV1Eu8jbMvf67bj23mTT JDeDiQXo18ilBeT7IRh9WBgmblxiMVB67qafCSaFmtAyjZ2krnx8eZeF1xs2G2na G+K6iy6jIzj1pUiuwhluRSW36ZYIVy1GYAnUmMRwlx/z2D19d53K2okL8N73Dyq4 J0gzHvvNNT+UM0u47t4CWyLt7xH3DFtNa85WGzfSn5j///5MOpz8BPAJ7Crny3+q NeSHPEJ784QlbO3WUPG7bqrrZyJ+OfR5DhcvLZ4WwsYAGlRHbagtYA82ELVKl3o1 iMB7/TZd9jmRHP4zDcJ7wuo4BhAtIzeVjeKDKz2ODNM4Z6s8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFGTHQ9ef1FKF6Auu0CUjd3fhNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDJiYzk4MGQtZTJmNy0z M2RlLTgxYzItYzYzMTA0YTBlZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAm2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIphgi3rUSbNxJ4cVfIINGoxzWKE8NVIYV0jgRvmt1bIAlcvmo5iG30E bAufXfXzsq01vqf4CtOV4ZxWmINgg7AL1Myp761AIW0MEm8jULBpjUdGOJXEn7mg 3dF5A41/zpo/dnTflXHrsl1QbjhHDJqORXTwFmb0Mndhm6/OdFznNd8ObNL6ihUA //sJ2wPyFMHOUJpo+l2fmLBtyjNOyktyJHIv1cQIKfsmuw6UVEWJbVm7r3fRXyWZ gx1Zjji9wqioN8KNb/mxEgOyYvCUD2hUHU9TNDLzVU/jawo5cdB9k217E/Y8WpCB MRelwpMYkRBV5cPJAMZCBEgaIs21QME= -----END CERTIFICATE-----Generated at Wed Oct 15 23:25:51 2025 by rpki-client