$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5478fae-ace3-3ee5-bc6d-45fad1f2b455.roa File: d5478fae-ace3-3ee5-bc6d-45fad1f2b455.roa (raw, json) Hash identifier: QTq6a5z3BpCdLMfqPEopr7XVRkkPeY9srCBpyjPhjZU= Subject key identifier: 7A:6F:28:75:9F:22:77:36:4D:9D:A9:BF:8C:B2:27:2A:BA:4E:80:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F243BB8733CF1BCEB45600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5478fae-ace3-3ee5-bc6d-45fad1f2b455.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:43:bb:87:33:cf:1b:ce:b4:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=17983d03-c9e1-44a9-afa3-e199d2ff7d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:d1:5a:e7:aa:6c:75:99:6a:89:6d:42:5a: e1:c8:ee:74:b0:5f:33:7b:c0:8e:0f:05:e9:9e:1e: 03:61:5d:7f:fe:89:ee:63:b5:85:c0:d9:a3:05:b4: 42:d4:4a:46:7d:7c:84:88:79:dd:02:88:5d:2a:79: 3a:20:44:ff:50:c1:ae:6f:e0:b4:5e:75:32:cd:9a: 80:1a:4c:5b:df:37:86:5d:46:28:2f:4e:e8:44:5b: f7:b6:0d:74:e9:ea:35:1a:00:e5:cd:4e:b1:df:cd: b2:e8:76:db:38:3f:c9:08:c4:95:70:6d:cb:8b:cd: 82:29:dd:84:9b:be:af:0c:23:a6:d7:4a:2a:be:78: ee:b3:61:c3:eb:ee:53:58:91:f0:b5:7d:79:78:2c: 2c:92:e7:56:51:ee:42:69:a0:e7:a3:ca:25:8a:e4: e1:d8:07:b5:e6:ea:ea:a5:63:1e:04:44:65:20:63: 6d:23:af:bc:cb:75:a1:ed:79:de:49:c8:96:d1:7f: 02:7c:1c:ea:45:2b:de:e2:92:91:6d:25:09:a4:ba: 75:29:e1:91:e8:46:22:93:d9:22:8e:5f:01:36:d2: b2:97:51:a0:f3:88:bb:db:83:80:7f:3a:73:a6:da: 68:96:74:5b:82:2a:cd:f6:ba:ff:af:96:d3:05:f0: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:28:75:9F:22:77:36:4D:9D:A9:BF:8C:B2:27:2A:BA:4E:80:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5478fae-ace3-3ee5-bc6d-45fad1f2b455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:94:57:26:c5:2e:e6:02:81:dd:91:ae:57:c5:1b:9a:11:dc: d1:02:e4:d5:ff:9b:c4:5a:9a:00:d8:5e:ab:ab:9a:ef:ec:01: 2c:54:65:a0:1b:ae:23:ef:12:a9:75:ae:d3:b0:2b:98:4d:1f: 21:5d:80:23:b8:c1:4e:5c:b5:56:78:94:04:dd:53:41:f4:c2: 1b:81:f8:c9:8a:72:1e:12:5d:b3:1c:7a:24:00:84:29:1e:b5: 03:0c:d4:09:3d:b7:67:fc:70:0d:7a:9a:25:c0:10:cc:b0:a9: 4d:c7:df:96:30:76:60:29:f5:68:8c:68:03:8a:73:96:5a:64: ae:7f:04:f9:84:00:63:28:21:83:2d:b3:76:b3:7c:85:2a:52: 10:ac:c2:11:41:12:f6:bc:90:3b:23:d6:91:a5:12:d2:e6:e7: 1b:de:f1:45:dd:20:e8:6b:a3:c8:59:a9:13:87:3b:61:8f:f4: 2c:e5:a0:aa:40:b0:3e:ca:ee:8f:b3:e4:8b:fd:38:1e:02:93: 4f:10:1e:cc:d1:9d:95:26:c4:60:2a:cb:b3:9f:c3:6c:67:aa: 84:f8:5d:f9:c0:22:14:b2:dc:e2:7d:20:71:e5:ee:5b:24:26: 69:1c:98:c4:f1:fd:de:85:f8:c7:43:a5:71:90:d4:a6:9b:a5: 61:b7:33:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kO7hzPPG860VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTc5ODNkMDMtYzllMS00NGE5LWFmYTMtZTE5OWQyZmY3ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKvRWueqbHWZaoltQlrhyO50sF8ze8CODwXp nh4DYV1//onuY7WFwNmjBbRC1EpGfXyEiHndAohdKnk6IET/UMGub+C0XnUyzZqA Gkxb3zeGXUYoL07oRFv3tg106eo1GgDlzU6x382y6HbbOD/JCMSVcG3Li82CKd2E m76vDCOm10oqvnjus2HD6+5TWJHwtX15eCwskudWUe5CaaDno8oliuTh2Ae15urq pWMeBERlIGNtI6+8y3Wh7XneSciW0X8CfBzqRSve4pKRbSUJpLp1KeGR6EYik9ki jl8BNtKyl1Gg84i724OAfzpzptpolnRbgirN9rr/r5bTBfC8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpvKHWfInc2TZ2pv4yyJyq6ToA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDU0NzhmYWUtYWNlMy0z ZWU1LWJjNmQtNDVmYWQxZjJiNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCUVybFLuYCgd2RrlfFG5oR3NEC5NX/m8RamgDYXqurmu/sASxUZaAb riPvEql1rtOwK5hNHyFdgCO4wU5ctVZ4lATdU0H0whuB+MmKch4SXbMceiQAhCke tQMM1Ak9t2f8cA16miXAEMywqU3H35YwdmAp9WiMaAOKc5ZaZK5/BPmEAGMoIYMt s3azfIUqUhCswhFBEva8kDsj1pGlEtLm5xve8UXdIOhro8hZqROHO2GP9CzloKpA sD7K7o+z5Iv9OB4Ck08QHszRnZUmxGAqy7Ofw2xnqoT4XfnAIhSy3OJ9IHHl7lsk JmkcmMTx/d6F+MdDpXGQ1KabpWG3M1A= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:50 2025 by rpki-client