$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1145069-9a65-34dd-b348-f09e80f7934c.roa File: e1145069-9a65-34dd-b348-f09e80f7934c.roa (raw, json) Hash identifier: /ZGuynzPC9b7tG1HYnMt6Fp6ZcOW9ZjQc94m3C4na28= Subject key identifier: 49:32:00:5D:BE:68:7E:6B:53:53:AE:C6:B1:E4:59:08:24:08:0F:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22E51CD6177F0EDB59F40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1145069-9a65-34dd-b348-f09e80f7934c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2e:51:cd:61:77:f0:ed:b5:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=5676654f-56c3-46b0-909d-0f08ec2bb196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:ab:91:32:6b:ce:4c:c4:2e:a1:db:7b:3a: 34:f0:bf:dd:38:6e:87:db:3a:fa:81:ae:f5:c0:50: 4f:bf:92:dc:bb:39:cf:0d:46:ae:19:d5:7a:bf:4c: bd:27:82:a7:c2:2b:53:72:92:27:ba:fc:79:5d:0f: 0c:3d:76:c5:71:57:08:7a:a5:c3:9c:cf:53:01:0e: 20:ed:71:e2:33:a2:df:f4:9d:bd:73:41:a1:a4:af: cb:f6:45:28:76:81:f5:c7:29:80:f4:68:ea:95:3b: 4d:5e:68:d0:8c:bf:47:1b:60:cb:ca:21:09:6f:ff: 8f:fe:7c:2a:54:29:34:15:a1:8f:47:db:a3:ad:24: 9f:93:2c:d2:50:de:09:c2:df:07:2f:5b:6b:0f:03: fd:1d:22:53:5e:90:45:c1:2f:0a:ff:65:6c:9d:75: ba:fe:1d:a3:29:9b:c5:53:4b:5b:5b:2d:ca:cf:05: f0:a5:4b:7f:5d:18:2d:d6:41:5d:ce:2d:98:69:47: de:75:47:a0:0f:be:e9:08:52:ee:a7:33:31:94:ba: 03:a2:32:96:0e:b1:72:f1:3f:fe:b9:ed:c1:b0:d6: 91:12:34:1d:1a:74:fc:1b:b6:5e:4c:83:07:f5:63: f1:2a:5f:5f:c1:7b:f3:c5:1b:df:24:e7:e2:71:d8: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:32:00:5D:BE:68:7E:6B:53:53:AE:C6:B1:E4:59:08:24:08:0F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1145069-9a65-34dd-b348-f09e80f7934c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:48:30:d3:68:52:e9:57:81:89:c9:e1:55:5a:ef:c5:ef:be: 9f:ca:65:14:17:19:90:96:8b:89:3e:ce:ff:f9:96:f2:67:17: b6:18:e3:f6:d2:77:b6:d3:47:53:16:d6:7d:54:60:4e:a7:e3: 74:ea:79:b9:d7:ca:52:c1:c3:57:3b:4e:24:30:e0:42:00:0d: 25:03:49:9d:8f:32:7b:1f:6e:96:58:2c:3f:6c:f3:c9:9e:a7: ed:06:d7:0c:1c:70:2d:00:ce:4c:a3:25:15:b2:b1:35:e8:23: 54:1c:48:82:3d:75:04:60:42:f7:c5:b5:8e:c0:6b:2d:6d:84: d3:2e:ed:56:56:70:51:46:77:01:4a:4b:bb:8c:c9:30:57:bf: 9e:ae:a6:37:ca:90:f8:1a:7c:6e:f1:a5:c6:e0:ec:d3:a1:fa: 17:20:10:03:fb:12:91:3d:31:66:ef:15:5b:50:5b:ec:fb:50: 8a:5e:da:9d:eb:73:70:05:7f:40:b8:7a:b2:b1:ba:53:e1:45: 06:95:34:97:15:fd:5e:2e:64:52:28:b6:8e:66:41:3a:17:54: e9:08:ee:51:7a:d0:be:e2:e6:fc:ea:e4:35:4b:22:58:9e:95: 5e:e8:f8:c3:20:b0:92:63:54:c0:54:82:bf:da:0c:27:07:ad: 2b:9e:89:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28i5RzWF38O21n0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTY3NjY1NGYtNTZjMy00NmIwLTkwOWQtMGYwOGVjMmJiMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymSrkTJrzkzELqHbezo08L/dOG6H2zr6ga71 wFBPv5LcuznPDUauGdV6v0y9J4KnwitTcpInuvx5XQ8MPXbFcVcIeqXDnM9TAQ4g 7XHiM6Lf9J29c0GhpK/L9kUodoH1xymA9GjqlTtNXmjQjL9HG2DLyiEJb/+P/nwq VCk0FaGPR9ujrSSfkyzSUN4Jwt8HL1trDwP9HSJTXpBFwS8K/2VsnXW6/h2jKZvF U0tbWy3KzwXwpUt/XRgt1kFdzi2YaUfedUegD77pCFLupzMxlLoDojKWDrFy8T/+ ue3BsNaREjQdGnT8G7ZeTIMH9WPxKl9fwXvzxRvfJOficdjpPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkyAF2+aH5rU1OuxrHkWQgkCA/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTExNDUwNjktOWE2NS0z NGRkLWIzNDgtZjA5ZTgwZjc5MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9IMNNoUulXgYnJ4VVa78Xvvp/KZRQXGZCWi4k+zv/5lvJnF7YY4/bS d7bTR1MW1n1UYE6n43TqebnXylLBw1c7TiQw4EIADSUDSZ2PMnsfbpZYLD9s88me p+0G1wwccC0AzkyjJRWysTXoI1QcSII9dQRgQvfFtY7Aay1thNMu7VZWcFFGdwFK S7uMyTBXv56upjfKkPgafG7xpcbg7NOh+hcgEAP7EpE9MWbvFVtQW+z7UIpe2p3r c3AFf0C4erKxulPhRQaVNJcV/V4uZFIoto5mQToXVOkI7lF60L7i5vzq5DVLIlie lV7o+MMgsJJjVMBUgr/aDCcHrSueiTU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:34 2025 by rpki-client