$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e43c02f9-ebe1-3c44-9973-6da487b80c10.roa File: e43c02f9-ebe1-3c44-9973-6da487b80c10.roa (raw, json) Hash identifier: Kx3N4QnPuP0EXg0iuwiUeaxETG1zJcT4mLxGlBxyJh8= Subject key identifier: 90:D9:69:6B:0E:83:74:B3:0F:91:C3:5D:22:D1:81:5E:9E:DA:DC:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F230D202DBE60191AA1BD0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e43c02f9-ebe1-3c44-9973-6da487b80c10.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:30:d2:02:db:e6:01:91:aa:1b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e2bc5a95-cd3b-4875-b3b1-45248e62f2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:05:3e:ee:9e:97:b1:8b:d1:a3:e4:a2:64: e8:0a:fb:dc:9a:71:e0:71:3e:11:1b:c1:48:15:b3: 21:38:66:29:54:27:9b:ae:1e:05:76:cf:6d:2e:cf: 44:58:0e:c2:24:7c:08:a6:4e:a4:1a:ad:32:b2:79: 12:03:86:d3:54:df:f1:b6:a9:40:91:aa:90:4d:35: 90:9a:92:ef:0d:d5:3a:8f:eb:a5:7a:d5:c9:d8:95: 19:e3:11:9d:73:1e:23:48:4d:cf:c5:07:ee:f3:38: 10:80:ef:d2:93:86:3d:46:fc:0a:de:22:49:11:04: d6:23:28:f5:6b:07:3e:ec:42:75:d1:ca:dc:b0:cf: ba:25:a4:ff:48:d6:93:aa:2a:34:4b:6a:f9:8e:9b: ea:01:35:cd:b5:80:0d:97:ca:4b:5c:76:44:88:78: bc:42:8e:22:98:07:c0:b4:45:e9:46:d8:d0:e0:18: 31:a2:86:a9:8d:b5:28:f0:2c:a9:21:56:7e:d0:22: 04:74:43:ae:db:34:e2:c9:f9:2f:76:c9:06:a2:85: 88:4e:c0:51:05:fa:db:6c:fc:81:3e:fd:7d:0f:6d: c4:aa:82:a3:8e:20:60:97:a4:4d:96:1c:31:59:19: b8:00:d4:3a:b7:15:e0:b5:51:3a:3e:58:45:7e:05: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D9:69:6B:0E:83:74:B3:0F:91:C3:5D:22:D1:81:5E:9E:DA:DC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e43c02f9-ebe1-3c44-9973-6da487b80c10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f9:c0:f7:06:ab:94:3e:89:cb:17:ad:ef:9b:3a:96:71:5f: 65:30:4f:07:2d:c7:fa:de:c3:c7:9c:a5:55:9c:70:84:72:9e: 81:45:ea:fe:5b:1f:60:4f:73:6b:92:1a:00:fe:63:db:9f:de: 12:0b:2e:df:09:58:27:54:38:ef:40:39:a6:92:68:b9:32:ff: 83:35:49:91:63:ef:2c:a5:0f:7b:38:f5:97:6b:75:b5:26:2b: ac:b3:d4:39:a8:fc:6f:d7:3c:46:f7:cb:74:6f:f0:8b:da:6f: f9:34:62:e1:23:31:50:21:1d:63:cb:38:b2:37:87:93:36:c1: 71:11:f2:7e:f8:7e:7a:ee:c5:5a:ac:92:d8:c5:e8:c6:77:07: 45:cb:2e:3c:8f:09:a6:42:aa:66:42:65:ad:8d:ee:4c:db:e8: 4c:ab:34:5c:66:ba:30:a8:42:5f:8b:01:36:19:45:aa:fc:5c: ac:db:97:d1:c4:45:c1:49:dc:b8:ea:b5:17:ca:02:6d:b7:f4: be:25:0e:28:d8:d8:6b:a3:e5:66:f0:cd:2f:9a:eb:87:50:fa: 1a:29:bc:a9:b3:a3:be:b0:c3:c6:8b:5f:c2:16:e1:7d:3e:f6: 6c:0f:00:1d:8c:5c:3b:1b:3c:18:95:1f:ec:dd:4d:44:29:1d: d7:39:be:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jDSAtvmAZGqG9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTJiYzVhOTUtY2QzYi00ODc1LWIzYjEtNDUyNDhlNjJmMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquQFPu6el7GL0aPkomToCvvcmnHgcT4RG8FI FbMhOGYpVCebrh4Fds9tLs9EWA7CJHwIpk6kGq0ysnkSA4bTVN/xtqlAkaqQTTWQ mpLvDdU6j+uletXJ2JUZ4xGdcx4jSE3PxQfu8zgQgO/Sk4Y9RvwK3iJJEQTWIyj1 awc+7EJ10crcsM+6JaT/SNaTqio0S2r5jpvqATXNtYANl8pLXHZEiHi8Qo4imAfA tEXpRtjQ4BgxooapjbUo8CypIVZ+0CIEdEOu2zTiyfkvdskGooWITsBRBfrbbPyB Pv19D23EqoKjjiBgl6RNlhwxWRm4ANQ6txXgtVE6PlhFfgUqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDZaWsOg3SzD5HDXSLRgV6e2twwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTQzYzAyZjktZWJlMS0z YzQ0LTk5NzMtNmRhNDg3YjgwYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz5wPcGq5Q+icsXre+bOpZxX2UwTwctx/rew8ecpVWccIRynoFF6v5b H2BPc2uSGgD+Y9uf3hILLt8JWCdUOO9AOaaSaLky/4M1SZFj7yylD3s49ZdrdbUm K6yz1Dmo/G/XPEb3y3Rv8Ivab/k0YuEjMVAhHWPLOLI3h5M2wXER8n74fnruxVqs ktjF6MZ3B0XLLjyPCaZCqmZCZa2N7kzb6EyrNFxmujCoQl+LATYZRar8XKzbl9HE RcFJ3LjqtRfKAm239L4lDijY2Guj5WbwzS+a64dQ+hopvKmzo76ww8aLX8IW4X0+ 9mwPAB2MXDsbPBiVH+zdTUQpHdc5vtU= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:41 2025 by rpki-client