$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4a0d555-ceb9-3fc7-b0a7-99f5c72bc641.roa File: e4a0d555-ceb9-3fc7-b0a7-99f5c72bc641.roa (raw, json) Hash identifier: rAvsYjsfgE9YCkfwMG0x+1tacvYbk/qWwb8BXmlSL6w= Subject key identifier: 59:42:E3:48:6E:E9:52:82:85:69:E2:23:2F:BC:66:B5:49:D8:66:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24BE3B1EE5CC17070D700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4a0d555-ceb9-3fc7-b0a7-99f5c72bc641.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.107.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4b:e3:b1:ee:5c:c1:70:70:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=52bafa28-e9d0-4a27-b7c0-6354613cdac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:b6:4e:50:40:fc:24:28:4d:25:ef:26:bd: 66:41:d6:44:cb:18:b9:24:e3:14:3b:90:a4:1a:ab: 32:88:bc:da:f7:5f:ab:48:32:7e:37:e6:65:47:5a: be:15:80:e9:d7:6b:f5:fc:4e:57:4c:ea:87:10:89: 79:a8:e9:68:82:b3:61:05:60:ab:71:a6:b7:51:c3: bd:1e:df:10:ba:6f:8e:28:a8:03:3b:7d:2a:91:c1: 81:a1:50:f7:8c:6e:f6:fd:f1:24:48:c2:51:15:9e: a6:2f:54:0c:9d:85:76:21:ae:de:2c:ae:7d:2c:ed: 0e:80:c3:ed:01:3e:6b:ff:73:88:c5:26:5c:7a:ad: 3d:ec:23:af:aa:62:81:ed:b4:88:36:75:c0:fb:24: 3d:ae:23:7f:8a:06:7d:f4:f9:32:e5:36:3d:a1:39: d4:0b:32:46:fb:fc:cf:29:47:74:7c:3d:68:08:e3: 9c:50:10:db:5b:f7:92:ab:f5:86:8b:00:89:89:c6: d4:bd:4a:ad:29:1b:fa:c2:c0:ea:fb:d4:9d:7a:d5: 4a:46:e8:e0:24:d0:31:00:87:bd:eb:f6:9b:e9:c7: 21:d5:35:f9:36:f6:c4:48:e4:85:6f:00:2e:0c:73: 49:b2:16:b0:74:88:a4:69:12:fd:aa:b9:3f:bf:62: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:42:E3:48:6E:E9:52:82:85:69:E2:23:2F:BC:66:B5:49:D8:66:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4a0d555-ceb9-3fc7-b0a7-99f5c72bc641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4c:b1:5a:3c:2d:9c:ca:30:76:f7:5d:6f:05:43:fa:d9:e8: 7a:12:a3:c3:06:cc:6c:c5:e8:c6:c3:33:29:1c:60:dc:ad:14: ec:cf:16:d2:31:b2:32:c8:d3:0b:bf:89:ec:bb:aa:39:b0:74: d3:70:fd:e9:ee:45:30:b8:92:4c:bc:3f:9a:69:37:0e:f0:0f: b1:a3:17:26:80:42:4f:69:8e:42:41:cc:8f:d7:ce:12:6d:b8: fe:03:c9:cc:fe:9f:39:41:1e:62:69:1c:0c:a0:de:5e:69:40: 90:f3:48:00:a5:f4:09:58:84:13:3d:9e:29:df:a2:0f:01:4f: 19:de:f7:53:ff:26:5e:c5:bc:2c:a6:90:c3:c9:58:3a:82:b3: c2:e5:2b:e1:79:c8:48:c1:b8:85:11:9f:79:07:3a:b0:cd:65: 6e:35:1a:78:bc:76:57:39:12:16:23:ec:ae:48:64:a9:e0:32: 7d:a2:b7:80:6a:04:49:a4:68:a9:27:92:66:6e:74:4f:4f:68: 44:8c:2e:a4:90:40:6d:3a:1f:45:d0:3d:33:7a:51:53:9b:28: 32:e0:4e:3a:f1:20:28:38:93:f1:14:ea:bb:f7:c3:0e:f2:6f: 24:8c:d9:0a:5e:08:93:09:b3:c4:9f:97:0d:01:a0:44:48:9f: 57:f3:e6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kvjse5cwXBw1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTJiYWZhMjgtZTlkMC00YTI3LWI3YzAtNjM1NDYxM2NkYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0u2TlBA/CQoTSXvJr1mQdZEyxi5JOMUO5Ck GqsyiLza91+rSDJ+N+ZlR1q+FYDp12v1/E5XTOqHEIl5qOlogrNhBWCrcaa3UcO9 Ht8Qum+OKKgDO30qkcGBoVD3jG72/fEkSMJRFZ6mL1QMnYV2Ia7eLK59LO0OgMPt AT5r/3OIxSZceq097COvqmKB7bSINnXA+yQ9riN/igZ99Pky5TY9oTnUCzJG+/zP KUd0fD1oCOOcUBDbW/eSq/WGiwCJicbUvUqtKRv6wsDq+9SdetVKRujgJNAxAIe9 6/ab6cch1TX5NvbESOSFbwAuDHNJshawdIikaRL9qrk/v2IEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlC40hu6VKChWniIy+8ZrVJ2GYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTRhMGQ1NTUtY2ViOS0z ZmM3LWIwYTctOTlmNWM3MmJjNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdMsVo8LZzKMHb3XW8FQ/rZ6HoSo8MGzGzF6MbDMykcYNytFOzPFtIx sjLI0wu/iey7qjmwdNNw/enuRTC4kky8P5ppNw7wD7GjFyaAQk9pjkJBzI/XzhJt uP4Dycz+nzlBHmJpHAyg3l5pQJDzSACl9AlYhBM9ninfog8BTxne91P/Jl7FvCym kMPJWDqCs8LlK+F5yEjBuIURn3kHOrDNZW41Gni8dlc5EhYj7K5IZKngMn2it4Bq BEmkaKknkmZudE9PaESMLqSQQG06H0XQPTN6UVObKDLgTjrxICg4k/EU6rv3ww7y bySM2QpeCJMJs8Sflw0BoERIn1fz5jE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:48 2025 by rpki-client