$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50a126c-27f7-3d2a-adfa-ce7e79b438da.roa File: e50a126c-27f7-3d2a-adfa-ce7e79b438da.roa (raw, json) Hash identifier: /om0Ok3CLk/Xvf14xkiFZWHgPqDxNCwcPq3IBL6f7Jw= Subject key identifier: 5C:4B:70:D9:EB:48:9A:7E:D3:25:C4:95:6B:56:82:AC:78:4D:D0:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29F1EFDA9D9041EF91880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50a126c-27f7-3d2a-adfa-ce7e79b438da.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.10.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9f:1e:fd:a9:d9:04:1e:f9:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2a274f22-79eb-4375-8ef9-a5909a21243f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:1b:3e:35:4e:41:dd:3b:5a:8b:15:e2:3c: e1:b7:3e:16:c9:38:72:61:af:b7:97:b9:b8:62:c5: 3e:e9:69:d6:3f:3b:dc:e4:2e:4f:bc:04:d3:42:ea: 7e:59:fa:ec:f0:a3:35:d9:ce:16:a2:6b:d9:bb:de: c3:c2:f1:31:b0:ca:e2:cd:94:d1:99:88:09:c2:f1: 5f:00:d8:85:4a:9d:0e:46:bd:71:a1:d1:55:6b:f9: b7:29:bb:da:36:bc:7b:f9:21:e8:2f:f2:d4:1b:48: 9a:4e:a7:a6:de:5c:6b:5a:67:21:3c:41:af:3f:09: ee:b4:80:30:ef:48:37:f6:fa:39:d8:22:27:83:88: 9c:fa:5c:49:4f:46:e2:10:f5:5e:85:47:ec:47:ff: 37:91:b2:a2:10:64:57:f0:d9:97:ba:a2:78:f0:bd: ab:d1:97:c1:1b:78:e3:63:39:25:3b:92:94:1b:08: 52:88:7e:68:16:be:08:b6:07:26:e9:92:44:ca:c7: f1:e1:a8:d4:5d:39:de:da:96:73:a8:98:94:f5:4e: a1:7a:58:e1:71:2a:f2:74:49:8f:37:ee:ef:0a:26: 38:94:50:ec:77:bb:6c:8a:30:f8:a5:92:15:c4:e6: 3c:54:5d:39:7b:bb:24:10:4b:d3:1c:b7:cf:53:12: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4B:70:D9:EB:48:9A:7E:D3:25:C4:95:6B:56:82:AC:78:4D:D0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50a126c-27f7-3d2a-adfa-ce7e79b438da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:45:33:15:e5:05:17:ea:0c:a4:9d:9b:a5:55:b4:b9:4a:4d: 40:6e:3c:2c:d4:2f:fd:be:47:e4:af:4a:26:51:02:38:1f:f2: 8c:04:1f:3a:c1:8b:65:73:f8:37:3a:8a:7c:84:a1:02:b9:55: b9:28:72:6c:46:86:29:18:65:c7:1c:5a:56:16:62:3f:24:b5: df:3f:aa:7f:f2:92:bd:87:82:d2:b0:d9:f5:ef:e4:bc:40:eb: 4e:55:39:99:13:5f:bf:97:e9:10:4a:ba:a7:b3:63:5c:0b:73: a2:65:3c:6a:fa:8a:79:24:8b:43:10:7a:d1:fe:91:69:7e:42: 88:56:63:02:bf:03:2b:ea:58:a7:12:0a:7e:8c:23:bd:b9:1e: d9:83:f6:02:93:59:d0:9d:22:9d:eb:e4:fb:ff:d0:da:24:5f: c4:57:d1:63:cd:f2:fb:d7:42:24:ed:43:cb:83:19:b1:c8:09: d5:55:1a:68:29:d7:47:8a:30:5a:9f:88:26:72:aa:f8:8f:fb: e5:5a:62:6e:2c:cb:04:e9:b3:f4:32:4f:f4:e3:fe:7f:4a:18: 52:7e:9d:53:83:0b:c7:41:13:d7:30:42:eb:63:31:32:05:4e: 16:b0:ec:c3:e8:5a:61:19:63:06:d0:96:ec:ed:b7:a3:b2:2a: ab:3c:84:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28p8e/anZBB75GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmEyNzRmMjItNzllYi00Mzc1LThlZjktYTU5MDlhMjEyNDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAposbPjVOQd07WosV4jzhtz4WyThyYa+3l7m4 YsU+6WnWPzvc5C5PvATTQup+Wfrs8KM12c4WomvZu97DwvExsMrizZTRmYgJwvFf ANiFSp0ORr1xodFVa/m3KbvaNrx7+SHoL/LUG0iaTqem3lxrWmchPEGvPwnutIAw 70g39vo52CIng4ic+lxJT0biEPVehUfsR/83kbKiEGRX8NmXuqJ48L2r0ZfBG3jj YzklO5KUGwhSiH5oFr4Itgcm6ZJEysfx4ajUXTne2pZzqJiU9U6heljhcSrydEmP N+7vCiY4lFDsd7tsijD4pZIVxOY8VF05e7skEEvTHLfPUxJZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxLcNnrSJp+0yXElWtWgqx4TdASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTUwYTEyNmMtMjdmNy0z ZDJhLWFkZmEtY2U3ZTc5YjQzOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1FMxXlBRfqDKSdm6VVtLlKTUBuPCzUL/2+R+SvSiZRAjgf8owEHzrB i2Vz+Dc6inyEoQK5VbkocmxGhikYZcccWlYWYj8ktd8/qn/ykr2HgtKw2fXv5LxA 605VOZkTX7+X6RBKuqezY1wLc6JlPGr6inkki0MQetH+kWl+QohWYwK/AyvqWKcS Cn6MI725HtmD9gKTWdCdIp3r5Pv/0NokX8RX0WPN8vvXQiTtQ8uDGbHICdVVGmgp 10eKMFqfiCZyqviP++VaYm4sywTps/QyT/Tj/n9KGFJ+nVODC8dBE9cwQutjMTIF Thaw7MPoWmEZYwbQluztt6OyKqs8hHQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:44 2025 by rpki-client