$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8e607e9-3c12-32be-99c5-6dd4affe61ea.roa File: e8e607e9-3c12-32be-99c5-6dd4affe61ea.roa (raw, json) Hash identifier: ikxca6raJUZkA/fLdrmD5G/CxaKINKqh4+4yTcsxQfQ= Subject key identifier: 50:56:A5:31:EC:33:FB:CC:9D:45:A7:05:D5:AE:52:9D:50:95:2D:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29B845240D17B26BC4780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8e607e9-3c12-32be-99c5-6dd4affe61ea.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.109.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9b:84:52:40:d1:7b:26:bc:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a17bad0c-e1e0-4cff-b573-8c3af49a290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:7b:a7:2e:e0:aa:34:a6:de:1e:a9:f4:22: 74:53:89:d6:43:29:a2:c6:d6:e9:e9:ca:25:0c:28: 29:65:09:dc:38:d7:a5:96:d0:8c:d0:fe:38:ec:ef: 7e:b7:ab:0f:41:72:84:f4:3a:e8:12:23:ff:d3:15: ff:e6:19:a7:33:08:bc:d1:c6:e4:26:cf:0d:b9:45: 56:79:d9:8b:3b:fd:03:0e:24:a5:e7:49:6f:b3:fc: 59:a5:05:70:55:59:a3:0a:37:30:6f:2c:04:81:d2: 7f:ab:78:fd:1e:15:35:f1:14:f3:fc:3e:2b:a5:86: 77:d4:9e:01:f2:45:f2:77:32:82:51:27:51:8b:e7: 8d:be:e7:b1:5c:ce:03:0f:45:eb:f2:8e:b1:00:7a: 8d:53:06:67:92:f0:23:cb:f3:93:58:c8:de:ec:3f: 69:d0:04:66:9f:23:57:70:50:c4:96:f7:37:8d:03: 5a:62:ee:69:64:50:60:3d:e9:bb:98:2b:aa:9e:3e: 92:df:45:46:b8:8e:de:60:b4:72:89:d0:99:6f:eb: d9:51:20:92:30:1e:1d:d0:1f:ff:16:a5:f0:3f:1c: 00:d6:3c:a4:62:f9:ae:e5:19:ee:d8:8f:49:aa:a5: 9e:7c:e5:16:a4:35:1a:c9:54:64:a9:83:ee:71:40: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:56:A5:31:EC:33:FB:CC:9D:45:A7:05:D5:AE:52:9D:50:95:2D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8e607e9-3c12-32be-99c5-6dd4affe61ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:40:49:a9:bd:19:20:55:d6:d9:7a:8b:b8:f6:66:56:07:18: 68:ae:c1:ac:1e:d5:84:3e:d6:3c:3e:20:73:1f:8b:ff:3a:fe: 54:08:38:10:32:a0:6a:46:bc:86:62:3b:07:5b:9a:0f:78:c4: 64:0f:51:04:13:25:6b:e7:32:32:80:b5:16:14:f4:ce:80:39: 5c:95:cc:25:f5:3f:45:71:9c:48:04:eb:85:99:0e:ca:2a:4d: 74:26:a5:d6:6d:93:14:f4:3c:f2:f2:f0:73:64:75:1b:7f:59: ba:54:cc:a4:71:24:f5:0d:77:92:b9:9b:d0:f2:0f:a9:a7:b9: 87:e4:d8:a3:80:bf:5c:01:28:90:6f:70:30:a4:29:46:d4:1a: a6:90:44:f8:f8:fe:d1:7c:9b:5b:72:d4:ce:32:4a:0b:7f:da: 94:cd:43:b9:c0:e5:73:2b:00:dd:1a:90:58:04:88:8f:35:b8: d4:87:d4:21:53:22:34:b3:37:9b:b7:02:c9:06:d5:86:e8:3e: 50:34:ab:60:1b:cf:88:bb:a5:e7:57:39:c6:2d:fa:12:13:18: de:1a:c1:62:90:1f:d9:47:ab:21:09:8c:fd:87:44:87:f0:cf: 41:1d:bc:26:33:15:94:7b:37:5e:ed:b2:f6:2b:7a:42:7f:18: f5:53:c8:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28puEUkDReya8R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTE3YmFkMGMtZTFlMC00Y2ZmLWI1NzMtOGMzYWY0OWEyOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMt7py7gqjSm3h6p9CJ0U4nWQymixtbp6col DCgpZQncONelltCM0P447O9+t6sPQXKE9DroEiP/0xX/5hmnMwi80cbkJs8NuUVW edmLO/0DDiSl50lvs/xZpQVwVVmjCjcwbywEgdJ/q3j9HhU18RTz/D4rpYZ31J4B 8kXydzKCUSdRi+eNvuexXM4DD0Xr8o6xAHqNUwZnkvAjy/OTWMje7D9p0ARmnyNX cFDElvc3jQNaYu5pZFBgPem7mCuqnj6S30VGuI7eYLRyidCZb+vZUSCSMB4d0B// FqXwPxwA1jykYvmu5Rnu2I9JqqWefOUWpDUayVRkqYPucUCoYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBWpTHsM/vMnUWnBdWuUp1QlS09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZThlNjA3ZTktM2MxMi0z MmJlLTk5YzUtNmRkNGFmZmU2MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFASam9GSBV1tl6i7j2ZlYHGGiuwawe1YQ+1jw+IHMfi/86/lQIOBAy oGpGvIZiOwdbmg94xGQPUQQTJWvnMjKAtRYU9M6AOVyVzCX1P0VxnEgE64WZDsoq TXQmpdZtkxT0PPLy8HNkdRt/WbpUzKRxJPUNd5K5m9DyD6mnuYfk2KOAv1wBKJBv cDCkKUbUGqaQRPj4/tF8m1ty1M4ySgt/2pTNQ7nA5XMrAN0akFgEiI81uNSH1CFT IjSzN5u3AskG1YboPlA0q2Abz4i7pedXOcYt+hITGN4awWKQH9lHqyEJjP2HRIfw z0EdvCYzFZR7N17tsvYrekJ/GPVTyLo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:27:09 2025 by rpki-client