$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fab2675a-7721-34f0-ab00-7e2b09df3c52.roa File: fab2675a-7721-34f0-ab00-7e2b09df3c52.roa (raw, json) Hash identifier: 2Ud3nQr5JzkmfuNwVSAyIt76i/3fh+6vrJ6fev98ELY= Subject key identifier: 33:0D:42:01:8A:04:9B:A2:48:2A:1E:E8:6C:FF:CE:51:B9:29:71:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27C4F66C92771AC441180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fab2675a-7721-34f0-ab00-7e2b09df3c52.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7c:4f:66:c9:27:71:ac:44:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=14197a0b-9f75-43fa-a7c3-e312f080c19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:a8:e0:61:87:aa:7d:a9:48:97:0b:9c:17: 38:c4:d9:89:d8:d7:8e:8f:63:47:12:48:8d:23:a9: 24:48:50:17:78:58:ce:60:05:ad:32:ae:ca:1a:4e: 48:26:1d:91:74:3e:18:5d:e1:3e:c4:48:93:bc:83: b3:33:78:4b:05:b4:52:bd:58:dd:d6:4b:5b:f2:5f: bb:b1:14:2e:89:b4:17:64:4e:92:a8:ad:22:4b:45: 57:af:a9:ea:65:2c:f4:b9:75:a4:61:c9:8b:b3:f7: 19:13:c1:5a:db:f7:26:8f:d5:a2:ed:00:83:8b:fb: 45:7d:33:93:73:38:16:a0:28:de:e1:c8:7a:32:de: a1:ee:0e:73:d0:b4:fa:e7:d7:ea:06:8f:7d:f0:f4: 5c:54:8f:85:ac:1e:3d:11:a5:b1:9e:79:3f:e1:c6: 63:ea:08:06:f5:2b:37:e0:9c:3d:46:0e:e9:9e:6b: 34:7f:c2:fc:4e:65:1d:23:74:ce:55:c3:1c:0a:32: 94:db:48:d2:63:25:70:1b:cd:99:fd:99:51:ec:6c: 1c:67:e1:62:68:52:f0:3e:ac:f0:a2:18:d7:a3:34: f8:49:5d:b1:ad:ca:8f:65:5b:10:fa:fc:e8:8b:5d: 08:e4:c0:9e:ce:4f:c1:a0:01:80:b1:cd:d8:e7:5c: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:42:01:8A:04:9B:A2:48:2A:1E:E8:6C:FF:CE:51:B9:29:71:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fab2675a-7721-34f0-ab00-7e2b09df3c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d3:e7:4c:f7:cd:9c:5c:20:5e:a6:ba:bb:d1:a4:bc:cb:d5: 9d:b3:0c:78:3c:3e:c3:f2:ca:52:d3:35:8a:c2:b7:71:41:4e: b3:9c:57:30:71:cb:e9:8d:90:e2:07:9a:40:06:57:b9:71:75: 86:7d:a0:60:97:f4:9a:65:2d:d4:7e:7e:92:57:94:7f:f1:c0: 25:4c:fd:05:e3:24:59:b1:69:10:51:7d:22:17:2b:56:8f:3f: b4:d8:50:aa:0b:cd:85:a4:d2:0a:a9:7a:2a:10:88:80:11:9d: 4a:3a:55:e5:53:cc:35:c4:e6:76:73:76:b3:77:13:c9:d2:4c: e7:85:df:d9:b0:56:45:68:f5:47:ce:24:ec:af:10:e8:30:b2: b4:f3:73:aa:1c:bb:ef:c0:18:c3:47:ce:63:06:89:b6:1a:5d: ac:63:42:04:ea:94:20:9e:60:07:ab:1c:8d:58:fb:8e:d5:9c: 38:ec:93:93:11:64:95:0b:b2:b8:e0:ea:a3:2f:62:76:9a:52: 44:99:c6:4b:88:56:f1:e6:e8:be:79:84:a8:c8:84:c8:c8:39: e4:b2:46:26:9c:d3:6c:65:22:ad:4e:7a:e5:54:5c:3d:93:13: b5:38:20:78:5a:06:95:e5:aa:77:82:60:d8:23:87:b2:df:20: 38:17:4b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nxPZskncaxEEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTQxOTdhMGItOWY3NS00M2ZhLWE3YzMtZTMxMmYwODBjMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Ko4GGHqn2pSJcLnBc4xNmJ2NeOj2NHEkiN I6kkSFAXeFjOYAWtMq7KGk5IJh2RdD4YXeE+xEiTvIOzM3hLBbRSvVjd1ktb8l+7 sRQuibQXZE6SqK0iS0VXr6nqZSz0uXWkYcmLs/cZE8Fa2/cmj9Wi7QCDi/tFfTOT czgWoCje4ch6Mt6h7g5z0LT659fqBo998PRcVI+FrB49EaWxnnk/4cZj6ggG9Ss3 4Jw9Rg7pnms0f8L8TmUdI3TOVcMcCjKU20jSYyVwG82Z/ZlR7GwcZ+FiaFLwPqzw ohjXozT4SV2xrcqPZVsQ+vzoi10I5MCezk/BoAGAsc3Y51wqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMNQgGKBJuiSCoe6Gz/zlG5KXHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmFiMjY3NWEtNzcyMS0z NGYwLWFiMDAtN2UyYjA5ZGYzYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXT50z3zZxcIF6murvRpLzL1Z2zDHg8PsPyylLTNYrCt3FBTrOcVzBx y+mNkOIHmkAGV7lxdYZ9oGCX9JplLdR+fpJXlH/xwCVM/QXjJFmxaRBRfSIXK1aP P7TYUKoLzYWk0gqpeioQiIARnUo6VeVTzDXE5nZzdrN3E8nSTOeF39mwVkVo9UfO JOyvEOgwsrTzc6ocu+/AGMNHzmMGibYaXaxjQgTqlCCeYAerHI1Y+47VnDjsk5MR ZJULsrjg6qMvYnaaUkSZxkuIVvHm6L55hKjIhMjIOeSyRiac02xlIq1OeuVUXD2T E7U4IHhaBpXlqneCYNgjh7LfIDgXSw4= -----END CERTIFICATE-----Generated at Thu Oct 16 01:48:58 2025 by rpki-client