$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171ac25a-9291-37d8-8d12-0ca4d13684ee.roa File: 171ac25a-9291-37d8-8d12-0ca4d13684ee.roa (raw, json) Hash identifier: /3v7te99ctRJuDwtcYemGJfgpETfHEqMATvuxPIW8GQ= Subject key identifier: 0F:1F:C3:F3:FB:0E:22:6A:F5:A2:A0:5D:20:4A:AE:80:FA:CC:6E:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24C6774EEAB309DAA3380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171ac25a-9291-37d8-8d12-0ca4d13684ee.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.107.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4c:67:74:ee:ab:30:9d:aa:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=17b886b2-0494-4a0a-b043-89c77a4f3768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:44:e7:0d:59:5c:85:6f:23:8f:b6:75:44: f4:7b:34:8c:db:68:d1:b3:9d:b7:bc:f8:5c:67:71: ad:16:2f:f7:2a:8b:2c:93:f5:6a:39:85:2d:78:b7: 11:d2:2e:5a:b3:68:2c:e3:96:4b:cd:9a:0a:37:f3: 82:9e:29:2b:36:fa:a7:50:4f:dc:5e:26:1c:8b:e3: 25:a5:63:1d:20:3a:f4:3c:6f:87:8f:f2:f9:81:40: 4c:ad:fd:c1:7b:0c:16:e3:c2:a1:ca:fb:0c:ee:6b: b3:c0:fd:6c:8d:43:de:c0:5d:39:c3:c2:1a:bc:b9: 53:5e:a3:a2:37:c8:1f:f8:70:55:a1:04:ca:6c:3a: 6c:75:6d:10:d1:92:75:29:45:87:0f:b0:ca:9c:f4: ce:ba:67:79:c1:2a:e8:b0:27:4d:a3:74:31:24:bf: d1:1f:17:fe:88:86:d5:83:69:56:8b:23:67:f5:e2: e7:a9:16:1a:87:88:ac:70:01:4d:8b:61:b6:b3:6b: 3c:d5:c3:54:b9:5d:8c:df:cf:ae:cb:d4:54:02:28: 29:95:d4:14:3e:5a:f8:ec:00:ba:5c:23:b5:ac:11: 8e:8d:3d:a8:6e:f2:8b:33:8f:60:dd:2e:c3:c9:58: dd:ab:4d:6a:aa:17:38:d0:16:2c:4c:20:ac:72:b0: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1F:C3:F3:FB:0E:22:6A:F5:A2:A0:5D:20:4A:AE:80:FA:CC:6E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171ac25a-9291-37d8-8d12-0ca4d13684ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:22:6d:8e:13:c4:16:bf:75:61:70:4e:05:9a:2b:8e:50:77: a0:a8:5c:1f:d8:b1:1d:26:a7:49:c5:93:a0:6d:e4:42:11:49: e2:63:e2:84:53:34:58:38:0a:6a:70:f5:de:09:b5:4a:e4:78: 8b:2c:33:17:21:bc:4c:7c:46:f3:86:dc:35:30:a9:eb:a1:4c: d3:90:0e:20:4a:c2:f4:f2:ab:2a:82:1c:4c:30:82:68:43:a5: 24:ba:28:51:a7:79:79:c0:30:64:62:61:bd:83:b8:cf:dc:5b: 39:b9:5e:5b:07:a5:d9:0c:c6:b5:23:6e:98:b3:36:f1:a7:77: 3f:b1:e4:2d:b1:71:d4:98:a1:f6:85:6a:c5:92:b7:4e:96:48: fb:e1:13:10:e8:e5:29:0b:c5:d4:3f:12:c1:fa:6c:76:2e:df: aa:af:ac:ac:48:1c:9b:ba:57:8c:39:60:e2:27:29:96:4c:33: 9e:7f:58:22:6a:43:24:82:22:46:90:d7:d5:f1:9d:20:37:87: a0:d7:ba:fe:b8:8a:2f:9c:d7:8c:08:38:eb:34:0e:b3:bb:ee: a2:fe:a4:ac:0c:83:18:f7:1e:e8:f7:2b:8c:e0:e0:dd:62:ad: 5a:a0:12:95:3e:15:ed:40:0c:ea:71:7e:74:b9:76:59:e4:01: 5f:f5:67:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kxndO6rMJ2qM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTdiODg2YjItMDQ5NC00YTBhLWIwNDMtODljNzdhNGYzNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitBE5w1ZXIVvI4+2dUT0ezSM22jRs523vPhc Z3GtFi/3Kossk/VqOYUteLcR0i5as2gs45ZLzZoKN/OCnikrNvqnUE/cXiYci+Ml pWMdIDr0PG+Hj/L5gUBMrf3BewwW48KhyvsM7muzwP1sjUPewF05w8IavLlTXqOi N8gf+HBVoQTKbDpsdW0Q0ZJ1KUWHD7DKnPTOumd5wSrosCdNo3QxJL/RHxf+iIbV g2lWiyNn9eLnqRYah4iscAFNi2G2s2s81cNUuV2M38+uy9RUAigpldQUPlr47AC6 XCO1rBGOjT2obvKLM49g3S7DyVjdq01qqhc40BYsTCCscrCQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8fw/P7DiJq9aKgXSBKroD6zG4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcxYWMyNWEtOTI5MS0z N2Q4LThkMTItMGNhNGQxMzY4NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMibY4TxBa/dWFwTgWaK45Qd6CoXB/YsR0mp0nFk6Bt5EIRSeJj4oRT NFg4Cmpw9d4JtUrkeIssMxchvEx8RvOG3DUwqeuhTNOQDiBKwvTyqyqCHEwwgmhD pSS6KFGneXnAMGRiYb2DuM/cWzm5XlsHpdkMxrUjbpizNvGndz+x5C2xcdSYofaF asWSt06WSPvhExDo5SkLxdQ/EsH6bHYu36qvrKxIHJu6V4w5YOInKZZMM55/WCJq QySCIkaQ19XxnSA3h6DXuv64ii+c14wIOOs0DrO77qL+pKwMgxj3Huj3K4zg4N1i rVqgEpU+Fe1ADOpxfnS5dlnkAV/1Z80= -----END CERTIFICATE-----Generated at Wed Nov 5 08:30:50 2025 by rpki-client