$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/250b6200-731a-3228-92a3-29ba83ac22e4.roa File: 250b6200-731a-3228-92a3-29ba83ac22e4.roa (raw, json) Hash identifier: Mxs6CLHW9xO+Q8xL8rpLaY+d/NMe6Dv1o4Vm94+/A90= Subject key identifier: B2:37:88:39:17:C6:B2:BD:EE:90:CE:F3:54:EE:71:3F:F8:B2:D1:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F27BBC755F89EC70604633 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/250b6200-731a-3228-92a3-29ba83ac22e4.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:7b:bc:75:5f:89:ec:70:60:46:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3a8fffb4-cc92-41d8-bef9-58ee975f1f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:48:73:56:8e:36:fe:56:67:66:8c:f4:98: 6f:d8:f6:a0:b1:74:68:d6:97:a3:c9:0e:35:ae:4a: 61:8a:9f:80:a6:80:fa:23:f8:4c:34:04:5a:f4:f5: ae:30:07:21:89:3b:47:5b:6b:aa:ee:8c:e4:52:be: a4:81:b6:5b:78:c7:02:8d:f0:d2:b0:a5:49:90:c4: bf:47:9d:5c:34:dc:82:e9:8a:9e:b8:3a:ba:7f:93: bb:ce:06:c6:46:ef:f3:45:f5:dc:40:97:63:aa:f5: 0a:6d:0a:9c:93:fd:00:68:68:a6:4b:98:60:6c:58: 8c:35:d0:ef:14:ad:54:ad:ac:65:88:aa:68:be:e5: 3c:c4:8c:f2:fb:54:6c:fb:c2:74:02:11:69:b7:66: e7:4b:cc:02:fb:86:a7:83:07:ad:7a:73:2a:d6:7e: 93:b8:23:ad:94:38:ac:b8:e8:2e:83:68:bc:18:c6: 59:25:f3:63:97:77:b5:c0:e5:8e:e2:3b:44:a2:11: 6e:22:f6:b0:4f:70:6b:76:8c:71:6a:be:b1:af:fe: df:92:8b:a0:bb:d6:c7:49:3d:de:3e:55:61:0d:18: cb:a8:f5:a2:56:89:4d:e7:93:3c:f7:c2:f0:b7:d6: 97:f0:39:94:62:18:1e:a4:13:13:09:f1:ac:d9:d8: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:37:88:39:17:C6:B2:BD:EE:90:CE:F3:54:EE:71:3F:F8:B2:D1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/250b6200-731a-3228-92a3-29ba83ac22e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:61:cd:f0:e7:35:e7:a7:cb:09:b7:2f:d2:21:b7:b5:a8:4c: 2e:42:a9:24:cb:d8:41:d6:38:e4:f8:cb:0f:85:5d:cb:0f:33: 8e:44:10:44:20:14:a3:f3:7c:c5:20:a9:db:52:95:69:94:d0: c7:f4:ab:9d:f5:04:42:60:04:25:f2:dd:a7:a0:e4:b8:f7:05: 8e:2c:5f:91:d4:39:4d:20:0b:81:48:2e:88:b1:be:9a:14:aa: 97:9d:2d:f4:b5:2e:e7:7c:bc:96:ca:7a:d8:05:84:89:d3:12: e1:6e:18:96:8d:f5:dd:6f:2c:46:1a:ce:da:b0:0f:2d:24:6d: 0d:9e:b6:2c:8d:40:b0:35:92:de:2b:80:f0:fa:8d:1a:aa:d7: 64:96:63:46:0a:ff:71:11:6c:d1:2b:78:24:4d:19:a5:94:a2: a8:f9:fe:9a:98:4e:8b:bb:7d:77:6c:ce:e7:c7:7f:02:fd:04: ec:aa:5f:fe:e7:bd:71:3c:87:0f:f1:22:ec:b1:32:e6:18:7e: 8d:3a:13:bc:ef:49:96:f3:5e:c2:d5:b7:81:07:4a:3b:db:d1: 03:85:2b:0c:f6:9a:9d:91:5e:f6:ab:7a:60:09:9c:c3:fb:b7: 4c:30:76:cb:5b:78:b3:b5:5d:c9:1f:1b:fb:a8:a9:57:29:af: a3:f5:d8:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nu8dV+J7HBgRjMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2E4ZmZmYjQtY2M5Mi00MWQ4LWJlZjktNThlZTk3NWYxZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr5Ic1aONv5WZ2aM9Jhv2PagsXRo1pejyQ41 rkphip+ApoD6I/hMNARa9PWuMAchiTtHW2uq7ozkUr6kgbZbeMcCjfDSsKVJkMS/ R51cNNyC6YqeuDq6f5O7zgbGRu/zRfXcQJdjqvUKbQqck/0AaGimS5hgbFiMNdDv FK1UraxliKpovuU8xIzy+1Rs+8J0AhFpt2bnS8wC+4angwetenMq1n6TuCOtlDis uOgug2i8GMZZJfNjl3e1wOWO4jtEohFuIvawT3Brdoxxar6xr/7fkougu9bHST3e PlVhDRjLqPWiVolN55M898Lwt9aX8DmUYhgepBMTCfGs2diiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI3iDkXxrK97pDO81TucT/4stH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUwYjYyMDAtNzMxYS0z MjI4LTkyYTMtMjliYTgzYWMyMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJhzfDnNeenywm3L9Iht7WoTC5CqSTL2EHWOOT4yw+FXcsPM45EEEQg FKPzfMUgqdtSlWmU0Mf0q531BEJgBCXy3aeg5Lj3BY4sX5HUOU0gC4FILoixvpoU qpedLfS1Lud8vJbKetgFhInTEuFuGJaN9d1vLEYaztqwDy0kbQ2etiyNQLA1kt4r gPD6jRqq12SWY0YK/3ERbNEreCRNGaWUoqj5/pqYTou7fXdszufHfwL9BOyqX/7n vXE8hw/xIuyxMuYYfo06E7zvSZbzXsLVt4EHSjvb0QOFKwz2mp2RXvaremAJnMP7 t0wwdstbeLO1XckfG/uoqVcpr6P12FQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:08 2025 by rpki-client