$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a52b324-d139-3a96-afe6-e52441763260.roa File: 4a52b324-d139-3a96-afe6-e52441763260.roa (raw, json) Hash identifier: Zpdn4cxXAu58CsDEgW/pxcZ27feV6OeW5aAYuU5BPB0= Subject key identifier: A7:5B:0B:30:1F:98:FA:57:CD:07:DE:17:16:63:78:71:72:2B:F7:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F267EEC0DFE13C4897DB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a52b324-d139-3a96-afe6-e52441763260.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.7.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:67:ee:c0:df:e1:3c:48:97:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6550b048-5c0d-42b4-995e-6cf99c54796c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d9:39:14:da:e6:87:59:27:82:63:ff:87:5d: b2:02:0a:af:6b:60:60:c1:7b:87:e8:06:0a:1f:c2: ce:3e:1d:99:19:4a:46:9c:02:70:3a:cb:4c:1c:40: 90:87:70:b5:e3:12:5a:28:e9:0a:a7:6f:91:3f:54: f3:31:49:35:80:da:f5:c6:e6:24:f0:b7:ea:ed:80: 87:53:53:e6:0c:4c:a9:63:c5:b2:89:c8:26:79:11: ce:ff:df:57:d7:02:31:fe:4d:fc:0d:7b:ef:19:f0: 62:96:8a:89:03:a4:9a:7d:0a:d2:da:f4:82:4b:05: f1:c3:36:c2:7f:75:d9:b7:a6:5f:bb:40:28:ca:9f: e9:16:75:ce:aa:f9:c2:65:c8:56:09:a2:63:8b:77: 11:8e:00:6d:a4:4f:4c:d0:b8:89:d2:ad:89:2a:92: bd:76:14:49:74:98:71:ed:c1:e8:79:cb:f8:60:d8: e3:af:62:32:e8:02:fa:3e:91:83:d9:8a:93:39:2e: d4:84:60:c6:4d:16:13:c5:87:04:37:6f:76:07:3a: f0:66:16:1b:22:06:df:47:f2:e9:ad:97:5b:1d:ba: 9b:23:cc:d7:f5:71:11:45:35:e6:22:be:34:3e:d6: 77:44:d3:62:ce:a2:59:4f:a7:6a:6d:ec:08:da:65: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5B:0B:30:1F:98:FA:57:CD:07:DE:17:16:63:78:71:72:2B:F7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a52b324-d139-3a96-afe6-e52441763260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4d:6a:db:7a:04:df:c7:36:cd:d4:e8:c2:f7:9e:91:f6:d6: 9a:f6:43:1d:b1:73:c5:04:be:91:c9:bd:87:23:2b:df:00:97: 1c:d6:8d:92:f6:ab:98:69:de:65:2e:31:4c:4b:d4:62:94:db: 63:16:bd:5d:1e:65:54:0b:ae:e5:69:ef:2c:b9:fb:e7:ae:0d: d1:f6:cb:f7:d4:d3:b0:15:40:3f:16:f2:a4:fc:b3:d7:fe:7a: bf:e0:43:3a:44:de:45:54:1c:5a:16:c7:f8:de:72:27:62:20: 24:08:4e:52:2b:4c:61:6a:09:7b:e9:44:c2:08:00:91:a5:a8: 8e:1c:05:05:4a:4b:d9:10:f6:23:c1:2a:52:b0:6f:c1:c5:45: a0:b8:40:e7:10:d4:95:88:2d:5d:8f:2d:db:09:a9:7b:10:c6: 89:ec:ac:fe:b5:6d:94:fe:60:82:e0:5c:60:04:8e:af:a3:7b: 66:dc:00:75:0c:15:37:6f:7c:b8:79:54:cc:f1:28:9f:80:76: 6a:28:0f:71:5d:2c:e7:96:6d:3b:a5:e8:11:a5:7d:16:93:19: 1d:84:30:1e:7a:1c:b4:7b:92:ec:d1:ce:5d:df:f3:fd:0c:9a: 8c:85:85:aa:c6:96:5b:73:75:e8:c9:e4:62:5c:40:c7:f1:e1: 73:73:e7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mfuwN/hPEiX24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjU1MGIwNDgtNWMwZC00MmI0LTk5NWUtNmNmOTljNTQ3OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dk5FNrmh1kngmP/h12yAgqva2BgwXuH6AYK H8LOPh2ZGUpGnAJwOstMHECQh3C14xJaKOkKp2+RP1TzMUk1gNr1xuYk8Lfq7YCH U1PmDEypY8WyicgmeRHO/99X1wIx/k38DXvvGfBiloqJA6SafQrS2vSCSwXxwzbC f3XZt6Zfu0Aoyp/pFnXOqvnCZchWCaJji3cRjgBtpE9M0LiJ0q2JKpK9dhRJdJhx 7cHoecv4YNjjr2Iy6AL6PpGD2YqTOS7UhGDGTRYTxYcEN292BzrwZhYbIgbfR/Lp rZdbHbqbI8zX9XERRTXmIr40PtZ3RNNizqJZT6dqbewI2mWodwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdbCzAfmPpXzQfeFxZjeHFyK/evMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGE1MmIzMjQtZDEzOS0z YTk2LWFmZTYtZTUyNDQxNzYzMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZNatt6BN/HNs3U6ML3npH21pr2Qx2xc8UEvpHJvYcjK98AlxzWjZL2 q5hp3mUuMUxL1GKU22MWvV0eZVQLruVp7yy5++euDdH2y/fU07AVQD8W8qT8s9f+ er/gQzpE3kVUHFoWx/jecidiICQITlIrTGFqCXvpRMIIAJGlqI4cBQVKS9kQ9iPB KlKwb8HFRaC4QOcQ1JWILV2PLdsJqXsQxonsrP61bZT+YILgXGAEjq+je2bcAHUM FTdvfLh5VMzxKJ+AdmooD3FdLOeWbTul6BGlfRaTGR2EMB56HLR7kuzRzl3f8/0M moyFharGlltzdejJ5GJcQMfx4XNz550= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:37 2025 by rpki-client