$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5209b729-1f9a-39e7-95d5-84edd843bc5b.roa File: 5209b729-1f9a-39e7-95d5-84edd843bc5b.roa (raw, json) Hash identifier: 0iBXNfJZzX7+TOnvCUkq0T69LXqC4Zq6U1nfzx2a+eY= Subject key identifier: D9:8C:EC:77:57:BA:9C:F4:80:99:C2:53:81:20:ED:63:89:33:9B:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26E53ED6ADBD799CADA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5209b729-1f9a-39e7-95d5-84edd843bc5b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.9.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6e:53:ed:6a:db:d7:99:ca:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=9a2e22fe-d1e4-44e0-b680-05b96551ef0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:c6:f8:31:88:61:20:fc:6e:b2:53:9a:ca: 0a:e8:61:f9:6b:55:ea:6b:59:18:2f:0c:3e:86:fd: 3b:b9:e7:64:aa:89:e7:2d:66:73:79:0f:9f:13:d9: 38:b6:37:21:f2:5b:f9:a5:e9:62:0d:80:92:fe:d4: 7a:62:a9:b4:74:f5:42:70:17:b5:cd:7e:6b:9e:97: e5:11:0b:4f:62:b3:45:49:04:f1:23:ca:15:03:4b: 5c:e7:da:45:95:77:91:7b:d2:39:51:5c:c6:89:ac: d1:d8:87:5e:9f:09:51:9a:73:5b:7d:ee:74:72:29: f5:7d:d6:33:67:83:f6:5f:60:74:6f:20:43:61:45: 68:7e:f3:9d:7f:b8:61:6f:7e:58:98:a6:fd:4f:69: 45:47:c6:15:ff:92:35:f2:ea:34:a9:80:f7:dc:27: c3:5a:8d:41:0b:f8:d3:83:29:1e:65:a1:37:49:ff: d8:b0:86:56:cb:64:6d:5d:57:cd:36:45:8d:e3:16: e3:4d:d5:df:8a:9d:9d:92:74:f1:99:f3:9e:0e:d6: f5:95:ad:ff:b3:8c:2c:ef:83:7a:97:4e:62:5d:81: 84:35:d7:09:2e:71:68:e3:77:d9:5c:d8:00:30:97: 48:fe:74:00:56:e7:3b:5d:e2:72:25:4e:a1:8c:af: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8C:EC:77:57:BA:9C:F4:80:99:C2:53:81:20:ED:63:89:33:9B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5209b729-1f9a-39e7-95d5-84edd843bc5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bb:ed:7f:dd:2c:00:ae:34:57:d7:87:0e:ae:32:68:f6:eb: 1c:43:1f:d4:50:a2:3a:77:af:17:51:02:27:f5:35:6c:f9:f2: e5:90:68:65:13:89:e4:bf:1c:63:92:b7:de:c1:62:7d:88:a0: 37:73:40:07:de:17:28:7c:7a:fa:8d:9b:61:57:1e:ed:5f:65: 8f:70:42:46:a9:be:53:34:89:e7:41:28:91:05:ab:ae:c4:7a: 13:84:42:71:7f:50:97:2c:ec:46:a6:73:5a:c1:fd:ac:14:1b: 39:bb:79:3b:28:43:fc:ac:99:3e:a9:1f:8a:97:4a:4d:e6:4e: 82:c7:49:44:62:91:13:cb:6a:1f:3c:e3:42:bb:0b:a8:52:b4: 28:55:40:bd:c7:0f:a2:ee:85:ce:57:d8:57:57:74:6e:0e:eb: c6:63:49:39:ec:4f:e3:cf:be:3a:3a:8f:13:48:f6:a5:53:29: 9c:dd:fe:1c:97:64:18:47:3b:e8:0f:de:79:a4:a2:33:0e:18: ff:06:9a:d1:68:0c:8e:9f:54:a4:78:10:da:5e:2a:1c:ec:ff: 10:cd:82:f8:57:a1:d5:50:12:30:84:6e:7f:f1:55:57:83:3b: 23:f9:03:c8:bb:50:d6:7d:4b:fc:0a:1c:18:4a:97:c5:4f:66: e6:73:73:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28m5T7Wrb15nK2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWEyZTIyZmUtZDFlNC00NGUwLWI2ODAtMDViOTY1NTFlZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qbG+DGIYSD8brJTmsoK6GH5a1Xqa1kYLww+ hv07uedkqonnLWZzeQ+fE9k4tjch8lv5peliDYCS/tR6Yqm0dPVCcBe1zX5rnpfl EQtPYrNFSQTxI8oVA0tc59pFlXeRe9I5UVzGiazR2IdenwlRmnNbfe50cin1fdYz Z4P2X2B0byBDYUVofvOdf7hhb35YmKb9T2lFR8YV/5I18uo0qYD33CfDWo1BC/jT gykeZaE3Sf/YsIZWy2RtXVfNNkWN4xbjTdXfip2dknTxmfOeDtb1la3/s4ws74N6 l05iXYGENdcJLnFo43fZXNgAMJdI/nQAVuc7XeJyJU6hjK+Q8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmM7HdXupz0gJnCU4Eg7WOJM5sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTIwOWI3MjktMWY5YS0z OWU3LTk1ZDUtODRlZGQ4NDNiYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG77X/dLACuNFfXhw6uMmj26xxDH9RQojp3rxdRAif1NWz58uWQaGUT ieS/HGOSt97BYn2IoDdzQAfeFyh8evqNm2FXHu1fZY9wQkapvlM0iedBKJEFq67E ehOEQnF/UJcs7Eamc1rB/awUGzm7eTsoQ/ysmT6pH4qXSk3mToLHSURikRPLah88 40K7C6hStChVQL3HD6Luhc5X2FdXdG4O68ZjSTnsT+PPvjo6jxNI9qVTKZzd/hyX ZBhHO+gP3nmkojMOGP8GmtFoDI6fVKR4ENpeKhzs/xDNgvhXodVQEjCEbn/xVVeD OyP5A8i7UNZ9S/wKHBhKl8VPZuZzc0U= -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:34 2025 by rpki-client