$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/618977c3-6922-323f-b59f-71615898a464.roa File: 618977c3-6922-323f-b59f-71615898a464.roa (raw, json) Hash identifier: F7xfqHHp1/TQepN+xg6BnWiKGY0isgHDxgrM94PMzqk= Subject key identifier: 17:20:8E:7F:6C:9D:FB:84:2E:ED:09:DE:57:0A:2F:66:FC:3C:14:7E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625BB6BA353E242E5CDD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/618977c3-6922-323f-b59f-71615898a464.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.225.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5b:b6:ba:35:3e:24:2e:5c:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=72e584c4-fce7-4038-b02b-e768fc0cec50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:12:14:38:ba:80:9e:1e:c2:21:e0:9d:6e: 26:d7:87:14:ba:ca:ff:53:93:f4:8e:66:f4:49:8a: d1:23:6c:68:ac:19:2b:bc:be:43:2e:18:66:e3:00: da:fb:4d:c7:a2:74:2d:01:0b:39:8b:10:d3:f4:00: 3c:60:2f:0f:fa:2f:0f:bf:56:65:26:65:c2:6f:26: dd:48:f8:8e:de:1b:59:48:73:bc:0a:17:c6:6c:a4: fe:6e:ba:1d:95:bf:97:8f:79:be:91:bc:ea:69:3f: 1e:a8:78:d2:0b:32:64:6f:d8:03:4b:3a:43:a5:30: 5f:a9:0f:b1:c6:dc:a0:ad:d3:18:6a:ee:e6:2d:aa: 16:fc:72:85:0c:94:09:1c:3f:2b:6a:d1:a3:e5:64: e8:62:47:43:3b:14:5a:ac:fb:b4:15:f2:06:6e:af: ba:1c:45:7c:c6:8c:de:7c:e4:0d:07:1f:7c:1e:d1: 54:98:30:e5:a6:53:68:82:f6:73:89:3c:9c:3c:3d: c0:46:11:9d:be:e2:2a:bc:84:18:95:cb:75:d2:f8: a4:39:8b:a6:74:9d:ae:39:3c:1d:ce:ca:3c:f5:1f: f9:25:21:9f:ce:7d:a3:2f:58:df:7e:f8:4b:06:42: f9:47:98:6f:c2:80:8a:6a:1e:43:29:31:32:9d:25: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:8E:7F:6C:9D:FB:84:2E:ED:09:DE:57:0A:2F:66:FC:3C:14:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/618977c3-6922-323f-b59f-71615898a464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fb:67:4a:70:63:d4:e4:75:d9:1e:5b:19:44:0d:28:7d:44: 62:63:63:5d:15:82:e7:4e:f8:8e:fb:3b:4f:a9:4a:d5:b5:bf: 82:83:74:06:04:91:6a:29:98:6a:99:7f:f6:01:0b:a9:71:8e: e4:d3:8d:2d:8a:50:cd:38:af:98:b8:64:76:e4:a2:0a:c1:d9: a9:a1:37:df:a2:26:1b:ae:7e:49:3d:ab:61:35:f1:77:26:cd: f1:7b:6e:19:0c:61:ed:a5:a0:7b:d6:b0:db:2c:9e:7f:9c:0d: 84:5f:cb:e5:f6:be:d3:2f:5d:2c:8d:72:9a:ee:26:e2:bb:32: 02:dc:be:25:2f:65:97:5a:1e:0e:49:9c:11:11:3d:af:14:2c: a8:6e:09:78:28:8a:1b:de:ce:99:d6:a6:6e:41:a7:35:4e:73: 37:09:b1:5a:92:6a:05:8a:25:bf:8d:42:34:7c:82:9a:79:b7: c9:28:d7:5f:95:d7:6d:07:b3:00:7d:4f:bf:44:e0:f8:08:b5: 45:9d:0a:27:bd:fb:89:8e:12:29:06:99:39:9b:ab:11:cf:ef: 80:fa:4f:1e:aa:e6:f6:c4:3f:d2:c7:be:e0:2e:24:41:8a:a5: 1b:e8:2b:6e:31:78:1a:78:f2:3b:91:f3:ff:10:dc:29:8e:74: 5f:b6:34:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlu2ujU+JC5c3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NzJlNTg0YzQtZmNlNy00MDM4LWIwMmItZTc2OGZjMGNlYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0QSFDi6gJ4ewiHgnW4m14cUusr/U5P0jmb0 SYrRI2xorBkrvL5DLhhm4wDa+03HonQtAQs5ixDT9AA8YC8P+i8Pv1ZlJmXCbybd SPiO3htZSHO8ChfGbKT+brodlb+Xj3m+kbzqaT8eqHjSCzJkb9gDSzpDpTBfqQ+x xtygrdMYau7mLaoW/HKFDJQJHD8ratGj5WToYkdDOxRarPu0FfIGbq+6HEV8xoze fOQNBx98HtFUmDDlplNogvZziTycPD3ARhGdvuIqvIQYlct10vikOYumdJ2uOTwd zso89R/5JSGfzn2jL1jffvhLBkL5R5hvwoCKah5DKTEynSVYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcgjn9snfuELu0J3lcKL2b8PBR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjE4OTc3YzMtNjkyMi0z MjNmLWI1OWYtNzE2MTU4OThhNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/7Z0pwY9TkddkeWxlEDSh9RGJjY10VgudO+I77O0+pStW1v4KDdAYE kWopmGqZf/YBC6lxjuTTjS2KUM04r5i4ZHbkogrB2amhN9+iJhuufkk9q2E18Xcm zfF7bhkMYe2loHvWsNssnn+cDYRfy+X2vtMvXSyNcpruJuK7MgLcviUvZZdaHg5J nBERPa8ULKhuCXgoihvezpnWpm5BpzVOczcJsVqSagWKJb+NQjR8gpp5t8ko11+V 120HswB9T79E4PgItUWdCie9+4mOEikGmTmbqxHP74D6Tx6q5vbEP9LHvuAuJEGK pRvoK24xeBp48juR8/8Q3CmOdF+2NGI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:30:38 2025 by rpki-client