$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7aca1f7c-7ae5-3e2e-a4e7-fbd55e590f8b.roa File: 7aca1f7c-7ae5-3e2e-a4e7-fbd55e590f8b.roa (raw, json) Hash identifier: qD5oK/unJTXUYpQ0eiZAHE0C4jDKd7EPtQLfdozF5qc= Subject key identifier: 1A:02:B0:89:6C:7E:D1:BC:AB:16:F0:5F:FC:9D:D6:EC:0F:C2:D5:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2681E72199416CB566440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7aca1f7c-7ae5-3e2e-a4e7-fbd55e590f8b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:68:1e:72:19:94:16:cb:56:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=582ad7a2-1abb-4813-87bd-4bfbdf9d837b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:84:8f:f6:f9:e2:77:ef:ec:9f:8a:4f:89:81: 93:08:84:0b:b4:d3:57:42:87:2e:ba:8e:76:93:9b: 27:2a:e7:18:31:92:d8:76:be:15:16:64:6c:8f:e1: e8:31:2d:92:ef:b8:61:fb:7a:41:cb:95:55:1b:fa: 84:4b:b4:16:ae:c1:42:29:cb:f7:6a:5f:57:ef:ed: f7:cd:57:02:b2:2c:ee:1d:ee:b9:fd:74:b6:42:a3: b5:de:9c:b8:91:9d:15:3f:7f:8a:99:a1:c7:b5:56: 9b:e8:22:b3:b8:6c:f5:60:8c:29:eb:95:67:1f:74: a0:7c:dd:1f:d4:d0:83:ba:e6:74:de:17:0d:65:7d: 0e:1d:74:ac:fe:4e:ad:9c:f4:1b:8c:49:14:16:8a: 74:e0:a7:b1:e3:e8:43:d1:f3:0a:4a:77:aa:e0:29: 09:8f:8f:49:c7:2d:a7:ba:a3:a9:17:2a:6f:a4:65: e6:be:e3:a0:ed:2e:9f:0b:88:6f:66:02:27:c9:7a: 98:d3:4c:07:37:90:11:d5:de:a1:24:e4:fa:3f:6f: b0:1d:75:77:7d:d9:b4:7f:18:98:18:bd:09:ff:8c: f6:28:e3:ec:fa:26:5e:05:63:33:0a:00:17:25:9a: e3:39:04:c5:65:e2:44:d4:23:72:10:0d:65:ce:69: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:02:B0:89:6C:7E:D1:BC:AB:16:F0:5F:FC:9D:D6:EC:0F:C2:D5:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7aca1f7c-7ae5-3e2e-a4e7-fbd55e590f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:69:ae:d5:28:93:19:b2:51:18:37:e2:47:3c:d9:3d:ce:b0: 42:12:3f:54:8d:49:66:7c:b4:6c:80:f3:ee:c8:3b:6f:49:88: 4b:58:64:f6:26:f3:03:5f:5c:65:93:ef:7f:b8:30:05:9b:8a: a7:4c:17:70:1b:46:d4:80:17:95:87:77:db:e1:e9:00:55:0a: 53:95:26:4c:bf:ed:39:7d:8c:d1:ff:02:78:56:e6:df:09:0c: 05:e5:41:c8:e1:db:de:14:28:11:09:bd:d5:59:b2:d7:54:32: be:eb:b0:2d:59:67:ad:e0:09:a9:39:66:82:6e:bc:a9:28:31: 6a:e1:06:1a:b1:ed:63:57:e5:01:63:a1:c4:20:85:3f:d5:91: 9d:5c:b3:ac:8a:e1:1f:95:69:c0:e8:b9:25:4a:be:2d:bd:4c: 54:9c:df:cb:9a:36:df:2a:1c:a5:f4:ed:8a:3b:47:d6:1d:0f: 91:a7:22:be:1a:86:39:1d:3b:01:d5:df:da:67:be:bf:a6:97: fa:22:48:aa:12:20:c2:94:ff:2e:51:69:98:95:47:5a:be:9e: dd:34:ac:8a:62:56:20:e4:8b:88:c2:d2:fe:ae:22:a1:f8:b8: 6f:81:15:95:d0:f4:c8:d8:a5:c0:bc:a5:19:78:99:1c:c1:b9: a3:95:69:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mgechmUFstWZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTgyYWQ3YTItMWFiYi00ODEzLTg3YmQtNGJmYmRmOWQ4MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4SP9vnid+/sn4pPiYGTCIQLtNNXQocuuo52 k5snKucYMZLYdr4VFmRsj+HoMS2S77hh+3pBy5VVG/qES7QWrsFCKcv3al9X7+33 zVcCsizuHe65/XS2QqO13py4kZ0VP3+KmaHHtVab6CKzuGz1YIwp65VnH3SgfN0f 1NCDuuZ03hcNZX0OHXSs/k6tnPQbjEkUFop04Kex4+hD0fMKSneq4CkJj49Jxy2n uqOpFypvpGXmvuOg7S6fC4hvZgInyXqY00wHN5AR1d6hJOT6P2+wHXV3fdm0fxiY GL0J/4z2KOPs+iZeBWMzCgAXJZrjOQTFZeJE1CNyEA1lzmlU4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoCsIlsftG8qxbwX/yd1uwPwtWeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2FjYTFmN2MtN2FlNS0z ZTJlLWE0ZTctZmJkNTVlNTkwZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5prtUokxmyURg34kc82T3OsEISP1SNSWZ8tGyA8+7IO29JiEtYZPYm 8wNfXGWT73+4MAWbiqdMF3AbRtSAF5WHd9vh6QBVClOVJky/7Tl9jNH/AnhW5t8J DAXlQcjh294UKBEJvdVZstdUMr7rsC1ZZ63gCak5ZoJuvKkoMWrhBhqx7WNX5QFj ocQghT/VkZ1cs6yK4R+VacDouSVKvi29TFSc38uaNt8qHKX07Yo7R9YdD5GnIr4a hjkdOwHV39pnvr+ml/oiSKoSIMKU/y5RaZiVR1q+nt00rIpiViDki4jC0v6uIqH4 uG+BFZXQ9MjYpcC8pRl4mRzBuaOVabo= -----END CERTIFICATE-----Generated at Wed Nov 5 06:09:03 2025 by rpki-client