$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa File: 890657e2-2f37-3642-bba7-2b0835ec2741.roa (raw, json) Hash identifier: VTsOSfhfxEcPCDkL05sjjDRiqHniZumOvqMA/4PoWyo= Subject key identifier: 9F:53:1A:68:9A:E9:3D:D5:B5:E2:71:8B:A3:5B:43:4A:88:81:71:40 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB2F81043875D22CB3700DAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 68.227.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:10:43:87:5d:22:cb:37:00:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=2198265a-8010-4e5f-aee7-6f36da044cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:2c:ee:d3:8b:27:fc:6f:88:e0:e9:69:86: c9:ad:89:75:9b:0e:b1:c2:aa:09:60:31:29:a8:fd: e3:1b:26:e4:ed:e7:57:d4:d7:23:98:c6:b0:fe:58: 36:1d:d9:b8:63:22:91:55:78:6e:99:69:dd:03:7c: 64:cc:69:bc:c4:32:51:98:a0:a8:1f:8f:50:93:fd: 9d:d2:8e:9c:3b:79:0a:93:1f:7d:c4:76:9b:33:63: 1d:f0:8a:92:0f:a5:90:36:47:b9:99:0a:ba:0f:6c: d8:ff:c1:3e:00:08:26:3e:77:ff:b1:b4:69:ed:d7: d4:47:10:c6:2e:3e:c8:9b:ae:3e:ad:4f:0d:4a:7f: 92:2a:f9:ad:e4:9b:40:5d:2d:1f:f9:a0:0f:e6:a8: 8d:1a:ec:c2:94:a2:0d:0e:a4:2b:e8:11:8b:da:b8: 5e:cf:3f:90:7b:63:78:57:01:85:e9:31:fc:bc:76: 84:fb:17:88:7f:0b:4a:dd:f1:f1:8c:78:79:f9:fd: e3:c6:c4:09:8e:76:e2:04:50:bd:0b:21:1d:c8:1a: 1e:e7:fa:73:07:03:9b:9b:d6:c5:5e:7f:1d:fd:a3: 6f:a8:ad:de:38:21:31:e4:c4:b2:20:83:0e:39:cb: e6:db:28:10:d9:56:c1:f9:3a:19:d5:e1:45:0f:9a: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:1A:68:9A:E9:3D:D5:B5:E2:71:8B:A3:5B:43:4A:88:81:71:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ab:d8:ec:2a:8c:f5:35:13:19:5e:df:3a:ba:84:72:f4:ce: 12:9e:72:23:fe:15:a5:17:a4:26:4b:f3:b0:9a:d2:b5:c5:ab: 8a:c3:95:04:b6:24:3b:76:12:4d:42:51:63:65:7e:e3:fb:35: 15:1f:08:bf:00:a0:e2:b2:7b:39:b2:75:e6:50:1c:43:9e:83: 66:11:6a:ae:f1:5b:88:a3:3a:fb:d4:57:45:34:ab:da:e4:89: 6a:94:12:c8:db:7d:e5:83:a8:c6:44:a5:79:e1:48:e7:b7:a8: 16:f5:94:5d:74:d0:ab:a0:2e:da:59:07:00:f6:84:24:b0:4d: b9:40:85:8d:a5:ad:12:7f:6c:0c:b8:e3:0c:ca:92:ef:24:70: 41:f2:ad:c2:e6:32:04:8d:93:43:d2:cc:ce:98:fd:5d:86:13: 9e:87:45:20:8e:b5:9d:ca:28:ef:e1:ab:3f:f3:de:89:88:01: 10:c8:89:75:8f:7a:7e:bd:8e:26:38:c2:0f:c0:4e:2f:48:f2: d5:7d:55:5a:e4:ae:e0:95:5d:ff:3a:97:f7:b1:84:17:a9:31: 8c:a6:0c:0e:c5:07:5a:de:05:2c:b2:a3:a4:cb:80:19:5f:c0: 4f:99:4e:f2:17:ec:c6:de:b9:80:c0:90:3a:e5:57:55:43:ab: f3:89:80:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+BBDh10iyzcA2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjE5ODI2NWEtODAxMC00ZTVmLWFlZTctNmYzNmRhMDQ0Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg0s7tOLJ/xviODpaYbJrYl1mw6xwqoJYDEp qP3jGybk7edX1NcjmMaw/lg2Hdm4YyKRVXhumWndA3xkzGm8xDJRmKCoH49Qk/2d 0o6cO3kKkx99xHabM2Md8IqSD6WQNke5mQq6D2zY/8E+AAgmPnf/sbRp7dfURxDG Lj7Im64+rU8NSn+SKvmt5JtAXS0f+aAP5qiNGuzClKINDqQr6BGL2rhezz+Qe2N4 VwGF6TH8vHaE+xeIfwtK3fHxjHh5+f3jxsQJjnbiBFC9CyEdyBoe5/pzBwObm9bF Xn8d/aNvqK3eOCEx5MSyIIMOOcvm2ygQ2VbB+ToZ1eFFD5pFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9TGmia6T3VteJxi6NbQ0qIgXFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODkwNjU3ZTItMmYzNy0z NjQyLWJiYTctMmIwODM1ZWMyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROMGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWr2OwqjPU1Exle3zq6hHL0zhKeciP+FaUXpCZL87Ca0rXFq4rDlQS2 JDt2Ek1CUWNlfuP7NRUfCL8AoOKyezmydeZQHEOeg2YRaq7xW4ijOvvUV0U0q9rk iWqUEsjbfeWDqMZEpXnhSOe3qBb1lF100KugLtpZBwD2hCSwTblAhY2lrRJ/bAy4 4wzKku8kcEHyrcLmMgSNk0PSzM6Y/V2GE56HRSCOtZ3KKO/hqz/z3omIARDIiXWP en69jiY4wg/ATi9I8tV9VVrkruCVXf86l/exhBepMYymDA7FB1reBSyyo6TLgBlf wE+ZTvIX7MbeuYDAkDrlV1VDq/OJgGw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:00 2025 by rpki-client