$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904d7d38-bca4-360b-a13c-4719b02a2be0.roa File: 904d7d38-bca4-360b-a13c-4719b02a2be0.roa (raw, json) Hash identifier: yporrlHC/F0n2U5pPTr12/e6ImgAhIYXA0wX1HCr7Wo= Subject key identifier: 81:68:39:75:A8:1E:EA:91:79:B9:15:53:06:B6:7F:D5:1A:42:37:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28F759A4A2D5B6C121E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904d7d38-bca4-360b-a13c-4719b02a2be0.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8f:75:9a:4a:2d:5b:6c:12:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=094f91c2-ab14-4f68-9060-4c8265cdc6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:f2:51:71:5d:63:f3:25:79:a5:30:8b:03: 68:d1:c9:11:c8:f0:8a:1c:4d:0c:6f:3d:ee:16:f7: e0:55:a1:04:85:d2:6a:52:31:7f:ef:2f:62:bf:21: a7:42:3a:23:d1:88:29:df:7f:9f:bc:6a:00:e4:7d: a7:e6:67:1d:cf:c6:ae:ef:6b:15:e0:a3:ce:a3:62: fb:06:c8:80:c0:73:75:3a:e1:98:fa:c1:f1:11:e0: d7:30:3d:53:52:22:9f:a7:6c:47:f4:72:d0:8c:16: ad:f3:12:42:02:ef:7f:cc:38:fc:83:9e:b2:63:be: a3:86:6d:34:2f:13:de:12:08:26:38:6e:e5:52:e8: c8:bf:c3:7b:22:88:22:65:cf:85:a5:da:bd:18:0f: fc:40:4d:54:03:ab:65:6f:b7:2a:79:b7:2b:95:8d: 74:7f:c4:24:a1:70:64:01:cc:38:80:8e:68:6e:ef: dc:ee:0c:29:5a:01:0a:cd:02:97:4d:b0:89:69:5d: 6b:95:58:0b:6a:d3:7c:7e:e7:2a:78:c7:e9:a4:b1: 3d:06:b9:30:86:66:6f:d4:fa:93:cc:68:c5:4e:58: 56:d3:70:b9:64:53:eb:9a:ee:51:90:f7:60:4a:f9: 1e:bb:6c:b4:e2:41:b3:82:8b:ca:98:f7:ff:66:0f: f3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:68:39:75:A8:1E:EA:91:79:B9:15:53:06:B6:7F:D5:1A:42:37:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904d7d38-bca4-360b-a13c-4719b02a2be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:88:43:eb:96:7c:32:9b:f1:05:96:c3:9c:cb:7e:5e:b8:2d: 79:6e:88:5c:5e:2c:b6:7d:29:1e:83:45:a2:ef:af:fd:97:e6: 52:9d:d6:49:98:ee:23:ac:de:fe:bc:d9:fe:bc:e8:52:5d:cf: 1d:5b:c6:90:76:79:ba:5b:36:40:27:0a:e8:e5:d9:51:38:c5: 25:50:d1:2f:94:03:57:48:d3:3a:18:71:08:86:86:08:5d:af: 5f:f0:43:d4:7c:32:07:94:2e:8c:1b:11:51:ba:ec:b8:7d:d1: 30:b1:d9:d7:e5:39:a2:2a:a4:27:90:26:c2:00:d9:1c:45:33: 4d:7f:b4:ba:d1:57:bb:28:e5:fd:f7:49:c3:d4:3d:7a:7e:29: 94:42:b2:1f:12:ae:d0:63:39:9c:e1:4b:b5:17:58:38:c0:09: 48:93:a8:71:bc:64:f9:02:33:da:2d:5d:a3:37:fc:3b:d2:47: 34:15:d5:7b:94:b6:fa:01:2a:43:d2:05:83:a1:70:e0:50:19: f9:63:bb:cb:bb:03:77:91:e3:fd:be:ce:11:e3:c5:42:3d:26: 69:68:31:73:d2:fd:f7:c6:95:79:64:0c:29:a2:6f:88:b9:a3: a6:61:68:f1:51:18:78:eb:9f:43:10:5e:6d:d4:60:94:fd:5a: 8d:9f:bf:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28o91mkotW2wSHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDk0ZjkxYzItYWIxNC00ZjY4LTkwNjAtNGM4MjY1Y2RjNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMvyUXFdY/MleaUwiwNo0ckRyPCKHE0Mbz3u FvfgVaEEhdJqUjF/7y9ivyGnQjoj0Ygp33+fvGoA5H2n5mcdz8au72sV4KPOo2L7 BsiAwHN1OuGY+sHxEeDXMD1TUiKfp2xH9HLQjBat8xJCAu9/zDj8g56yY76jhm00 LxPeEggmOG7lUujIv8N7IogiZc+Fpdq9GA/8QE1UA6tlb7cqebcrlY10f8QkoXBk Acw4gI5obu/c7gwpWgEKzQKXTbCJaV1rlVgLatN8fucqeMfppLE9BrkwhmZv1PqT zGjFTlhW03C5ZFPrmu5RkPdgSvkeu2y04kGzgovKmPf/Zg/zTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFoOXWoHuqRebkVUwa2f9UaQjfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTA0ZDdkMzgtYmNhNC0z NjBiLWExM2MtNDcxOWIwMmEyYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGIQ+uWfDKb8QWWw5zLfl64LXluiFxeLLZ9KR6DRaLvr/2X5lKd1kmY 7iOs3v682f686FJdzx1bxpB2ebpbNkAnCujl2VE4xSVQ0S+UA1dI0zoYcQiGhghd r1/wQ9R8MgeULowbEVG67Lh90TCx2dflOaIqpCeQJsIA2RxFM01/tLrRV7so5f33 ScPUPXp+KZRCsh8SrtBjOZzhS7UXWDjACUiTqHG8ZPkCM9otXaM3/DvSRzQV1XuU tvoBKkPSBYOhcOBQGflju8u7A3eR4/2+zhHjxUI9JmloMXPS/ffGlXlkDCmib4i5 o6ZhaPFRGHjrn0MQXm3UYJT9Wo2fv+M= -----END CERTIFICATE-----Generated at Wed Nov 5 06:08:47 2025 by rpki-client