$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92a86b68-f05f-3d05-9c97-d3196736af09.roa File: 92a86b68-f05f-3d05-9c97-d3196736af09.roa (raw, json) Hash identifier: R5AANVQxODn0Hf8onXts1Gv3UFobK1SVorSsFkcyMO4= Subject key identifier: D8:D8:25:66:5D:21:87:FB:40:04:26:A5:40:56:19:84:73:B0:EB:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F26A1C94F71ED1AF5D1400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92a86b68-f05f-3d05-9c97-d3196736af09.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.8.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:6a:1c:94:f7:1e:d1:af:5d:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3246fbdc-d9e1-4a68-a97e-08d77e5d1584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:aa:f9:e9:3f:84:56:c4:98:dd:a4:27:68: 4e:1f:3f:a9:ad:fc:df:0e:1c:15:2d:5c:b1:d6:99: c8:53:c8:b0:5b:e6:c6:ac:ba:d3:aa:f8:cd:db:70: 4f:4c:ea:88:ee:4e:78:50:a8:2e:19:12:33:fd:11: 30:46:74:26:bb:b3:66:23:be:4f:60:f4:3a:ca:48: 6e:ca:34:22:9a:c6:d1:e8:b7:a2:c7:e5:d1:7e:77: 92:f6:2b:af:b9:d9:9d:0b:75:80:33:37:2b:93:30: ee:57:55:da:0a:d4:ba:f3:3a:9a:3a:46:50:33:40: 26:7d:12:0b:d3:99:40:06:61:f5:a9:21:dd:59:18: 53:61:19:83:03:f5:55:29:e1:ae:e3:75:7d:41:5d: a9:6b:8f:e8:e0:a9:f0:34:ca:24:ea:f0:33:7e:2e: e7:1c:4a:56:77:ee:1d:d7:b8:97:05:77:b7:4c:c8: a8:95:de:e5:ad:84:f9:3c:5e:12:1f:fe:3d:64:d1: fe:7b:95:44:d6:35:3e:3c:79:9a:e8:9c:12:c2:d0: 1f:77:bf:8d:27:38:c3:e6:85:95:43:e4:ab:d9:f9: 5f:45:d0:12:7b:e4:c9:b1:8e:3e:2a:fb:2f:ad:31: 6b:f1:b7:2c:eb:c2:12:df:ca:fd:34:a3:5d:36:33: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:25:66:5D:21:87:FB:40:04:26:A5:40:56:19:84:73:B0:EB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92a86b68-f05f-3d05-9c97-d3196736af09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0a:58:78:8c:62:0d:50:83:63:80:2a:8f:a4:3c:73:c6:e5: 2d:49:65:25:b5:06:47:aa:75:b1:cc:85:17:6d:4f:a7:e4:be: d1:d7:58:15:15:85:00:d7:e9:22:1f:af:09:0f:fb:e1:fb:91: ef:1c:3d:4f:c6:2c:70:dd:58:96:c7:81:f9:7c:89:82:54:e4: 58:ea:d3:c0:bd:db:fd:52:4a:1d:0a:ee:65:e4:e4:a5:e7:67: 16:f9:a8:0a:1a:05:ff:4c:1c:0d:53:45:35:90:ff:e5:1f:25: c0:11:80:02:16:65:8e:03:68:42:2d:ee:25:24:a5:56:c1:50: 4f:aa:9b:94:24:62:d7:56:c2:02:11:8c:0b:1d:ce:d0:2a:d7: 4c:8b:e0:31:3a:34:7a:d1:cf:53:03:a3:74:c8:62:9c:5c:e7: af:d8:66:14:e8:44:1b:51:31:62:48:6b:4c:fe:87:6f:03:ac: ef:f4:ce:cf:85:84:47:88:bb:04:ea:23:d2:e7:a2:9b:cc:9f: 95:6c:66:64:73:67:31:43:37:7f:4d:a5:f5:e9:8e:a2:7d:06: c5:ea:2b:5a:a5:f7:27:18:a0:0c:62:f8:1b:8a:22:5e:f0:a8: e5:66:f8:53:42:9d:41:5a:0f:07:ae:68:ed:73:37:94:b7:db: 9f:20:cc:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28moclPce0a9dFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzI0NmZiZGMtZDllMS00YTY4LWE5N2UtMDhkNzdlNWQxNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzOq+ek/hFbEmN2kJ2hOHz+prfzfDhwVLVyx 1pnIU8iwW+bGrLrTqvjN23BPTOqI7k54UKguGRIz/REwRnQmu7NmI75PYPQ6ykhu yjQimsbR6Leix+XRfneS9iuvudmdC3WAMzcrkzDuV1XaCtS68zqaOkZQM0AmfRIL 05lABmH1qSHdWRhTYRmDA/VVKeGu43V9QV2pa4/o4KnwNMok6vAzfi7nHEpWd+4d 17iXBXe3TMiold7lrYT5PF4SH/49ZNH+e5VE1jU+PHma6JwSwtAfd7+NJzjD5oWV Q+Sr2flfRdASe+TJsY4+KvsvrTFr8bcs68IS38r9NKNdNjOPFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjYJWZdIYf7QAQmpUBWGYRzsOv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTJhODZiNjgtZjA1Zi0z ZDA1LTljOTctZDMxOTY3MzZhZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQKWHiMYg1Qg2OAKo+kPHPG5S1JZSW1BkeqdbHMhRdtT6fkvtHXWBUV hQDX6SIfrwkP++H7ke8cPU/GLHDdWJbHgfl8iYJU5Fjq08C92/1SSh0K7mXk5KXn Zxb5qAoaBf9MHA1TRTWQ/+UfJcARgAIWZY4DaEIt7iUkpVbBUE+qm5QkYtdWwgIR jAsdztAq10yL4DE6NHrRz1MDo3TIYpxc56/YZhToRBtRMWJIa0z+h28DrO/0zs+F hEeIuwTqI9LnopvMn5VsZmRzZzFDN39NpfXpjqJ9BsXqK1ql9ycYoAxi+BuKIl7w qOVm+FNCnUFaDweuaO1zN5S3258gzC4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:47 2025 by rpki-client