$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ba5f90b-901d-31ba-861e-236ba51aa320.roa File: 9ba5f90b-901d-31ba-861e-236ba51aa320.roa (raw, json) Hash identifier: 7D0fH/4mULv3LJe+cZwufPuhovwKnztSQImDLZmfcEQ= Subject key identifier: 3C:17:5D:1C:6C:8A:9E:83:C5:FC:8A:15:BB:4F:87:C0:9D:D6:60:83 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F220765043A4DD9C35BB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ba5f90b-901d-31ba-861e-236ba51aa320.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:20:76:50:43:a4:dd:9c:35:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=882a9271-2aa8-4f63-9c6a-cfe03e40ac4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:5b:44:e5:e1:3c:d2:31:f6:41:3f:c3:4d: fa:82:dd:4e:05:05:52:1e:b7:17:81:1d:ea:18:d0: 65:85:48:25:c8:9b:d5:21:f1:6d:5e:92:75:ee:f8: 1b:ad:ea:ac:bd:45:c2:be:b6:66:46:9a:38:1d:d5: f1:01:f8:07:7c:d5:2c:6d:e3:6f:64:4f:08:e2:ae: dc:81:2c:c3:a9:6c:8c:fd:f6:13:6f:51:2e:8a:84: 14:7a:b5:d7:73:61:73:89:9d:87:66:d2:21:a7:80: b4:58:0e:be:f2:bd:3d:05:7e:00:46:75:ff:27:31: 5c:cf:87:56:99:46:f7:98:81:42:f9:b1:0a:14:ba: cf:38:af:ee:d2:32:f3:ab:5b:96:5d:e9:98:e5:48: 23:24:74:7a:c5:ad:30:7b:ab:87:b9:7e:fc:ff:84: 9a:c2:0c:97:88:01:8c:bd:10:ed:3c:0d:f2:67:75: 11:4f:c9:a0:5f:2c:15:c1:0b:6f:50:6c:0f:c9:a2: ca:67:ea:60:06:56:27:28:89:8e:46:89:21:a4:1d: 6a:70:6e:a8:44:70:8a:4a:23:1c:f2:d8:b8:7c:8c: 92:b3:c0:fb:c8:d8:59:47:3e:22:21:0d:c6:9b:26: 67:fc:6b:81:76:ce:d5:7e:8e:81:6c:fb:89:05:aa: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:5D:1C:6C:8A:9E:83:C5:FC:8A:15:BB:4F:87:C0:9D:D6:60:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ba5f90b-901d-31ba-861e-236ba51aa320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:00:b5:61:b7:d2:d8:a4:6c:4c:06:4b:3c:f6:e6:1b:e9:c5: f0:aa:dc:5c:86:e1:21:ac:6c:33:7a:97:de:c2:93:bf:e6:ca: a3:72:72:f0:65:c1:02:a0:6f:59:b9:1f:be:a3:9e:c7:53:2e: ea:92:bd:7e:e6:ff:6a:4d:23:76:10:34:57:82:4a:3d:82:17: 91:e2:ac:97:c8:e0:96:dd:57:b0:c1:36:dd:1b:34:28:d6:99: 87:b8:2f:ed:8b:b9:8c:f9:d3:af:a7:f3:14:83:a7:61:7d:a3: 38:d3:5e:d9:9b:82:a8:1d:10:c8:2a:bb:03:e5:6b:f0:01:46: 97:b9:87:a6:30:ad:85:66:a2:ac:99:4e:9a:42:8b:f6:68:97: 19:ac:75:8b:b0:1f:6b:1a:b0:ae:f2:96:f7:92:47:aa:ef:b5: dc:3a:61:eb:a5:78:38:c5:6b:d3:aa:f2:3d:1f:4e:94:e9:0a: 8e:08:71:33:dd:8c:bb:75:52:e7:07:7f:0f:61:85:21:87:44: 5b:66:48:d0:3d:5f:f4:77:1a:7e:e5:11:11:f7:28:48:c4:5f: 4c:57:d6:be:c0:f2:8d:b5:de:aa:f6:98:80:25:36:48:28:8a: 99:09:8c:4c:ce:c1:0d:cb:89:4b:96:84:50:5a:0f:5a:09:33: f0:65:48:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iB2UEOk3Zw1u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODgyYTkyNzEtMmFhOC00ZjYzLTljNmEtY2ZlMDNlNDBhYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArURbROXhPNIx9kE/w036gt1OBQVSHrcXgR3q GNBlhUglyJvVIfFtXpJ17vgbreqsvUXCvrZmRpo4HdXxAfgHfNUsbeNvZE8I4q7c gSzDqWyM/fYTb1EuioQUerXXc2FziZ2HZtIhp4C0WA6+8r09BX4ARnX/JzFcz4dW mUb3mIFC+bEKFLrPOK/u0jLzq1uWXemY5UgjJHR6xa0we6uHuX78/4SawgyXiAGM vRDtPA3yZ3URT8mgXywVwQtvUGwPyaLKZ+pgBlYnKImORokhpB1qcG6oRHCKSiMc 8ti4fIySs8D7yNhZRz4iIQ3GmyZn/GuBds7Vfo6BbPuJBaonCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwXXRxsip6DxfyKFbtPh8Cd1mCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWJhNWY5MGItOTAxZC0z MWJhLTg2MWUtMjM2YmE1MWFhMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoAtWG30tikbEwGSzz25hvpxfCq3FyG4SGsbDN6l97Ck7/myqNycvBl wQKgb1m5H76jnsdTLuqSvX7m/2pNI3YQNFeCSj2CF5HirJfI4JbdV7DBNt0bNCjW mYe4L+2LuYz506+n8xSDp2F9ozjTXtmbgqgdEMgquwPla/ABRpe5h6YwrYVmoqyZ TppCi/ZolxmsdYuwH2sasK7ylveSR6rvtdw6YeuleDjFa9Oq8j0fTpTpCo4IcTPd jLt1UucHfw9hhSGHRFtmSNA9X/R3Gn7lERH3KEjEX0xX1r7A8o213qr2mIAlNkgo ipkJjEzOwQ3LiUuWhFBaD1oJM/BlSOY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:06 2025 by rpki-client