$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d89edb1d-ae54-3137-b115-d0a3f1098503.roa File: d89edb1d-ae54-3137-b115-d0a3f1098503.roa (raw, json) Hash identifier: uhEPobcFifJPnC6zI4gou8/3z232MBhlnhHciMjixVw= Subject key identifier: 89:55:B5:C2:7A:78:1C:F5:64:00:17:40:2C:6A:9E:63:9A:66:EE:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F29BD74D0B3F190B376F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d89edb1d-ae54-3137-b115-d0a3f1098503.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.13.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:9b:d7:4d:0b:3f:19:0b:37:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=44958ddf-4783-418b-8673-9992e3f1e4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:57:62:fe:dd:dc:4e:b6:43:04:0d:82:9f:6d: 5d:1f:d4:9e:5d:66:6f:3f:91:65:3e:66:8f:ea:8a: 9f:8b:27:50:aa:5c:11:b9:20:9f:cc:c6:fc:3f:78: 2a:19:c2:1d:dd:d1:71:91:55:00:17:78:53:24:be: a5:a4:3f:9a:f1:42:ef:5e:56:88:8d:f0:43:ae:c2: 5a:ac:28:3d:d1:22:1b:5c:09:88:71:73:f7:e1:12: 0b:bb:4b:65:18:5b:fd:6c:8d:b1:12:4c:3b:f5:0c: fa:ba:9a:72:21:82:70:8f:fb:77:4d:5c:58:d9:46: 9a:a2:a4:46:5e:93:88:16:56:ea:64:f1:8e:2e:f3: 2d:cf:ea:28:8f:96:5d:ef:31:e6:64:35:f9:5d:c8: b4:d3:9b:3f:0d:d9:62:95:6c:fd:90:20:57:18:0a: a2:87:f0:45:c5:3d:29:76:e3:d4:cb:83:8a:a5:30: b3:16:3c:e7:b3:ee:47:7f:77:5c:28:7a:c5:7e:fa: e7:1b:45:cb:65:58:c5:28:5e:9a:9c:85:ee:c1:cc: 3d:80:1b:20:cf:eb:3d:a9:30:27:84:94:60:1d:b3: 5d:e0:e8:43:f0:8e:c1:51:94:04:29:9a:07:1f:1b: be:32:2e:00:93:0f:70:a5:a8:19:7d:21:eb:d0:6a: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:B5:C2:7A:78:1C:F5:64:00:17:40:2C:6A:9E:63:9A:66:EE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d89edb1d-ae54-3137-b115-d0a3f1098503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.13.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:df:5c:36:be:68:fc:18:c1:68:24:79:08:aa:ea:d5:70:dc: 2d:9d:04:87:f5:86:65:a9:76:bc:21:71:ff:64:62:9a:00:c3: 80:ef:b3:b6:70:c3:9a:fd:f1:d9:cd:3f:46:21:97:6c:41:69: f3:53:8c:07:f5:35:3c:c5:bd:f1:7b:fc:a0:b4:4e:7d:fe:e2: f4:f0:7f:1e:d9:a3:12:8e:98:0b:1e:f8:66:85:04:0d:80:d3: 8c:00:9d:0e:18:54:eb:fe:55:a0:d6:74:b2:67:41:c9:1c:72: 21:27:ad:34:d8:6f:63:97:84:54:5b:d4:43:d6:6a:8b:7b:cf: 93:03:70:61:d5:ef:6a:a1:cc:63:85:06:12:28:6c:ff:87:6e: 57:0c:56:76:d8:17:27:3b:58:be:0f:9d:d0:9d:4e:ce:2a:3b: dc:d9:cc:a8:1a:5e:b5:31:dc:dd:89:27:4d:5f:25:7b:de:a9: d7:71:1a:77:fb:73:1b:c1:7d:5b:59:98:dc:35:44:36:c6:d7: 92:3a:9c:01:ab:c5:d6:4b:ab:d4:2a:67:84:35:21:df:df:de: 9b:c8:b8:8f:ef:51:35:49:a5:bc:2f:ad:e6:d8:9c:39:55:5c: ff:e9:40:e4:a4:f7:ef:66:32:7b:04:f0:71:0b:00:76:44:5b: 09:ca:63:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pvXTQs/GQs3bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDQ5NThkZGYtNDc4My00MThiLTg2NzMtOTk5MmUzZjFlNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFdi/t3cTrZDBA2Cn21dH9SeXWZvP5FlPmaP 6oqfiydQqlwRuSCfzMb8P3gqGcId3dFxkVUAF3hTJL6lpD+a8ULvXlaIjfBDrsJa rCg90SIbXAmIcXP34RILu0tlGFv9bI2xEkw79Qz6uppyIYJwj/t3TVxY2UaaoqRG XpOIFlbqZPGOLvMtz+ooj5Zd7zHmZDX5Xci005s/DdlilWz9kCBXGAqih/BFxT0p duPUy4OKpTCzFjzns+5Hf3dcKHrFfvrnG0XLZVjFKF6anIXuwcw9gBsgz+s9qTAn hJRgHbNd4OhD8I7BUZQEKZoHHxu+Mi4Akw9wpagZfSHr0GrKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlVtcJ6eBz1ZAAXQCxqnmOaZu4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDg5ZWRiMWQtYWU1NC0z MTM3LWIxMTUtZDBhM2YxMDk4NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvfXDa+aPwYwWgkeQiq6tVw3C2dBIf1hmWpdrwhcf9kYpoAw4Dvs7Zw w5r98dnNP0Yhl2xBafNTjAf1NTzFvfF7/KC0Tn3+4vTwfx7ZoxKOmAse+GaFBA2A 04wAnQ4YVOv+VaDWdLJnQckcciEnrTTYb2OXhFRb1EPWaot7z5MDcGHV72qhzGOF BhIobP+HblcMVnbYFyc7WL4PndCdTs4qO9zZzKgaXrUx3N2JJ01fJXveqddxGnf7 cxvBfVtZmNw1RDbG15I6nAGrxdZLq9QqZ4Q1Id/f3pvIuI/vUTVJpbwvrebYnDlV XP/pQOSk9+9mMnsE8HELAHZEWwnKY0M= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:06 2025 by rpki-client