$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa File: f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa (raw, json) Hash identifier: tHTuHa3lXyjRp8iMHgOfBEqR+7o4pPkIVDkNnpmngtI= Subject key identifier: A4:11:DA:5E:77:8C:AC:49:B4:E6:7C:0D:67:11:84:75:1C:70:C4:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625BEBDD706F62285D9880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 68.227.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5b:eb:dd:70:6f:62:28:5d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=bc38dd5f-8cd1-4398-86b0-23029e4d8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:0b:de:05:ec:e3:ea:eb:ce:b0:88:31:52: 04:61:71:f3:cd:5b:4c:58:86:00:7a:0a:75:c7:ae: 22:93:cc:a0:dc:19:3e:e5:bf:42:6a:a3:3d:47:61: e3:d6:90:68:d9:86:cd:c9:26:d3:6a:bc:5a:33:81: 5f:d9:41:5b:de:4e:56:28:78:a2:00:18:59:84:44: 7d:93:b4:07:6e:fe:0a:65:6e:69:0e:6c:4c:18:e8: 91:ac:8c:18:15:18:09:2b:81:8e:b2:91:30:11:19: 49:bd:13:e1:15:7d:6d:35:01:15:f4:66:d6:8d:a0: bc:0f:4f:69:72:00:f2:22:89:69:62:cb:8e:35:03: d2:6f:27:ca:3e:41:d6:51:d8:5f:d5:c9:44:1f:60: 94:33:2b:fe:82:bc:d8:6f:ce:ea:32:3e:c2:57:52: 80:96:96:fe:5f:51:55:09:18:01:21:db:5c:95:c1: 88:2e:27:18:97:b8:fe:14:bd:db:56:16:da:c3:fd: ff:ed:55:db:b8:1d:4b:50:61:57:4f:c9:42:b1:31: c0:87:5d:b3:9c:b4:df:32:8f:59:f9:78:93:66:75: b5:53:9b:45:07:40:e3:6f:e3:c4:12:b9:09:ff:26: 27:0d:63:b7:33:fc:44:59:15:57:3d:8f:c3:1a:00: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:DA:5E:77:8C:AC:49:B4:E6:7C:0D:67:11:84:75:1C:70:C4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:82:3c:d7:45:a6:e1:8d:18:1f:bd:8f:1f:2e:82:b2:3d:78: ca:e0:8f:2f:00:11:99:97:69:e4:22:fa:72:e0:91:27:a3:4a: eb:35:b1:7e:cc:d3:5f:d2:5a:d8:fb:c9:4a:d3:af:ba:82:75: 2c:33:9f:18:74:b4:0a:42:82:2a:d5:fc:bd:ff:80:cc:6f:84: 75:5a:13:09:fa:8c:b3:40:54:aa:03:75:8d:ff:82:8e:6c:3d: 2d:7d:f1:71:8e:cb:2b:c4:74:0b:43:84:57:f3:b9:b1:8d:5e: 10:20:b0:08:4a:c8:cf:71:a1:4d:59:8d:46:ba:46:bf:f5:ce: 7a:4e:f6:63:20:5a:a8:cb:79:17:82:b5:f2:a4:63:92:1a:90: 7d:f3:8b:20:66:a6:f6:a0:c2:72:e7:13:25:4c:96:a4:1e:33: 9f:23:f7:51:ae:24:97:fc:9d:6d:f0:c8:bb:bd:0b:4b:dd:a7: 1d:9b:c0:f3:c2:0b:d8:c6:41:ca:68:78:f2:b3:d1:e2:71:d7: 9d:4d:21:fd:f3:a4:c8:46:e7:2e:0f:79:13:b6:4a:bf:13:ce: 1f:cb:c0:31:df:29:db:20:8b:96:3d:95:6d:3a:59:5b:36:74: e5:1a:19:bd:ce:df:84:b5:66:cf:8d:05:4a:f4:28:d8:c2:36: 7e:e1:1f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlvr3XBvYihdmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YmMzOGRkNWYtOGNkMS00Mzk4LTg2YjAtMjMwMjllNGQ4ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXUL3gXs4+rrzrCIMVIEYXHzzVtMWIYAegp1 x64ik8yg3Bk+5b9CaqM9R2Hj1pBo2YbNySbTarxaM4Ff2UFb3k5WKHiiABhZhER9 k7QHbv4KZW5pDmxMGOiRrIwYFRgJK4GOspEwERlJvRPhFX1tNQEV9GbWjaC8D09p cgDyIolpYsuONQPSbyfKPkHWUdhf1clEH2CUMyv+grzYb87qMj7CV1KAlpb+X1FV CRgBIdtclcGILicYl7j+FL3bVhbaw/3/7VXbuB1LUGFXT8lCsTHAh12znLTfMo9Z +XiTZnW1U5tFB0Djb+PEErkJ/yYnDWO3M/xEWRVXPY/DGgB5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQR2l53jKxJtOZ8DWcRhHUccMSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjQyNThiYzktMjRmMi0z ZDM1LWE4MzEtZWYzNzBkNmE1ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSCPNdFpuGNGB+9jx8ugrI9eMrgjy8AEZmXaeQi+nLgkSejSus1sX7M 01/SWtj7yUrTr7qCdSwznxh0tApCgirV/L3/gMxvhHVaEwn6jLNAVKoDdY3/go5s PS198XGOyyvEdAtDhFfzubGNXhAgsAhKyM9xoU1ZjUa6Rr/1znpO9mMgWqjLeReC tfKkY5IakH3ziyBmpvagwnLnEyVMlqQeM58j91GuJJf8nW3wyLu9C0vdpx2bwPPC C9jGQcpoePKz0eJx151NIf3zpMhG5y4PeRO2Sr8Tzh/LwDHfKdsgi5Y9lW06WVs2 dOUaGb3O34S1Zs+NBUr0KNjCNn7hH8s= -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:24 2025 by rpki-client