$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa File: f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa (raw, json) Hash identifier: B6CWvHMOqcHdrHi3iDMp/zNH4qhtPZxMY0MFvGmV3lQ= Subject key identifier: 50:96:6A:94:2F:01:C3:86:9B:15:E2:A7:63:D2:E6:44:F6:2C:18:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B4D11F0F860B9ABB58F5DCFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.227.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:f0:f8:60:b9:ab:b5:8f:5d:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=2f6f89d1-9bb4-49e8-8943-acafe0409822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:61:72:d7:91:fa:a9:3d:e6:54:79:92:b3: a3:4f:3c:9d:c3:31:04:16:fb:85:ef:73:eb:0e:22: b9:24:ff:af:d5:5c:e6:67:7f:20:a3:94:11:a4:e9: 2e:78:67:09:4c:ac:26:e9:40:28:d2:08:ed:44:d9: 2b:5c:be:0f:b1:b4:8e:9f:0a:eb:9d:7a:51:c1:86: 07:9e:71:66:d7:23:36:da:c9:03:bf:51:96:4e:c6: 16:a9:fd:31:22:56:36:11:6c:a6:50:b2:13:88:40: ba:2f:7c:f6:99:75:60:f3:4c:3a:f5:95:c7:f1:11: f2:2d:39:f4:48:62:54:9a:c3:a4:76:67:68:5c:9f: 33:fd:3c:3a:a2:5a:be:ae:af:24:76:9b:50:fd:56: ed:c6:8a:50:55:21:a8:6a:5b:03:60:9d:76:1b:f8: 51:ca:fa:5a:62:3f:e4:1a:f6:bc:52:93:2e:f3:08: 59:ea:08:28:29:de:d3:7c:8d:f2:2a:38:ec:3c:e7: 60:d4:6b:45:31:87:82:c6:4e:dd:f8:ba:cd:f2:22: 65:ba:91:04:04:f9:a2:d5:ec:12:ed:4b:9c:9e:a4: b6:ea:27:28:21:73:d9:01:4d:84:26:90:16:ea:6c: 3a:12:ce:a8:55:a9:e8:d2:ac:f1:b8:14:d4:57:2f: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:96:6A:94:2F:01:C3:86:9B:15:E2:A7:63:D2:E6:44:F6:2C:18:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:16:ac:dc:99:ca:11:ee:26:71:2a:6b:d3:c8:34:d1:29:46: 58:86:50:43:c9:c9:c8:b1:74:62:e8:40:22:14:c2:3b:5f:e1: 54:69:79:cd:52:88:ea:2e:88:3c:17:6c:1f:3b:72:07:fc:e7: 52:dd:5c:f8:66:89:8c:69:63:2b:9c:59:6b:30:a0:62:76:b7: 34:78:8f:53:ab:74:4e:12:8e:e7:0e:18:fb:59:ea:fc:d6:c5: 9d:d3:ee:01:b1:6f:1d:bd:4d:a3:ef:7d:89:3d:ad:1b:05:81: e3:6b:00:33:2b:e3:0a:9f:7f:63:c5:cd:96:f6:84:20:78:b5: 9f:ec:7c:f9:78:09:8f:7b:67:ce:9d:7c:69:85:88:ee:fc:78: 28:43:1a:d8:9f:11:39:82:e7:54:7e:cd:0c:02:30:85:ce:ac: b8:0f:b5:f2:a4:5f:25:ec:ab:8e:aa:a2:eb:51:8e:15:dd:2c: 26:70:29:59:32:f9:1c:15:18:c5:5f:48:3b:ae:51:f8:f9:31: 09:e7:47:c6:58:6b:ac:47:76:3a:29:c7:ac:50:c5:b6:68:21: d9:fd:8e:04:65:25:a1:ff:cf:5a:a2:4a:37:92:d1:4d:16:06: 37:cf:94:92:a9:f3:98:90:42:54:49:7b:37:46:30:fb:b1:50: 32:e5:bb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEfD4YLmrtY9dz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MmY2Zjg5ZDEtOWJiNC00OWU4LTg5NDMtYWNhZmUwNDA5ODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGthcteR+qk95lR5krOjTzydwzEEFvuF73Pr DiK5JP+v1VzmZ38go5QRpOkueGcJTKwm6UAo0gjtRNkrXL4PsbSOnwrrnXpRwYYH nnFm1yM22skDv1GWTsYWqf0xIlY2EWymULITiEC6L3z2mXVg80w69ZXH8RHyLTn0 SGJUmsOkdmdoXJ8z/Tw6olq+rq8kdptQ/VbtxopQVSGoalsDYJ12G/hRyvpaYj/k Gva8UpMu8whZ6ggoKd7TfI3yKjjsPOdg1GtFMYeCxk7d+LrN8iJlupEEBPmi1ewS 7UucnqS26icoIXPZAU2EJpAW6mw6Es6oVano0qzxuBTUVy9l2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCWapQvAcOGmxXip2PS5kT2LBhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjllN2Q2ZTYtMmVjYy0z NWFkLWIyMWMtOWI3ZDJlOWQxNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIWrNyZyhHuJnEqa9PINNEpRliGUEPJycixdGLoQCIUwjtf4VRpec1S iOouiDwXbB87cgf851LdXPhmiYxpYyucWWswoGJ2tzR4j1OrdE4SjucOGPtZ6vzW xZ3T7gGxbx29TaPvfYk9rRsFgeNrADMr4wqff2PFzZb2hCB4tZ/sfPl4CY97Z86d fGmFiO78eChDGtifETmC51R+zQwCMIXOrLgPtfKkXyXsq46qoutRjhXdLCZwKVky +RwVGMVfSDuuUfj5MQnnR8ZYa6xHdjopx6xQxbZoIdn9jgRlJaH/z1qiSjeS0U0W BjfPlJKp85iQQlRJezdGMPuxUDLlu9U= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:43 2025 by rpki-client