$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e2f399-7490-30ce-bf75-07fdd781529e.roa File: 09e2f399-7490-30ce-bf75-07fdd781529e.roa (raw, json) Hash identifier: cZI/se27T+kYo6INM/fjQGC/0oM+zBzg3vpeICooEQE= Subject key identifier: D9:92:0D:70:FF:76:E1:07:83:C4:0D:FE:47:C3:7C:89:B3:48:2A:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3739AC226A157B71FA8E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e2f399-7490-30ce-bf75-07fdd781529e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:39:ac:22:6a:15:7b:71:fa:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=48f3cb5f-db69-41b1-a22e-cbe27534c352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:0b:97:03:61:3a:e7:3e:c1:06:73:35:04: 7f:d9:57:ed:43:ef:7c:6c:4d:04:f9:6f:e0:30:c2: 8b:35:e1:dd:a3:9c:c8:b4:95:b6:19:8c:62:09:8f: 5d:63:b2:9f:04:ea:fb:a2:ec:05:32:e8:c3:83:43: 98:63:32:46:9c:69:3a:9a:66:75:b0:a6:81:1f:2b: bb:2c:aa:6c:d8:11:b4:16:f0:86:09:55:2c:bf:44: 37:d0:9f:e9:5c:bd:89:e0:76:54:bc:92:d8:26:82: e5:f3:a8:ae:0c:90:a7:0f:48:c7:9e:0d:65:83:28: 07:7c:28:13:d0:d9:3c:22:33:14:88:cf:6c:09:47: 4e:03:d6:cb:6f:83:6e:3f:f0:6f:2e:aa:92:2d:e2: e6:fa:ed:49:2d:4b:11:3a:87:81:95:4e:86:c6:b3: b5:a9:c1:77:ed:95:be:4d:ba:4b:5b:fd:0f:32:25: d4:14:54:66:8a:8f:dd:1d:68:78:a9:d8:6a:02:f3: 1f:71:fe:1e:96:95:80:c6:16:9a:a4:fc:82:95:8d: cc:67:7c:41:08:6e:77:58:c7:cf:2b:fd:52:6d:12: c6:5d:f0:76:11:34:94:87:e4:b6:68:3e:16:4d:df: fe:e2:40:5b:76:21:ed:45:28:0c:dc:dd:42:8c:a0: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:92:0D:70:FF:76:E1:07:83:C4:0D:FE:47:C3:7C:89:B3:48:2A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e2f399-7490-30ce-bf75-07fdd781529e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:20:34:4f:ac:1b:e8:e1:f0:b4:5d:fb:4a:7f:c2:df:d5:8e: 7d:7a:01:4b:76:df:ea:db:0d:7a:d7:cd:66:56:97:2e:f6:6e: fe:78:ce:35:f3:35:6e:7a:85:7c:6e:8d:75:71:45:11:22:38: 22:b2:9a:67:17:2b:ae:e7:e6:ef:e1:6a:74:d2:1c:e3:1e:b2: 47:92:e8:ef:f4:cc:1e:61:32:eb:3b:6b:c6:2c:62:7b:f8:14: 3e:75:32:8a:ff:36:a9:69:40:e7:2a:49:2e:51:6a:eb:33:19: ff:b0:c3:11:c5:e2:66:df:8f:a3:e1:30:44:5e:cf:05:aa:db: 67:e5:93:cc:bb:03:83:bf:a2:b3:73:ce:b8:39:28:56:43:e3: b6:db:a8:54:65:ec:b9:ef:5c:33:b0:73:9b:b5:e7:01:a6:ef: 6e:df:cd:2e:e1:e3:3a:94:7f:61:e7:53:f9:8e:d3:99:c3:7b: 08:f4:40:cf:67:b8:b8:3f:e4:1a:b7:42:d4:a5:a7:f5:6c:71: 6f:86:6d:85:72:24:5d:83:4a:8d:dd:c5:08:53:35:6e:fa:34: a4:b9:f5:2b:04:86:5d:ab:bd:a6:97:5e:c4:d4:01:2f:4d:58: 06:ab:5a:17:d1:2f:e1:ed:f4:65:99:d6:4f:b8:5d:a9:07:19: 02:66:28:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzmsImoVe3H6joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDhmM2NiNWYtZGI2OS00MWIxLWEyMmUtY2JlMjc1MzRjMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkecLlwNhOuc+wQZzNQR/2VftQ+98bE0E+W/g MMKLNeHdo5zItJW2GYxiCY9dY7KfBOr7ouwFMujDg0OYYzJGnGk6mmZ1sKaBHyu7 LKps2BG0FvCGCVUsv0Q30J/pXL2J4HZUvJLYJoLl86iuDJCnD0jHng1lgygHfCgT 0Nk8IjMUiM9sCUdOA9bLb4NuP/BvLqqSLeLm+u1JLUsROoeBlU6GxrO1qcF37ZW+ TbpLW/0PMiXUFFRmio/dHWh4qdhqAvMfcf4elpWAxhaapPyClY3MZ3xBCG53WMfP K/1SbRLGXfB2ETSUh+S2aD4WTd/+4kBbdiHtRSgM3N1CjKD/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmSDXD/duEHg8QN/kfDfImzSCqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDllMmYzOTktNzQ5MC0z MGNlLWJmNzUtMDdmZGQ3ODE1MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAgNE+sG+jh8LRd+0p/wt/Vjn16AUt23+rbDXrXzWZWly72bv54zjXz NW56hXxujXVxRREiOCKymmcXK67n5u/hanTSHOMeskeS6O/0zB5hMus7a8YsYnv4 FD51Mor/NqlpQOcqSS5RauszGf+wwxHF4mbfj6PhMERezwWq22flk8y7A4O/orNz zrg5KFZD47bbqFRl7LnvXDOwc5u15wGm727fzS7h4zqUf2HnU/mO05nDewj0QM9n uLg/5Bq3QtSlp/VscW+GbYVyJF2DSo3dxQhTNW76NKS59SsEhl2rvaaXXsTUAS9N WAarWhfRL+Ht9GWZ1k+4XakHGQJmKK0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:27 2025 by rpki-client