$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34d916b4-069c-3c83-9772-445ae03c1dcc.roa File: 34d916b4-069c-3c83-9772-445ae03c1dcc.roa (raw, json) Hash identifier: uU8VDQq05i3JBw/exOVxxpg/AUMG/5A7t7qRMJtvqiw= Subject key identifier: 28:F0:8B:C2:42:8D:A2:3C:EE:C5:87:F8:DA:23:8E:BF:FF:DF:1C:AD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C373987D04D3679E4E5B700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34d916b4-069c-3c83-9772-445ae03c1dcc.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:39:87:d0:4d:36:79:e4:e5:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=38997c8f-8ef7-4076-a0d5-6c8ad4a97fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:eb:1f:0c:40:eb:73:a1:f8:01:2c:be:f5: 5d:18:ce:77:64:5d:15:c7:b3:80:b6:bf:e0:6d:bf: 6a:91:2a:b2:c4:df:c6:a3:eb:71:b1:4e:dc:d3:de: 67:4f:a2:73:67:f3:f9:92:de:3a:04:d6:39:21:78: 59:43:25:5a:be:d4:7e:1a:ab:07:e2:98:05:2f:af: 46:6d:78:63:2f:c0:05:5c:82:6f:7a:2d:a9:47:8d: db:f6:c0:e5:f4:7a:02:ad:f0:77:d6:dc:cc:a9:66: ca:28:01:fb:14:7f:5e:eb:a0:f1:bb:44:1c:77:b6: 89:3b:42:67:c9:fe:a0:93:17:8d:76:61:88:3b:6d: 5a:14:15:f0:30:6b:f6:6a:f9:18:91:c9:23:f2:2e: c1:44:bb:22:8b:4a:31:b5:2d:d1:51:df:65:f1:82: b8:57:8e:31:46:71:14:c3:e0:d5:f4:a2:bf:b3:55: ba:89:0e:c1:a1:89:4f:4e:8b:01:f5:48:3b:b9:db: f3:7c:7a:64:64:fa:09:a1:40:ea:87:9a:1c:33:31: a9:1d:46:bc:19:ef:0b:35:a9:94:34:3d:ab:1c:1d: 9b:a7:e5:87:c6:17:f6:6b:38:23:08:42:88:98:77: a8:2b:45:6f:9f:02:65:22:39:1a:22:ce:89:46:f4: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:8B:C2:42:8D:A2:3C:EE:C5:87:F8:DA:23:8E:BF:FF:DF:1C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34d916b4-069c-3c83-9772-445ae03c1dcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a8:d1:8e:ef:2c:01:05:df:ea:40:cc:0d:a5:51:08:ce:38: 9e:50:61:4b:9f:84:2f:ff:3c:13:21:bc:ef:30:d9:9b:8e:f3: 02:75:b3:8e:d1:05:06:e7:8b:ee:08:36:81:3a:08:f5:fd:ff: 99:25:b6:4e:ce:b0:e6:6d:cd:d1:61:2e:e6:51:36:60:f0:5e: 09:c9:8a:26:99:0c:a4:04:4b:ad:38:d7:a9:7d:6e:f4:5a:8c: b9:5f:27:66:fe:d5:10:d3:e3:86:d2:8b:96:99:51:90:db:b2: 70:50:36:1f:7f:13:f3:ed:30:98:f3:4a:6c:0f:2e:f0:db:a6: 99:b7:6b:d0:89:00:01:84:8f:dc:0e:5d:c6:28:22:ba:53:e0: cb:2f:29:d2:c2:cf:14:a5:7e:97:3d:e4:33:92:31:02:ac:e5: 2f:08:83:47:02:49:f4:b7:78:ff:55:d2:e9:a5:6c:69:36:d5: ab:9c:99:c4:d2:70:d0:53:cd:43:7d:9a:42:99:5b:80:be:e6: a1:9e:dd:1c:3d:7d:f7:08:d6:3b:49:c8:dd:73:70:1d:ae:4f: f9:d6:58:dd:58:43:a9:84:78:d8:af:a3:6b:8a:6f:80:a0:2e: 86:ca:8c:67:25:bf:5f:26:4d:a9:99:ea:a8:04:60:d2:45:e4: f8:7c:13:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzmH0E02eeTltwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Mzg5OTdjOGYtOGVmNy00MDc2LWEwZDUtNmM4YWQ0YTk3ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNvrHwxA63Oh+AEsvvVdGM53ZF0Vx7OAtr/g bb9qkSqyxN/Go+txsU7c095nT6JzZ/P5kt46BNY5IXhZQyVavtR+GqsH4pgFL69G bXhjL8AFXIJvei2pR43b9sDl9HoCrfB31tzMqWbKKAH7FH9e66Dxu0Qcd7aJO0Jn yf6gkxeNdmGIO21aFBXwMGv2avkYkckj8i7BRLsii0oxtS3RUd9l8YK4V44xRnEU w+DV9KK/s1W6iQ7BoYlPTosB9Ug7udvzfHpkZPoJoUDqh5ocMzGpHUa8Ge8LNamU ND2rHB2bp+WHxhf2azgjCEKImHeoK0VvnwJlIjkaIs6JRvTI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjwi8JCjaI87sWH+Nojjr//3xytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzRkOTE2YjQtMDY5Yy0z YzgzLTk3NzItNDQ1YWUwM2MxZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOo0Y7vLAEF3+pAzA2lUQjOOJ5QYUufhC//PBMhvO8w2ZuO8wJ1s47R BQbni+4INoE6CPX9/5kltk7OsOZtzdFhLuZRNmDwXgnJiiaZDKQES60416l9bvRa jLlfJ2b+1RDT44bSi5aZUZDbsnBQNh9/E/PtMJjzSmwPLvDbppm3a9CJAAGEj9wO XcYoIrpT4MsvKdLCzxSlfpc95DOSMQKs5S8Ig0cCSfS3eP9V0umlbGk21aucmcTS cNBTzUN9mkKZW4C+5qGe3Rw9ffcI1jtJyN1zcB2uT/nWWN1YQ6mEeNivo2uKb4Cg LobKjGclv18mTamZ6qgEYNJF5Ph8E+g= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:07 2025 by rpki-client