$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74af23c6-fc73-3a91-b806-db2203a7a29d.roa File: 74af23c6-fc73-3a91-b806-db2203a7a29d.roa (raw, json) Hash identifier: u9SZ2RUg8bXF/QnW7xoN1YZNui6fb5GZ7JV017RvNO4= Subject key identifier: DD:EC:E8:C5:3B:7B:13:36:9F:B0:AD:7B:2B:9F:9A:3B:A6:E0:B9:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2406D59588025353EF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74af23c6-fc73-3a91-b806-db2203a7a29d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:24:06:d5:95:88:02:53:53:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=76fd7733-cf74-4d46-a804-6f1afb2970c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fc:ed:0c:59:39:3a:69:63:ba:31:04:f2:56: 14:ee:1d:80:9f:9c:83:b5:46:5f:c2:fe:cc:fd:b8: 8f:5f:ee:e3:01:64:aa:67:fc:3a:62:95:1f:7a:c7: 24:51:30:3b:d9:7d:02:2e:3d:b6:89:12:0a:55:4a: 5f:03:96:1d:4f:c5:ef:b6:8b:aa:d5:6a:cc:80:ba: 81:2c:f7:c9:5e:07:6b:0b:16:4d:91:d1:bf:c8:6e: 66:1f:d7:47:a3:3a:09:7b:ef:a2:eb:3f:1b:1f:0e: 7c:f5:63:8f:2c:fc:0f:fb:a8:f9:f0:6b:67:79:9d: bd:a4:45:8f:c3:f3:b2:73:59:e3:23:88:14:c3:67: 47:3a:53:16:a1:9c:13:6f:de:91:4a:f7:c6:47:49: 6c:7a:d0:9f:8b:f3:52:6e:57:2d:9e:36:30:6c:fa: 33:ee:49:ad:77:b4:b7:63:21:ee:c1:20:7c:b3:24: 15:a9:c3:fc:48:18:04:cb:5e:d6:3e:14:0d:a5:f7: f0:e1:f1:26:c2:84:f7:08:54:60:6f:de:02:a9:74: 16:2c:6a:23:e0:72:9b:97:f3:ee:91:f6:6a:9b:1b: 03:a1:79:bc:d1:74:fb:42:69:b9:6e:b4:54:aa:d5: d7:c8:ef:63:58:d1:06:71:d4:61:bd:40:8f:fd:c7: 6d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EC:E8:C5:3B:7B:13:36:9F:B0:AD:7B:2B:9F:9A:3B:A6:E0:B9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74af23c6-fc73-3a91-b806-db2203a7a29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e7:a1:fa:99:ce:a6:e0:a5:71:ef:a1:35:6e:7e:4a:66:eb: 20:0a:49:6e:71:09:e3:b0:9a:bd:ea:c9:d4:a3:81:8b:04:1f: e1:df:8e:f7:0e:0f:ef:ee:6d:11:41:85:4a:37:68:a4:d6:f3: 2e:84:a2:0d:93:bd:d4:80:e9:8e:dd:7c:e0:24:8d:92:af:3b: 80:1c:93:68:48:4e:e2:b3:b2:5d:72:3f:f3:8e:8e:08:0a:6c: 7e:79:c6:ae:16:8f:a2:6a:d7:59:e2:2d:fa:42:c6:5c:9b:9c: 59:97:93:9e:ee:56:5f:ea:ab:94:95:1d:7b:5f:40:84:ec:33: ef:cc:d7:80:51:89:3c:12:56:cd:3b:37:60:81:f7:34:f6:40: 3c:41:a9:8d:76:c6:4a:61:53:1c:75:37:32:54:90:ce:96:db: 0b:45:a1:85:35:f7:5e:55:49:2f:e5:90:67:21:aa:3c:c5:94: cf:2f:3e:58:80:16:8e:4f:5b:b2:ce:20:cb:c8:05:26:22:e0: 9a:16:ef:fb:3c:4d:fd:23:a6:11:81:be:29:10:b8:26:cf:f4: 10:b8:7c:9d:f7:29:a3:7a:a8:cb:c6:8b:ae:13:fb:0e:a7:4d: d5:d7:13:32:27:dc:56:d2:a6:b6:1f:be:1e:86:86:f1:28:d3: 71:4c:95:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCQG1ZWIAlNT7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzZmZDc3MzMtY2Y3NC00ZDQ2LWE4MDQtNmYxYWZiMjk3MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivztDFk5OmljujEE8lYU7h2An5yDtUZfwv7M /biPX+7jAWSqZ/w6YpUfesckUTA72X0CLj22iRIKVUpfA5YdT8Xvtouq1WrMgLqB LPfJXgdrCxZNkdG/yG5mH9dHozoJe++i6z8bHw589WOPLPwP+6j58GtneZ29pEWP w/Oyc1njI4gUw2dHOlMWoZwTb96RSvfGR0lsetCfi/NSblctnjYwbPoz7kmtd7S3 YyHuwSB8syQVqcP8SBgEy17WPhQNpffw4fEmwoT3CFRgb94CqXQWLGoj4HKbl/Pu kfZqmxsDoXm80XT7Qmm5brRUqtXXyO9jWNEGcdRhvUCP/cdtEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3s6MU7exM2n7Cteyufmjum4LnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzRhZjIzYzYtZmM3My0z YTkxLWI4MDYtZGIyMjAzYTdhMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAKHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITnofqZzqbgpXHvoTVufkpm6yAKSW5xCeOwmr3qydSjgYsEH+HfjvcO D+/ubRFBhUo3aKTW8y6Eog2TvdSA6Y7dfOAkjZKvO4Ack2hITuKzsl1yP/OOjggK bH55xq4Wj6Jq11niLfpCxlybnFmXk57uVl/qq5SVHXtfQITsM+/M14BRiTwSVs07 N2CB9zT2QDxBqY12xkphUxx1NzJUkM6W2wtFoYU1915VSS/lkGchqjzFlM8vPliA Fo5PW7LOIMvIBSYi4JoW7/s8Tf0jphGBvikQuCbP9BC4fJ33KaN6qMvGi64T+w6n TdXXEzIn3FbSprYfvh6GhvEo03FMlVw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:28 2025 by rpki-client