$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96e2c938-84d5-3ca4-828c-67f7442601c1.roa File: 96e2c938-84d5-3ca4-828c-67f7442601c1.roa (raw, json) Hash identifier: cTtgH5Us308YePhYl6cKqDBH9jsNeBPCOsGzyixYKU0= Subject key identifier: D9:5D:B5:D4:79:95:93:4B:26:AD:EA:9A:EE:C3:FA:9D:D1:F8:D3:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20673403B74040C343AFB040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96e2c938-84d5-3ca4-828c-67f7442601c1.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 174.68.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:34:03:b7:40:40:c3:43:af:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=c4878198-be13-4ffd-be90-f78a86e9864b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:24:3f:89:2c:6b:88:2f:60:4a:b1:14:7d:06: ff:a7:3a:08:e1:22:8b:17:1b:17:50:d7:86:19:d4: 0c:94:c6:57:8d:93:0d:22:63:1c:f0:60:6a:12:7a: 5e:6e:cf:da:87:fc:d6:9a:86:14:38:c8:28:d7:4d: e4:4f:32:3a:7f:9a:b9:76:7f:c6:cd:34:90:c8:18: aa:7d:1c:0f:76:38:73:89:b0:f9:8b:01:9a:82:32: 8c:85:2a:dc:b2:da:47:8c:32:50:d3:4a:4e:48:f2: db:e4:35:df:a7:05:da:e6:88:d3:37:4f:fc:3b:83: bd:fb:14:4b:3e:b6:84:5f:1d:85:c0:49:57:80:82: ab:9c:e2:9d:b6:1b:4d:41:89:43:57:eb:5b:5e:d0: 35:15:01:6c:cb:c1:de:14:a4:d7:7d:d3:80:36:e7: e2:a7:bc:0f:66:97:b6:95:b8:8b:4d:b8:b1:e9:0b: 79:7f:db:63:d3:08:04:b3:ad:d1:dd:fc:4f:2f:ce: 9e:f0:88:31:3a:16:e4:c2:d9:04:3b:b3:d3:5b:d3: 9b:51:f7:92:bf:1a:44:8e:65:14:2d:e2:64:a8:f2: 41:b0:9e:c6:fa:52:38:1d:98:fa:2f:a8:fd:34:6e: 3d:50:e4:ab:c1:b9:43:2d:83:97:9b:48:a2:bd:1d: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5D:B5:D4:79:95:93:4B:26:AD:EA:9A:EE:C3:FA:9D:D1:F8:D3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96e2c938-84d5-3ca4-828c-67f7442601c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e1:ae:a1:0d:48:a1:f4:1e:9e:02:51:a5:cf:74:a8:6b:45: df:04:f1:31:80:cf:56:ef:aa:44:b3:89:67:b2:76:6f:ed:25: 61:4b:0e:6e:12:90:76:4d:3e:7f:25:a9:2f:32:0c:74:84:f5: 6b:35:cf:f1:74:61:4c:5e:d4:8b:df:bb:cb:dc:ee:96:82:0e: 0a:29:7e:13:3d:dc:00:2c:8c:1b:6f:eb:2f:4b:6b:74:b9:d4: 2d:29:77:8b:71:83:c8:5e:6e:63:59:fc:59:5c:c8:a9:5d:d1: d4:7c:e0:45:f8:a1:06:da:3a:14:76:aa:fc:22:50:98:e4:cf: 83:8b:9a:8c:99:96:c1:8f:18:26:90:52:80:49:48:d8:54:cf: 78:af:59:9f:50:c7:94:5c:00:23:90:8a:c3:ae:92:4f:77:67: 68:ef:b5:3e:9e:c5:62:e6:69:08:14:e2:66:22:69:c6:2f:a1: 2d:66:ab:ad:8b:32:42:e5:dc:84:84:f9:90:24:04:f8:d1:2f: ce:a8:0e:62:68:58:20:9d:08:58:c3:87:7c:80:e6:23:49:81: a2:1a:33:5d:43:6d:8a:3c:4b:c7:ce:36:f3:d3:9d:e8:74:03: 88:29:13:82:0a:e9:43:21:f4:85:55:94:94:31:f7:15:3a:3a: e2:14:b7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzQDt0BAw0OvsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzQ4NzgxOTgtYmUxMy00ZmZkLWJlOTAtZjc4YTg2ZTk4NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSQ/iSxriC9gSrEUfQb/pzoI4SKLFxsXUNeG GdQMlMZXjZMNImMc8GBqEnpebs/ah/zWmoYUOMgo103kTzI6f5q5dn/GzTSQyBiq fRwPdjhzibD5iwGagjKMhSrcstpHjDJQ00pOSPLb5DXfpwXa5ojTN0/8O4O9+xRL PraEXx2FwElXgIKrnOKdthtNQYlDV+tbXtA1FQFsy8HeFKTXfdOANufip7wPZpe2 lbiLTbix6Qt5f9tj0wgEs63R3fxPL86e8IgxOhbkwtkEO7PTW9ObUfeSvxpEjmUU LeJkqPJBsJ7G+lI4HZj6L6j9NG49UOSrwblDLYOXm0iivR1PEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNldtdR5lZNLJq3qmu7D+p3R+NPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTZlMmM5MzgtODRkNS0z Y2E0LTgyOGMtNjdmNzQ0MjYwMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3hrqENSKH0Hp4CUaXPdKhrRd8E8TGAz1bvqkSziWeydm/tJWFLDm4S kHZNPn8lqS8yDHSE9Ws1z/F0YUxe1Ivfu8vc7paCDgopfhM93AAsjBtv6y9La3S5 1C0pd4txg8hebmNZ/FlcyKld0dR84EX4oQbaOhR2qvwiUJjkz4OLmoyZlsGPGCaQ UoBJSNhUz3ivWZ9Qx5RcACOQisOukk93Z2jvtT6exWLmaQgU4mYiacYvoS1mq62L MkLl3ISE+ZAkBPjRL86oDmJoWCCdCFjDh3yA5iNJgaIaM11DbYo8S8fONvPTneh0 A4gpE4IK6UMh9IVVlJQx9xU6OuIUt+Y= -----END CERTIFICATE-----Generated at Thu Oct 16 01:37:21 2025 by rpki-client