$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/996c33da-7cb3-3115-81dd-ae7a7b8efd55.roa File: 996c33da-7cb3-3115-81dd-ae7a7b8efd55.roa (raw, json) Hash identifier: l62tOn+zUFF8oHpfr4q320KifD2rUPT1mOukIwJMiR8= Subject key identifier: 58:9F:6A:AE:83:74:27:7B:01:52:94:D8:22:3B:9E:53:26:24:D8:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C3739BD81F0A78FA30E2F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/996c33da-7cb3-3115-81dd-ae7a7b8efd55.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.0.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:39:bd:81:f0:a7:8f:a3:0e:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b66777fd-2af1-4ace-a1b6-e01d93d538f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:a0:ec:cf:3c:45:40:8b:b2:1b:3c:f1:5a: ca:5c:61:7e:54:fc:e4:dd:2b:06:88:96:4b:75:5e: e8:cd:fd:1b:23:81:89:14:12:33:52:de:ef:ec:94: 2b:d6:64:60:c8:d5:3f:83:19:bc:1a:b9:b8:14:22: da:94:78:fa:68:e8:2d:5c:3d:e7:56:dd:66:c9:24: 57:d2:f0:92:59:13:88:4d:07:fb:e6:d0:c1:16:e0: ca:b7:8d:84:91:95:63:5f:19:27:40:42:c0:2f:9d: a6:4c:86:da:45:08:5e:3c:d3:17:48:09:10:aa:f1: f1:48:cd:4e:01:7a:56:b4:d7:ad:fc:41:40:fb:4d: c8:36:74:0c:23:b1:44:1a:ea:17:9b:c0:f3:21:1b: ba:3e:15:3f:ea:c4:5b:ff:0e:76:d2:16:07:e1:9b: 73:4e:ec:a9:a1:4e:94:eb:25:d4:2f:1d:a4:da:71: cd:60:38:44:fe:3d:b2:ee:0c:fc:05:c4:c2:4f:ad: 6c:23:c2:51:6c:79:d7:4c:7d:49:10:b7:fd:31:ee: d7:41:e2:ba:78:0a:53:8d:f3:f3:41:b6:a6:39:98: 8e:13:e8:14:e0:61:9f:a3:3c:39:36:39:f9:50:63: 3b:88:80:d3:01:35:34:6e:ad:9c:41:05:53:b7:6b: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9F:6A:AE:83:74:27:7B:01:52:94:D8:22:3B:9E:53:26:24:D8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/996c33da-7cb3-3115-81dd-ae7a7b8efd55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:19:84:ec:f2:9d:0d:f8:37:c4:54:3f:89:1d:a3:b3:46:c5: b9:05:46:c9:ce:07:2f:05:97:57:44:31:50:ed:ac:7b:b6:f8: 6d:f9:e5:ae:00:05:95:6d:3d:1f:c1:9e:29:93:ef:b3:ed:2c: d5:98:87:83:46:f8:4d:63:49:34:42:44:c3:52:63:9f:3b:a9: 0d:36:04:7c:45:d6:ad:da:d1:3a:53:c5:0f:3f:b9:33:e0:c7: 3f:fd:6a:50:fb:20:9e:1b:82:1a:fc:42:61:8a:19:13:c2:c1: b8:49:6c:c1:c7:4d:75:5c:7c:1a:0b:a7:98:c2:ac:b5:1a:77: be:5b:e6:99:b6:6a:83:39:f3:b2:99:56:3b:5c:33:cc:7f:6a: b7:93:c7:71:94:d9:1a:a5:ee:1f:fe:b6:a9:49:d9:da:77:79: cd:fd:b3:7c:53:11:b9:b5:cc:bc:f1:86:b8:c2:6b:22:f1:53: ef:a1:24:fe:70:3a:27:64:a9:5a:80:80:6a:4f:4b:01:44:1a: fa:90:2c:bd:e4:1c:28:a1:05:55:57:e1:9b:d7:74:37:56:c5: e1:18:dc:5d:a3:10:db:35:66:e7:87:97:ea:5a:16:7c:73:c9: 89:06:6b:fd:4d:5c:5c:8d:03:d2:35:49:3b:53:03:e2:62:b8: a5:f0:27:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNzm9gfCnj6MOLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjY2Nzc3ZmQtMmFmMS00YWNlLWExYjYtZTAxZDkzZDUzOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozeg7M88RUCLshs88VrKXGF+VPzk3SsGiJZL dV7ozf0bI4GJFBIzUt7v7JQr1mRgyNU/gxm8Grm4FCLalHj6aOgtXD3nVt1mySRX 0vCSWROITQf75tDBFuDKt42EkZVjXxknQELAL52mTIbaRQhePNMXSAkQqvHxSM1O AXpWtNet/EFA+03INnQMI7FEGuoXm8DzIRu6PhU/6sRb/w520hYH4ZtzTuypoU6U 6yXULx2k2nHNYDhE/j2y7gz8BcTCT61sI8JRbHnXTH1JELf9Me7XQeK6eApTjfPz QbamOZiOE+gU4GGfozw5Njn5UGM7iIDTATU0bq2cQQVTt2sElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFifaq6DdCd7AVKU2CI7nlMmJNjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk2YzMzZGEtN2NiMy0z MTE1LTgxZGQtYWU3YTdiOGVmZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgZhOzynQ34N8RUP4kdo7NGxbkFRsnOBy8Fl1dEMVDtrHu2+G355a4A BZVtPR/BnimT77PtLNWYh4NG+E1jSTRCRMNSY587qQ02BHxF1q3a0TpTxQ8/uTPg xz/9alD7IJ4bghr8QmGKGRPCwbhJbMHHTXVcfBoLp5jCrLUad75b5pm2aoM587KZ VjtcM8x/areTx3GU2Rql7h/+tqlJ2dp3ec39s3xTEbm1zLzxhrjCayLxU++hJP5w OidkqVqAgGpPSwFEGvqQLL3kHCihBVVX4ZvXdDdWxeEY3F2jENs1ZueHl+paFnxz yYkGa/1NXFyNA9I1STtTA+JiuKXwJ+w= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:34 2025 by rpki-client