$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99c25002-c0b7-3441-9ad3-5738bd012f39.roa File: 99c25002-c0b7-3441-9ad3-5738bd012f39.roa (raw, json) Hash identifier: Wv3F3T+42sizJrJplPpnNU2JU/1kRuZUSR6ArQcL9EI= Subject key identifier: C5:2F:6C:41:D2:52:B4:CE:AE:3B:81:99:91:3B:84:BC:D7:0D:5B:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2418328E9616D9BCF980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99c25002-c0b7-3441-9ad3-5738bd012f39.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:24:18:32:8e:96:16:d9:bc:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=eff5adb1-6d82-43da-af46-1c61ae5b629d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:3f:13:a2:4c:8a:da:05:07:54:a3:1c:2f: 07:10:c6:9c:c4:1c:86:3c:74:06:20:cc:d5:df:6e: 6d:4a:60:cb:7c:95:71:fd:93:67:63:04:6f:1b:28: 24:1d:62:82:63:54:9a:c8:67:4a:1c:f2:b6:8a:f7: 15:f4:9c:98:48:ab:6b:4a:5b:f0:93:12:9c:2b:c5: 05:6d:06:b8:34:1c:fd:28:6a:30:5f:f4:c1:4e:75: 72:ae:03:3d:12:92:62:f6:6b:e6:06:b6:0b:50:58: b8:be:1e:e7:c1:42:a9:8d:e4:44:91:48:9e:d3:77: d9:19:c3:e3:52:89:78:36:c5:7c:b7:6c:a0:34:0d: eb:d3:8e:04:66:00:70:9c:0c:42:d2:9c:f6:2c:f7: d9:98:5e:80:67:b2:18:e3:39:e3:39:03:da:a2:85: f6:e7:77:1f:c3:1d:68:76:0e:7e:fd:d9:73:4c:08: bc:7c:87:5c:f5:8e:06:6c:ca:3b:33:95:0e:74:dc: 61:f5:d3:7f:67:98:2d:76:a4:f9:11:47:42:23:93: fc:47:d2:4b:cd:0c:6e:90:fa:f3:f5:73:dd:e9:8a: 46:bc:95:c9:b5:7f:fa:a7:cb:32:33:3e:78:c2:50: 76:69:65:ce:dc:53:b4:9d:e8:72:49:e6:e8:55:4b: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:6C:41:D2:52:B4:CE:AE:3B:81:99:91:3B:84:BC:D7:0D:5B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99c25002-c0b7-3441-9ad3-5738bd012f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c4:7a:19:ac:b0:b1:ea:09:46:23:5a:e2:1e:58:e2:be:12: 1e:74:03:bc:a5:59:ad:55:fa:69:b6:06:da:8e:f9:52:34:4d: a1:e6:25:d0:29:19:e0:77:b3:aa:6d:8b:e6:5c:ef:98:ba:a0: 95:16:fb:0d:46:be:6f:2b:f7:94:8e:4b:70:99:cc:84:57:93: 36:58:c1:3a:88:9a:23:5d:6a:f4:cc:25:15:8d:cf:68:a3:e4: c3:90:46:ce:e3:ba:d3:9f:f0:6e:75:37:f4:0b:bf:bd:ce:40: a5:ab:fc:0a:83:f2:fc:29:c2:a9:73:9d:09:a2:c9:7d:54:7a: 35:87:8a:b3:54:7c:4f:d6:96:c8:ff:0a:d3:ee:a1:72:f9:b5: 41:fb:43:af:25:5c:26:d3:9c:89:5a:e8:90:bf:59:3a:56:f5: c1:cd:57:73:98:c2:c8:19:82:81:e9:f3:ab:53:d1:1c:a7:ae: fe:da:36:b9:3d:83:ad:b7:5e:eb:a8:23:10:3d:d4:c2:2a:18: c8:ad:48:a6:a0:c8:62:da:c9:14:6d:63:a7:3c:39:68:4f:06: 7c:35:7a:4b:c3:1a:99:57:40:f9:97:51:d0:c7:be:a2:ef:a3: f0:1c:5b:14:61:86:ab:e1:c0:a5:b4:b2:8b:94:7f:9f:3b:43: 4b:a5:26:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCQYMo6WFtm8+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZWZmNWFkYjEtNmQ4Mi00M2RhLWFmNDYtMWM2MWFlNWI2MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTk/E6JMitoFB1SjHC8HEMacxByGPHQGIMzV 325tSmDLfJVx/ZNnYwRvGygkHWKCY1SayGdKHPK2ivcV9JyYSKtrSlvwkxKcK8UF bQa4NBz9KGowX/TBTnVyrgM9EpJi9mvmBrYLUFi4vh7nwUKpjeREkUie03fZGcPj Uol4NsV8t2ygNA3r044EZgBwnAxC0pz2LPfZmF6AZ7IY4znjOQPaooX253cfwx1o dg5+/dlzTAi8fIdc9Y4GbMo7M5UOdNxh9dN/Z5gtdqT5EUdCI5P8R9JLzQxukPrz 9XPd6YpGvJXJtX/6p8syMz54wlB2aWXO3FO0nehySeboVUt7uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUvbEHSUrTOrjuBmZE7hLzXDVu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTljMjUwMDItYzBiNy0z NDQxLTlhZDMtNTczOGJkMDEyZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrEehmssLHqCUYjWuIeWOK+Eh50A7ylWa1V+mm2BtqO+VI0TaHmJdAp GeB3s6pti+Zc75i6oJUW+w1Gvm8r95SOS3CZzIRXkzZYwTqImiNdavTMJRWNz2ij 5MOQRs7jutOf8G51N/QLv73OQKWr/AqD8vwpwqlznQmiyX1UejWHirNUfE/Wlsj/ CtPuoXL5tUH7Q68lXCbTnIla6JC/WTpW9cHNV3OYwsgZgoHp86tT0Rynrv7aNrk9 g623XuuoIxA91MIqGMitSKagyGLayRRtY6c8OWhPBnw1ekvDGplXQPmXUdDHvqLv o/AcWxRhhqvhwKW0souUf587Q0ulJjk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:40:19 2025 by rpki-client