$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9d09e26-1f92-3e7a-b26a-64abbd4a2274.roa File: b9d09e26-1f92-3e7a-b26a-64abbd4a2274.roa (raw, json) Hash identifier: HZyrEKH1GKJ/5nQRjI26qasy5hDMDyihSp1JYeOds4g= Subject key identifier: 60:6B:C5:BB:95:42:AD:68:33:5E:89:14:E4:C9:A4:41:71:07:1F:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B196C2874E917EAC1C02EE800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9d09e26-1f92-3e7a-b26a-64abbd4a2274.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.2.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:28:74:e9:17:ea:c1:c0:2e:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=f255ef57-42f2-4b07-a5f3-bf4db408199f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:4a:7d:07:16:8d:15:06:64:83:5f:8c:28: 2c:8a:d1:66:05:1a:e6:b6:53:6e:8a:6e:e8:a2:f4: 33:7b:3f:19:4e:7a:9a:06:f4:80:13:92:f3:03:02: c9:fd:8e:e4:8e:59:96:4a:af:21:14:d4:6e:17:da: 7d:1f:53:6b:ec:31:67:e0:b0:90:d5:37:41:51:00: 7f:1a:87:a4:17:ff:d6:09:86:69:d2:4d:d8:09:28: 1b:e1:a8:30:46:40:c6:9d:0a:70:91:00:bf:a5:f7: 82:77:24:0f:18:85:1d:99:21:10:0a:07:97:10:ae: fc:52:6a:e7:c6:ec:36:3d:67:31:db:cf:03:6a:c4: 41:b6:b3:32:74:ca:e7:0b:a9:77:6b:92:c5:85:ae: 6a:c7:ed:12:71:41:02:5f:ed:d3:5b:dc:b5:67:60: 36:6c:ab:e1:5e:c3:e4:84:7b:ae:97:19:42:36:5a: 4d:85:3e:22:b9:d1:d2:12:25:d2:47:3b:11:08:59: 6f:e7:ba:64:d2:8d:9e:02:31:a8:2e:18:26:47:34: bb:73:15:87:78:6e:eb:4e:7d:0a:1e:50:61:48:78: 3d:bf:78:82:af:27:c3:43:f9:41:a9:30:e3:21:7f: 00:b5:71:b9:4e:2f:1b:2b:51:27:26:fb:e8:f0:ea: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:C5:BB:95:42:AD:68:33:5E:89:14:E4:C9:A4:41:71:07:1F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9d09e26-1f92-3e7a-b26a-64abbd4a2274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:71:d1:15:2d:cf:d1:cd:cb:bc:53:dd:8c:3b:e0:43:2e:9a: 64:8f:0f:01:ea:d8:98:05:0d:99:d5:80:2a:7b:95:73:d5:45: 4b:ed:42:ae:0c:6a:31:b1:5a:68:40:ce:8d:5d:7f:1b:a8:07: 9c:68:6c:28:a9:c4:7a:c8:55:72:fe:67:16:c3:9d:d9:0d:13: 70:49:ec:43:8a:c2:67:72:a3:cf:53:95:e1:0c:be:60:cd:fc: 8a:a8:cd:e7:ae:29:11:7c:e0:63:df:a4:be:b5:0c:6f:b1:e8: bd:c2:85:b1:39:72:4f:42:f1:ff:e2:4e:03:e1:e0:58:2b:7a: a9:bd:7c:aa:86:a1:d4:6b:78:ac:c1:42:9d:eb:a5:e6:32:24: 13:22:cd:a1:89:16:22:5d:92:8b:70:a3:9b:9b:68:04:c0:dd: 55:74:e6:ad:a1:64:5d:36:88:4c:a1:12:ce:b6:e4:44:6e:e5: fc:54:c8:0e:be:79:8e:8f:8c:0d:34:79:1f:2c:42:db:38:0e: bc:cc:af:49:8f:09:e0:79:b9:09:67:47:d1:a6:4a:4a:9e:a0: d6:68:af:b9:b2:65:68:af:b4:21:c8:11:86:0a:7e:cc:72:7c: d3:34:8d:1f:83:2a:f1:ba:80:2e:eb:53:01:ea:d1:00:d8:8e: fd:c9:7d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbCh06RfqwcAu6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZjI1NWVmNTctNDJmMi00YjA3LWE1ZjMtYmY0ZGI0MDgxOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmhKfQcWjRUGZINfjCgsitFmBRrmtlNuim7o ovQzez8ZTnqaBvSAE5LzAwLJ/Y7kjlmWSq8hFNRuF9p9H1Nr7DFn4LCQ1TdBUQB/ GoekF//WCYZp0k3YCSgb4agwRkDGnQpwkQC/pfeCdyQPGIUdmSEQCgeXEK78Umrn xuw2PWcx288DasRBtrMydMrnC6l3a5LFha5qx+0ScUECX+3TW9y1Z2A2bKvhXsPk hHuulxlCNlpNhT4iudHSEiXSRzsRCFlv57pk0o2eAjGoLhgmRzS7cxWHeG7rTn0K HlBhSHg9v3iCryfDQ/lBqTDjIX8AtXG5Ti8bK1EnJvvo8OrggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBrxbuVQq1oM16JFOTJpEFxBx/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjlkMDllMjYtMWY5Mi0z ZTdhLWIyNmEtNjRhYmJkNGEyMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdx0RUtz9HNy7xT3Yw74EMummSPDwHq2JgFDZnVgCp7lXPVRUvtQq4M ajGxWmhAzo1dfxuoB5xobCipxHrIVXL+ZxbDndkNE3BJ7EOKwmdyo89TleEMvmDN /IqozeeuKRF84GPfpL61DG+x6L3ChbE5ck9C8f/iTgPh4Fgreqm9fKqGodRreKzB Qp3rpeYyJBMizaGJFiJdkotwo5ubaATA3VV05q2hZF02iEyhEs625ERu5fxUyA6+ eY6PjA00eR8sQts4DrzMr0mPCeB5uQlnR9GmSkqeoNZor7myZWivtCHIEYYKfsxy fNM0jR+DKvG6gC7rUwHq0QDYjv3JfZE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:43 2025 by rpki-client