$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4234cc95-8034-3026-b3cd-8de86b1fd8fb.roa File: 4234cc95-8034-3026-b3cd-8de86b1fd8fb.roa (raw, json) Hash identifier: mg5yA64OhR2xckku9O4+eQZIoYo+mK7MFSvKuKykU1c= Subject key identifier: 16:8B:23:7F:8E:D6:0E:18:BF:15:6F:AF:C5:74:CE:75:BA:88:B7:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1C374EA03B99F8A9D2B43D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4234cc95-8034-3026-b3cd-8de86b1fd8fb.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 68.99.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:4e:a0:3b:99:f8:a9:d2:b4:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=57d9190a-531b-45e6-800f-5e0f7f2e59a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:7c:f6:0a:59:f9:51:a3:7a:49:53:ac:3c: a1:c0:28:38:78:6d:3e:8f:6c:25:dc:d7:60:af:0b: b4:7c:e8:68:21:32:e7:73:24:02:22:3e:52:d6:4a: 29:6c:35:9d:61:36:75:c2:b9:ad:6b:1a:4f:34:cc: 6f:0c:2c:79:a3:ad:8d:79:c5:ff:51:f1:34:32:1b: 53:2a:c9:e2:1b:e1:70:5a:b0:93:9b:21:a1:1f:3f: 74:fb:34:80:8c:21:44:6b:31:19:ca:ed:c8:b8:02: 19:1a:48:c2:ea:50:1a:7a:c7:fb:96:01:c4:f0:7e: 6f:23:98:4c:bc:64:a5:af:81:0f:a9:6e:f8:e7:bc: b7:89:3a:90:7b:8c:b8:4a:60:e4:00:a8:c9:24:c8: 39:19:f6:84:72:e6:28:43:a9:55:d5:f0:01:2c:62: 00:1e:90:ba:89:67:4a:2f:cc:24:da:f2:39:52:dd: f1:12:26:6d:72:75:a7:9a:f4:ad:a5:af:75:27:e4: 90:27:e0:4b:b9:d0:eb:df:6f:4e:6c:99:cc:b8:86: 90:4d:71:c4:5e:97:12:a2:a1:a9:16:ab:35:a8:e1: 26:e0:c5:5d:db:0c:b5:10:43:ad:8b:8b:62:ae:41: a1:14:47:e5:26:19:91:ea:a3:83:87:f0:09:5f:7d: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8B:23:7F:8E:D6:0E:18:BF:15:6F:AF:C5:74:CE:75:BA:88:B7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4234cc95-8034-3026-b3cd-8de86b1fd8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:09:0d:2b:11:47:2f:9b:15:0d:f0:c1:84:22:16:7e:c9:85: 93:1f:7a:53:ce:31:58:8f:30:3e:bb:6b:b1:c5:70:58:04:3b: f5:5f:3e:e4:e2:9c:85:90:a7:66:ae:5a:47:cc:b5:8e:e1:f9: 4d:6e:80:1a:f4:28:0b:6a:d4:fc:a4:72:92:e3:3d:af:b3:cf: 79:dd:94:84:dd:a1:71:ca:bf:cc:b3:f7:c3:98:c3:b3:70:a7: 5f:29:0f:5f:65:c6:8d:4e:de:15:a4:03:75:c1:05:3e:b6:72: 65:e7:fd:c0:67:ed:f6:f7:23:05:9c:92:38:10:16:d6:64:33: e6:48:6f:25:8c:2e:01:50:c7:40:bd:ca:dd:87:ee:dc:46:f6: 04:53:39:01:38:d8:4c:03:d9:af:f2:8f:94:72:2c:28:52:dc: ba:e3:1d:95:71:9c:0b:c5:8c:e0:b8:98:14:d9:b2:72:fc:1a: fb:02:15:91:54:c3:20:b2:93:9a:e7:61:8c:68:d1:d4:74:3b: 04:3c:56:95:c8:2a:98:84:fa:8e:29:e0:8e:17:07:35:eb:7c: 56:b1:91:d6:59:cf:22:ff:34:00:17:5d:4e:75:c3:fc:fd:d4: 52:9b:0c:e2:73:28:95:34:a8:8f:bf:01:c6:b4:f3:5f:ce:4b: ea:39:4d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN06gO5n4qdK0PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTdkOTE5MGEtNTMxYi00NWU2LTgwMGYtNWUwZjdmMmU1OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tp89gpZ+VGjeklTrDyhwCg4eG0+j2wl3Ndg rwu0fOhoITLncyQCIj5S1kopbDWdYTZ1wrmtaxpPNMxvDCx5o62NecX/UfE0MhtT KsniG+FwWrCTmyGhHz90+zSAjCFEazEZyu3IuAIZGkjC6lAaesf7lgHE8H5vI5hM vGSlr4EPqW7457y3iTqQe4y4SmDkAKjJJMg5GfaEcuYoQ6lV1fABLGIAHpC6iWdK L8wk2vI5Ut3xEiZtcnWnmvStpa91J+SQJ+BLudDr329ObJnMuIaQTXHEXpcSoqGp Fqs1qOEm4MVd2wy1EEOti4tirkGhFEflJhmR6qODh/AJX32BwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaLI3+O1g4YvxVvr8V0znW6iLdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDIzNGNjOTUtODAzNC0z MDI2LWIzY2QtOGRlODZiMWZkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoJDSsRRy+bFQ3wwYQiFn7JhZMfelPOMViPMD67a7HFcFgEO/VfPuTi nIWQp2auWkfMtY7h+U1ugBr0KAtq1PykcpLjPa+zz3ndlITdoXHKv8yz98OYw7Nw p18pD19lxo1O3hWkA3XBBT62cmXn/cBn7fb3IwWckjgQFtZkM+ZIbyWMLgFQx0C9 yt2H7txG9gRTOQE42EwD2a/yj5RyLChS3LrjHZVxnAvFjOC4mBTZsnL8GvsCFZFU wyCyk5rnYYxo0dR0OwQ8VpXIKpiE+o4p4I4XBzXrfFaxkdZZzyL/NAAXXU51w/z9 1FKbDOJzKJU0qI+/Aca081/OS+o5TRs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:59 2025 by rpki-client